Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: WfwqursfEvIZ57QN8bLVK1l44svK7nrO5cEOm7K5C/s=
Subject key identifier: 56:98:30:34:D7:07:F5:93:AE:C4:E2:2B:FE:1C:3E:A6:19:E3:F1:C8
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 019F91A43A84DC4F38B6C97B0AF76B527F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:01:26 +0000
Manifest this update: Fri 24 Jul 2026 01:01:26 +0000
Manifest next update: Sat 25 Jul 2026 01:01:26 +0000
Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: i7w1wq2jXLnpsJ+cHTHDeCj9zy2sN6KYvk8RHr/sUBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:3a:84:dc:4f:38:b6:c9:7b:0a:f7:6b:52:7f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Jul 24 01:01:26 2026 GMT
Not After : Jul 25 01:01:26 2026 GMT
Subject: CN=56983034d707f593aec4e22bfe1c3ea619e3f1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:f3:fd:cb:15:a2:51:2b:89:71:35:ff:6b:
68:df:4b:c2:09:a6:d9:44:76:e3:3b:35:d4:e2:62:
5c:e7:ec:45:6b:f4:b9:3c:5c:76:7c:ba:db:1e:6b:
bc:59:14:73:bf:ec:c7:10:85:9f:b1:51:b0:47:7f:
5e:f1:6f:36:f8:0b:b4:a3:7a:a0:38:cb:d3:cb:8c:
39:d1:52:5b:11:4b:e7:da:2b:55:6f:b1:0b:c6:7a:
39:37:26:35:d8:ee:47:c4:71:56:9b:fb:a5:82:5f:
32:26:b3:c6:c8:6c:64:8d:77:ad:0a:3b:02:d3:89:
08:4d:62:4c:f1:88:0a:35:b6:50:56:31:fb:9c:8d:
fb:c4:08:43:f7:1d:76:54:0b:d2:5b:a9:cf:f4:37:
20:f5:de:8c:de:0d:cc:0b:7a:e2:02:d2:e6:e4:c7:
22:0f:f5:b6:9c:db:bf:dd:f0:47:fe:1d:9e:1f:89:
dc:3b:ba:67:de:28:10:e8:02:1d:ba:8b:fa:d5:1b:
ee:27:13:1f:e9:97:23:fb:17:35:44:07:ce:91:45:
0b:4d:ae:fd:77:85:ed:ac:32:9e:1b:8b:a0:42:29:
34:25:fe:e4:0e:c8:26:28:f0:14:04:77:fb:f4:df:
e0:e9:72:17:6a:ae:48:bd:59:58:82:b9:d2:20:46:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:30:34:D7:07:F5:93:AE:C4:E2:2B:FE:1C:3E:A6:19:E3:F1:C8
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:11:c3:9e:28:f7:54:b6:5b:0b:a0:f7:96:35:5d:ee:61:
b1:4a:c0:64:69:91:61:61:5c:2c:61:82:cc:02:c8:cf:7d:bf:
3c:82:60:e8:b9:a5:b9:5f:f7:7e:ee:15:84:83:61:db:ca:48:
94:02:c6:4e:d9:ad:a5:69:ff:fb:02:7c:fb:8b:f4:1a:0b:a3:
09:30:16:3d:d8:53:a6:7e:a3:f6:0c:c6:6f:a2:a6:10:5e:80:
4e:93:03:8d:b6:4a:67:1b:43:1f:d1:87:59:ca:5b:1e:2f:27:
bb:d2:81:40:e3:72:cd:9b:30:10:52:e9:15:9a:c4:4b:e7:aa:
b5:79:bf:c5:4b:cd:60:05:95:8b:7c:e2:98:6e:17:fc:b9:43:
1e:d6:d6:0c:74:45:8c:a5:70:a7:91:93:3a:99:51:cd:a6:0e:
d7:7d:7e:f3:2b:b7:a0:26:0f:73:bb:6b:b2:42:cc:b5:db:e4:
68:e1:45:71:37:23:1c:a6:c5:8d:c5:58:95:a1:df:75:bf:f0:
9f:cc:38:d5:9e:62:d1:73:73:8b:35:8b:2f:38:10:a0:fa:3d:
ac:0a:36:17:58:b0:42:5a:cf:b1:cc:dd:0e:3c:3a:e6:94:29:
89:0e:7d:4f:82:bc:b4:d1:9e:8e:9e:35:db:ff:78:d0:ed:5b:
5c:d6:f9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpDqE3E84tsl7CvdrUn9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5
Y2RiZmUwHhcNMjYwNzI0MDEwMTI2WhcNMjYwNzI1MDEwMTI2WjAzMTEwLwYDVQQD
Eyg1Njk4MzAzNGQ3MDdmNTkzYWVjNGUyMmJmZTFjM2VhNjE5ZTNmMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTvz/csVolEriXE1/2to30vCCabZ
RHbjOzXU4mJc5+xFa/S5PFx2fLrbHmu8WRRzv+zHEIWfsVGwR39e8W82+Au0o3qg
OMvTy4w50VJbEUvn2itVb7ELxno5NyY12O5HxHFWm/ulgl8yJrPGyGxkjXetCjsC
04kITWJM8YgKNbZQVjH7nI37xAhD9x12VAvSW6nP9Dcg9d6M3g3MC3riAtLm5Mci
D/W2nNu/3fBH/h2eH4ncO7pn3igQ6AIduov61RvuJxMf6Zcj+xc1RAfOkUULTa79
d4XtrDKeG4ugQik0Jf7kDsgmKPAUBHf79N/g6XIXaq5IvVlYgrnSIEZATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaYMDTXB/WTrsTiK/4cPqYZ4/HIMB8GA1UdIwQY
MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt
ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm
LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRsRw54o
91S2Wwug95Y1Xe5hsUrAZGmRYWFcLGGCzALIz32/PIJg6LmluV/3fu4VhINh28pI
lALGTtmtpWn/+wJ8+4v0GgujCTAWPdhTpn6j9gzGb6KmEF6ATpMDjbZKZxtDH9GH
WcpbHi8nu9KBQONyzZswEFLpFZrES+eqtXm/xUvNYAWVi3zimG4X/LlDHtbWDHRF
jKVwp5GTOplRzaYO131+8yu3oCYPc7trskLMtdvkaOFFcTcjHKbFjcVYlaHfdb/w
n8w41Z5i0XNzizWLLzgQoPo9rAo2F1iwQlrPsczdDjw65pQpiQ59T4K8tNGejp41
2/940O1bXNb5fg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:45 2026 by rpki-client