Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier: nTSy6ly04inO6mDb1SizQC/plDdql9ifFQYyUlMbOJo=
Subject key identifier: 6A:1A:16:DC:B2:8B:B5:1D:7C:D5:5E:86:31:07:D5:D4:8E:75:2A:24
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer: /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial: 019F91DA3D77EB73B3006E21222E1D3D48F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number: 018B
Signing time: Fri 24 Jul 2026 02:00:26 +0000
Manifest this update: Fri 24 Jul 2026 02:00:26 +0000
Manifest next update: Sat 25 Jul 2026 02:00:26 +0000
Files and hashes: 1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: q8imINePo/WM0gHJKD+Qc7nWGxXE6KHnKrZVyg48Yw0=)
2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:3d:77:eb:73:b3:00:6e:21:22:2e:1d:3d:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Validity
Not Before: Jul 24 02:00:26 2026 GMT
Not After : Jul 25 02:00:26 2026 GMT
Subject: CN=6a1a16dcb28bb51d7cd55e863107d5d48e752a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:82:4f:41:33:29:a5:aa:ac:6e:4f:65:5a:
99:c2:9e:a0:3b:08:da:8c:3d:6f:3e:ad:86:f0:b3:
8d:ef:af:1d:0c:51:0b:57:20:e7:67:ff:72:c7:cf:
fc:41:9d:2f:47:89:5a:0a:e1:b7:c9:8a:31:f3:d2:
dd:29:0f:c6:51:2b:6f:85:6c:af:e2:13:72:83:02:
4d:9a:a7:a9:37:d8:6f:ad:0a:55:70:a0:ce:9b:32:
ce:3d:51:e9:d3:2d:d6:0c:d2:77:13:14:b8:51:79:
13:b0:79:3d:b9:0d:43:d8:49:11:6b:1e:5b:0c:f6:
4f:28:0f:bf:bd:0e:a5:f7:1b:02:c0:8e:52:a3:0f:
0a:ad:c9:73:a5:54:49:54:d0:4e:c7:b5:db:72:ad:
b8:30:14:e6:ba:fb:27:95:5b:82:45:63:68:75:b6:
27:7a:10:19:e9:b8:54:0d:f0:07:71:0f:b5:06:db:
78:72:a0:13:84:d5:05:52:ee:8e:16:36:2e:6b:c1:
17:ef:f6:fc:f8:82:2b:3f:03:08:4a:2f:c1:50:b6:
b3:6b:28:b6:bb:6b:49:2e:94:ba:3c:4a:a0:29:06:
1a:2a:f3:82:b8:3b:6b:b5:6f:bb:8e:0c:26:f8:86:
09:76:87:a0:d8:e7:70:35:ae:67:86:2c:e7:f1:68:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1A:16:DC:B2:8B:B5:1D:7C:D5:5E:86:31:07:D5:D4:8E:75:2A:24
X509v3 Authority Key Identifier:
keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:12:d1:e6:f1:00:c6:7c:5f:e3:de:9c:97:83:5d:ee:ee:db:
0f:48:98:e5:b4:37:77:38:f6:b6:0b:19:5c:6d:d6:47:1f:88:
9c:4c:92:e7:c8:d3:52:10:cd:19:71:8c:9f:58:6c:a9:14:1a:
46:13:0f:9d:55:02:44:74:9e:fd:50:de:c1:3b:76:7d:2b:69:
b0:77:27:0c:7d:3b:2b:9c:30:72:e7:98:1d:c5:7a:f1:53:4e:
a1:5f:e2:ea:1d:02:11:23:7d:ce:14:b5:f8:76:77:66:3a:2a:
7b:d6:59:5e:f6:9a:0b:82:4b:e7:93:71:d5:4a:48:d4:43:bc:
de:4b:59:18:da:54:ee:38:4b:fa:75:a8:48:52:a4:1b:78:07:
a4:84:af:e0:2b:91:ba:9f:f9:79:fa:9f:b7:b9:86:be:dc:c4:
0b:45:16:30:7d:81:b8:0e:39:6c:60:38:e6:92:5a:21:0e:c1:
1f:1b:86:3a:3a:be:2e:4e:cd:48:a1:f7:24:d4:31:3a:27:6c:
cb:fa:04:9e:c7:54:3e:e3:bd:dd:bf:c8:87:c0:7b:86:bf:1f:
a2:2b:bb:af:a5:51:9b:cd:c5:6c:49:20:31:33:64:18:49:f2:
a2:89:29:58:8c:c2:0d:45:19:7d:74:d1:ff:60:c5:86:73:47:
5e:29:f3:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2j1363OzAG4hIi4dPUj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjBjNzdmZmQ2ZjAwZTgyZGJkOWRhZGE1MDExOGQ0MTNh
ZjIwODAwHhcNMjYwNzI0MDIwMDI2WhcNMjYwNzI1MDIwMDI2WjAzMTEwLwYDVQQD
Eyg2YTFhMTZkY2IyOGJiNTFkN2NkNTVlODYzMTA3ZDVkNDhlNzUyYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6WCT0EzKaWqrG5PZVqZwp6gOwja
jD1vPq2G8LON768dDFELVyDnZ/9yx8/8QZ0vR4laCuG3yYox89LdKQ/GUStvhWyv
4hNygwJNmqepN9hvrQpVcKDOmzLOPVHp0y3WDNJ3ExS4UXkTsHk9uQ1D2EkRax5b
DPZPKA+/vQ6l9xsCwI5Sow8KrclzpVRJVNBOx7Xbcq24MBTmuvsnlVuCRWNodbYn
ehAZ6bhUDfAHcQ+1Btt4cqAThNUFUu6OFjYua8EX7/b8+IIrPwMISi/BULazayi2
u2tJLpS6PEqgKQYaKvOCuDtrtW+7jgwm+IYJdoeg2OdwNa5nhizn8WhjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoaFtyyi7UdfNVehjEH1dSOdSokMB8GA1UdIwQY
MBaAFAWwx3/9bwDoLb2draUBGNQTryCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mNjhiMjYtZjg4My00NTU5LTg3NDUt
NTAwZDNiOWNkY2RhLzEvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mNjhiMjYtZjg4My00NTU5LTg3NDUtNTAwZDNiOWNkY2Rh
LzEvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARLR5vEA
xnxf496cl4Nd7u7bD0iY5bQ3dzj2tgsZXG3WRx+InEyS58jTUhDNGXGMn1hsqRQa
RhMPnVUCRHSe/VDewTt2fStpsHcnDH07K5wwcueYHcV68VNOoV/i6h0CESN9zhS1
+HZ3Zjoqe9ZZXvaaC4JL55Nx1UpI1EO83ktZGNpU7jhL+nWoSFKkG3gHpISv4CuR
up/5efqft7mGvtzEC0UWMH2BuA45bGA45pJaIQ7BHxuGOjq+Lk7NSKH3JNQxOids
y/oEnsdUPuO93b/Ih8B7hr8foiu7r6VRm83FbEkgMTNkGEnyookpWIzCDUUZfXTR
/2DFhnNHXinz4w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:47 2026 by rpki-client