Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: a7DAZzYKDv+bdX9MI/50xFf02zO2+iumtRxy5XSVkOk=
Subject key identifier: 74:00:25:94:04:8C:5C:40:28:E2:96:6C:D2:EF:F3:C5:BF:88:06:4F
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 01A105B794EB3F8BDBC724F439118DBE097A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 07:01:19 +0000
Manifest this update: Sun 04 Oct 2026 07:01:19 +0000
Manifest next update: Mon 05 Oct 2026 07:01:19 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: CE438SQN80x5iPZkUW29526BgDA.asa (hash: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=)
3: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: tp5wmDPINSZGmdoqgQtDiCrKECEB6s4oaKAJwxDcFs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:94:eb:3f:8b:db:c7:24:f4:39:11:8d:be:09:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Oct 4 07:01:19 2026 GMT
Not After : Oct 5 07:01:19 2026 GMT
Subject: CN=74002594048c5c4028e2966cd2eff3c5bf88064f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:36:d6:ec:21:9d:dd:7f:2f:05:5e:cb:60:
f0:fb:82:31:c7:35:6d:60:0b:9a:7f:fe:f9:cb:39:
66:f2:df:51:ac:40:fb:32:99:ad:01:d3:63:33:a7:
1a:2b:b9:ae:59:53:94:fe:e5:b7:30:e8:21:48:3d:
97:7e:31:33:f4:ff:f5:5d:89:3f:a8:66:f3:58:a5:
e4:d7:af:28:ab:ac:78:7c:c6:7a:ed:80:df:5d:1c:
e6:4e:0c:1a:11:5e:68:52:c4:ae:ad:38:1d:a2:7e:
df:ed:8c:ea:01:6a:32:fb:29:5c:95:3a:fd:8d:23:
b1:81:ef:ef:80:15:8d:62:8a:a5:ff:7f:fd:35:99:
65:32:03:fc:89:9d:f2:5f:46:c0:2e:58:88:e1:8d:
5d:34:9f:84:ea:d0:24:19:d0:f7:e7:91:28:e1:2b:
d9:fd:99:7f:af:f9:a7:cb:5c:7f:f2:31:60:47:d8:
95:34:f1:14:6f:01:dd:26:e8:78:cc:d6:d5:3f:d7:
27:8c:8f:ed:f0:d7:82:72:14:10:f7:7a:37:e4:9a:
6b:61:e7:ae:e9:21:79:76:17:f3:f0:09:03:9b:b0:
6a:80:fd:fa:97:6f:71:ff:71:6b:55:7b:83:b3:b4:
8d:50:a6:45:42:de:58:dd:6b:51:29:71:c9:e3:d3:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:25:94:04:8C:5C:40:28:E2:96:6C:D2:EF:F3:C5:BF:88:06:4F
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:27:62:de:34:07:f9:85:52:d6:7c:f3:29:02:47:12:1d:72:
eb:bd:f4:de:25:0e:91:51:af:66:c5:3e:46:81:41:5b:b3:82:
75:fe:02:49:da:f8:d3:0c:aa:99:7d:7b:2e:fa:9c:00:a9:50:
7f:cc:52:94:78:9f:76:17:02:1c:03:bd:e9:ce:2e:15:a7:ad:
72:ba:ed:2f:67:48:5f:72:ae:49:8a:49:30:4a:18:8d:15:6e:
33:47:d0:00:40:eb:5d:23:9c:b9:97:25:ee:23:2a:d9:f2:53:
eb:77:e4:12:29:01:d8:9c:b6:c8:a6:60:43:b3:10:31:51:09:
14:f3:bb:e9:d0:ac:51:1b:9b:f3:fc:6d:09:93:0f:28:2f:7c:
1e:9d:e6:fe:c2:87:4d:d2:19:3b:bb:f8:b6:1b:d4:23:50:f3:
f7:67:9b:54:c8:39:c2:59:f0:12:60:15:5f:b8:88:73:cb:68:
09:d2:da:83:f9:6b:67:c2:59:d6:42:a1:2f:cc:c2:47:b6:f7:
56:87:ec:11:cc:c0:c1:f8:a8:60:cc:fc:d1:24:e6:db:49:44:
51:88:6f:8a:2f:af:ba:a9:07:c2:3d:03:e3:99:a4:b7:aa:10:
b5:19:26:cc:7d:f1:bd:67:a9:9d:7e:5d:fb:51:8b:ff:0e:19:
22:9b:0b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFt5TrP4vbxyT0ORGNvgl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3
NWNlMGQwHhcNMjYxMDA0MDcwMTE5WhcNMjYxMDA1MDcwMTE5WjAzMTEwLwYDVQQD
Eyg3NDAwMjU5NDA0OGM1YzQwMjhlMjk2NmNkMmVmZjNjNWJmODgwNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRc21uwhnd1/LwVey2Dw+4IxxzVt
YAuaf/75yzlm8t9RrED7MpmtAdNjM6caK7muWVOU/uW3MOghSD2XfjEz9P/1XYk/
qGbzWKXk168oq6x4fMZ67YDfXRzmTgwaEV5oUsSurTgdon7f7YzqAWoy+ylclTr9
jSOxge/vgBWNYoql/3/9NZllMgP8iZ3yX0bALliI4Y1dNJ+E6tAkGdD355Eo4SvZ
/Zl/r/mny1x/8jFgR9iVNPEUbwHdJuh4zNbVP9cnjI/t8NeCchQQ93o35JprYeeu
6SF5dhfz8AkDm7BqgP36l29x/3FrVXuDs7SNUKZFQt5Y3WtRKXHJ49MRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQAJZQEjFxAKOKWbNLv88W/iAZPMB8GA1UdIwQY
MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt
NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx
LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWydi3jQH
+YVS1nzzKQJHEh1y67303iUOkVGvZsU+RoFBW7OCdf4CSdr40wyqmX17LvqcAKlQ
f8xSlHifdhcCHAO96c4uFaetcrrtL2dIX3KuSYpJMEoYjRVuM0fQAEDrXSOcuZcl
7iMq2fJT63fkEikB2Jy2yKZgQ7MQMVEJFPO76dCsURub8/xtCZMPKC98Hp3m/sKH
TdIZO7v4thvUI1Dz92ebVMg5wlnwEmAVX7iIc8toCdLag/lrZ8JZ1kKhL8zCR7b3
VofsEczAwfioYMz80STm20lEUYhvii+vuqkHwj0D45mkt6oQtRkmzH3xvWepnX5d
+1GL/w4ZIpsLTQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:43:26 2026 by rpki-client