Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: YPJ2TLszDo4n9xWGFuf+BYs9QePPryzksK+5O17kLV8=
Subject key identifier: 96:98:79:15:77:2A:7A:85:B4:6C:98:7E:01:F1:53:B2:0D:FD:FF:73
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019F8F473A451E0FA265EAA42AEDCAB1AE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 14:00:37 +0000
Manifest this update: Thu 23 Jul 2026 14:00:37 +0000
Manifest next update: Fri 24 Jul 2026 14:00:37 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: BoARwKgViEsF4ZIBQF3kwhhgMmefB26pnTk5dhocv8c=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:3a:45:1e:0f:a2:65:ea:a4:2a:ed:ca:b1:ae:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jul 23 14:00:37 2026 GMT
Not After : Jul 24 14:00:37 2026 GMT
Subject: CN=96987915772a7a85b46c987e01f153b20dfdff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:aa:83:46:d0:81:fd:40:34:87:12:86:e1:
e8:ca:5c:67:39:63:46:75:19:37:39:02:cf:af:da:
fe:61:4d:2a:86:61:cc:bc:ab:55:f9:c7:4f:6b:00:
ed:9e:a7:dd:e3:83:03:5d:c3:5c:9d:a5:f8:10:7d:
bc:53:94:13:4f:84:81:c4:63:f9:58:c4:d9:3e:19:
63:a0:75:c9:83:54:02:a2:06:ec:e3:62:79:f3:08:
8f:77:1f:16:6f:5a:fe:eb:1c:6e:e6:7a:19:dd:32:
08:cd:16:db:1b:92:76:c8:e0:34:75:56:91:f5:2d:
9f:f9:26:07:13:48:3a:42:81:a6:44:11:60:28:51:
dd:19:5c:42:23:dc:fe:a0:2f:38:98:2e:6f:83:c6:
d4:87:f9:b4:82:f3:3d:ae:79:44:9e:09:96:e3:18:
9d:58:fe:6e:df:93:d5:08:35:0f:b6:0e:5c:a2:bc:
da:77:3c:9b:2f:3a:bb:31:ac:f7:94:8b:16:6d:2e:
62:32:58:8c:50:c6:fe:3e:e9:e1:07:87:d5:61:d6:
1c:23:59:f8:1e:df:04:79:03:fc:d2:18:bc:5b:df:
1a:3e:ff:e9:dc:dd:ab:05:83:58:b2:f1:87:65:70:
be:ed:1d:0e:5b:6c:2d:d5:5b:fd:de:b4:05:db:09:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:79:15:77:2A:7A:85:B4:6C:98:7E:01:F1:53:B2:0D:FD:FF:73
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ae:f7:e8:fd:c4:ca:36:66:c5:69:83:7e:ce:97:ff:06:8b:
af:c2:67:5d:65:22:36:96:5c:5e:3d:89:38:04:ac:25:e2:a0:
b9:bb:04:89:23:60:b1:42:24:a0:0e:3b:80:bb:ba:81:c0:4b:
13:5e:d7:d1:37:69:e2:39:f2:c7:b9:af:24:0e:5e:a1:65:d1:
9a:e1:6e:55:db:5a:3f:a8:40:4b:d9:fa:7c:7b:42:1e:60:ea:
9e:70:7e:87:11:99:09:34:af:1d:74:f4:fb:70:85:82:ab:b7:
4e:1a:6e:52:66:5a:38:9e:c9:1f:85:dd:29:e0:73:1a:9a:e7:
95:15:eb:67:cc:5f:fe:d1:8f:ea:41:e7:b4:77:48:f4:51:3b:
b6:c1:78:6f:97:52:96:3d:9b:3f:f1:b3:98:db:e8:6f:5d:c9:
fe:4e:e9:85:d9:a0:9e:a1:47:ce:32:9c:8f:cf:6c:0a:ea:32:
62:f6:73:47:db:23:e0:d4:01:b8:90:b0:c8:25:22:23:5b:df:
61:5f:17:59:0a:7f:7f:d1:0f:35:da:e2:05:a6:00:fd:78:9d:
08:82:3f:a7:32:5b:dd:c0:40:4f:13:eb:ed:65:f1:a0:c1:13:
d3:c9:eb:3c:42:55:d8:39:e7:90:bb:fe:3f:a1:bd:19:0e:35:
42:14:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:43 2026 by rpki-client