Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
File: 6O49Zbp3JHe5IjKroRTJtnDa38A.mft (raw, json)
Hash identifier: vAtO4+L6ZQnQ1OMuWLOGoBtRkODib3NEHJY76/nuNUI=
Subject key identifier: BD:D1:0E:53:71:0F:60:51:0D:06:FC:58:F8:63:2F:DF:C1:0B:C5:67
Authority key identifier: E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
Certificate issuer: /CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Certificate serial: 019F8F7DDB4C9A41AFBA32823607A432D87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
Manifest number: 035E
Signing time: Thu 23 Jul 2026 15:00:17 +0000
Manifest this update: Thu 23 Jul 2026 15:00:17 +0000
Manifest next update: Fri 24 Jul 2026 15:00:17 +0000
Files and hashes: 1: 6O49Zbp3JHe5IjKroRTJtnDa38A.crl (hash: Y0FRcEMURTRaJU/bHCa1fmjNr0BJLWhU6sIP1yQZoAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:db:4c:9a:41:af:ba:32:82:36:07:a4:32:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Validity
Not Before: Jul 23 15:00:17 2026 GMT
Not After : Jul 24 15:00:17 2026 GMT
Subject: CN=bdd10e53710f60510d06fc58f8632fdfc10bc567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:cd:c4:0b:cc:a8:79:c5:a9:fa:fc:c7:f3:
43:43:66:e4:30:b8:70:01:8c:18:2a:de:e6:43:10:
fd:e4:b9:a0:c2:08:7e:5f:1f:ba:94:f9:95:46:ae:
09:46:62:25:9c:6d:8d:1d:52:82:56:25:93:85:90:
b2:78:cd:96:ef:63:d7:b2:bf:e7:bd:25:67:ec:32:
2d:c4:f6:b8:b1:b7:75:f6:bc:04:8c:f0:9e:a0:9b:
1c:9e:ad:96:ea:a0:77:51:51:61:18:a1:dc:a4:03:
b5:5f:e4:21:5f:12:37:f6:aa:df:47:db:60:71:0c:
98:5a:90:0d:16:26:52:6a:2e:d9:22:20:9b:4e:29:
df:76:ec:9c:53:d6:69:fe:a3:78:17:4a:88:1d:63:
91:af:30:0d:e8:60:be:28:3e:74:1f:32:34:10:5e:
2d:3f:51:2b:94:89:30:8f:2a:36:89:cd:39:27:cd:
82:06:26:59:0c:ff:de:24:84:96:f9:0f:79:45:3a:
73:cb:32:47:75:fe:dd:7e:6a:f5:e4:d3:e9:d9:33:
53:ec:ea:8d:31:b5:b5:19:2f:5e:a9:ed:ac:34:81:
c3:a7:50:71:6c:bf:d2:f3:b9:ed:3a:60:e5:35:74:
95:2f:a4:ba:bc:fb:9d:67:11:4c:ac:98:50:a1:c5:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D1:0E:53:71:0F:60:51:0D:06:FC:58:F8:63:2F:DF:C1:0B:C5:67
X509v3 Authority Key Identifier:
keyid:E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fd:ca:b6:62:a6:7c:d1:22:3f:0e:82:80:d7:f2:5e:d8:b7:
e8:43:22:02:e6:50:e4:62:45:a1:d5:f7:46:b0:d8:60:21:02:
1b:e0:56:39:34:88:87:d0:ee:75:24:f6:d6:f6:c0:bc:3a:83:
de:f9:43:4e:3c:80:30:dc:df:e5:35:f5:bb:ec:7b:84:c5:61:
6a:00:80:aa:9b:11:9c:75:91:d4:26:22:6a:1a:67:f7:29:6f:
e0:ca:10:de:12:c5:4e:bf:d0:7e:82:f0:26:6c:97:21:f6:e8:
79:0e:9e:f8:e6:28:af:27:65:e0:6c:8c:1a:62:d2:aa:f2:2f:
cb:2c:fe:cc:dd:7d:25:a0:85:93:c8:d4:6b:c5:fa:d3:11:de:
c3:6f:57:ab:cd:ae:90:6c:8e:44:5b:f4:6f:64:91:e6:9f:7f:
ab:ff:9a:9c:a8:1e:ea:63:aa:48:52:8e:85:bb:e8:1c:58:d2:
1e:93:d6:ea:2b:df:0e:9b:0d:47:10:9b:c2:bb:04:d5:c9:d1:
05:7c:06:97:f8:3e:b9:83:24:03:50:3d:a8:ec:d4:a1:71:9b:
6f:fd:31:b5:f3:3f:a9:c1:b7:a7:cf:cc:de:4c:4b:32:cd:d7:
5d:85:38:dc:62:0d:9d:f8:bb:f4:b2:69:d6:56:11:bb:9f:64:
9f:39:e3:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfdtMmkGvujKCNgekMth/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWUzZDY1YmE3NzI0NzdiOTIyMzJhYmExMTRjOWI2NzBk
YWRmYzAwHhcNMjYwNzIzMTUwMDE3WhcNMjYwNzI0MTUwMDE3WjAzMTEwLwYDVQQD
EyhiZGQxMGU1MzcxMGY2MDUxMGQwNmZjNThmODYzMmZkZmMxMGJjNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbDNxAvMqHnFqfr8x/NDQ2bkMLhw
AYwYKt7mQxD95Lmgwgh+Xx+6lPmVRq4JRmIlnG2NHVKCViWThZCyeM2W72PXsr/n
vSVn7DItxPa4sbd19rwEjPCeoJscnq2W6qB3UVFhGKHcpAO1X+QhXxI39qrfR9tg
cQyYWpANFiZSai7ZIiCbTinfduycU9Zp/qN4F0qIHWORrzAN6GC+KD50HzI0EF4t
P1ErlIkwjyo2ic05J82CBiZZDP/eJISW+Q95RTpzyzJHdf7dfmr15NPp2TNT7OqN
MbW1GS9eqe2sNIHDp1BxbL/S87ntOmDlNXSVL6S6vPudZxFMrJhQocXaowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3RDlNxD2BRDQb8WPhjL9/BC8VnMB8GA1UdIwQY
MBaAFOjuPWW6dyR3uSIyq6EUybZw2t/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk80OVpicDNKSGU1SWpLcm9SVEp0bkRhMzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80YmIwMzgtZWNlMS00NTNmLWJjOGIt
NjVkYWQ0MTAzN2E1LzEvNk80OVpicDNKSGU1SWpLcm9SVEp0bkRhMzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80YmIwMzgtZWNlMS00NTNmLWJjOGItNjVkYWQ0MTAzN2E1
LzEvNk80OVpicDNKSGU1SWpLcm9SVEp0bkRhMzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqP3KtmKm
fNEiPw6CgNfyXti36EMiAuZQ5GJFodX3RrDYYCECG+BWOTSIh9DudST21vbAvDqD
3vlDTjyAMNzf5TX1u+x7hMVhagCAqpsRnHWR1CYiahpn9ylv4MoQ3hLFTr/QfoLw
JmyXIfboeQ6e+OYorydl4GyMGmLSqvIvyyz+zN19JaCFk8jUa8X60xHew29Xq82u
kGyORFv0b2SR5p9/q/+anKge6mOqSFKOhbvoHFjSHpPW6ivfDpsNRxCbwrsE1cnR
BXwGl/g+uYMkA1A9qOzUoXGbb/0xtfM/qcG3p8/M3kxLMs3XXYU43GINnfi79LJp
1lYRu59knznjaA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:39 2026 by rpki-client