Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: phbjecBokZIFZPDwXzfoJmj9lJfOHcyqN2V8ktqfvrU=
Subject key identifier: 69:41:A6:AA:B5:66:A6:A8:76:90:40:73:2F:2D:DF:42:D8:16:F9:81
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 019F95B75BCE28B12041D215989F4C586A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 1404
Signing time: Fri 24 Jul 2026 20:00:49 +0000
Manifest this update: Fri 24 Jul 2026 20:00:49 +0000
Manifest next update: Sat 25 Jul 2026 20:00:49 +0000
Files and hashes: 1: pBZly4FM6dBwlJDuWkuLuvUQhJg.roa (hash: o71HDV8s+9P3IJ7RipmOqIZNCQQ65Mxlc2gRRdwJM+c=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: KK26FwWxHRVylXjDaog2ZRI0hUpsg/6SO8r3xF20qCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:5b:ce:28:b1:20:41:d2:15:98:9f:4c:58:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Jul 24 20:00:49 2026 GMT
Not After : Jul 25 20:00:49 2026 GMT
Subject: CN=6941a6aab566a6a8769040732f2ddf42d816f981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:d5:94:08:8d:25:dc:96:d9:d1:93:e7:c6:
12:78:25:6e:ff:c6:b3:3d:93:48:4d:05:5c:d2:57:
52:3a:87:15:f8:c1:fc:6a:0e:06:37:e5:b3:e1:0e:
21:0b:cc:5a:ba:f3:08:69:02:33:56:0b:a8:73:ad:
60:20:c6:cf:e8:43:42:0f:12:29:91:1c:86:57:52:
c4:bc:ad:16:01:5a:c2:96:d8:0e:4e:12:0d:8a:df:
9e:67:22:17:f0:35:8a:4f:13:2e:3b:cc:53:98:c0:
b2:7f:d8:fe:1f:e3:88:86:df:ca:6c:ec:5c:61:4a:
dd:f8:85:44:49:f6:04:dc:6a:6c:fc:44:15:23:1a:
0f:6d:7f:36:04:60:09:79:83:9e:69:0e:8d:8c:2c:
88:00:f7:ce:1c:e8:c7:40:97:13:1c:2b:cb:53:7c:
22:a3:ad:ae:6c:23:7f:b1:d1:71:31:a0:6f:a3:18:
07:2c:5e:11:38:cc:5c:f3:8b:52:5d:0b:37:a8:77:
9d:db:22:eb:a2:2f:2f:79:6d:86:bd:fd:88:1b:09:
bf:2d:d8:31:64:ce:ac:c5:80:0e:90:a7:fc:8b:9f:
15:de:8b:4c:27:d1:81:f7:5e:ad:60:75:a8:47:71:
01:9f:c4:52:e7:45:55:69:47:f0:c4:26:46:a7:21:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:A6:AA:B5:66:A6:A8:76:90:40:73:2F:2D:DF:42:D8:16:F9:81
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:05:cb:f2:15:c1:57:d1:e5:82:bb:20:66:56:ca:0e:9c:
22:a3:d4:0a:9b:7d:69:b1:68:bb:f3:a6:aa:47:dd:68:ef:ba:
38:10:c1:b5:77:8a:dd:f1:5d:cc:66:3f:3b:e2:0e:9f:d1:cd:
d7:9e:a0:24:f8:ca:8c:e1:1c:28:fa:02:33:fb:19:6c:e7:be:
e3:63:34:2a:57:fb:07:2b:1a:de:a3:d9:04:fe:72:f0:f8:07:
f3:9a:e8:53:31:9e:19:d8:64:16:d5:87:cf:37:0b:03:38:43:
c5:9e:0c:5f:f5:35:69:a3:f4:1b:5c:e2:fb:65:f9:5a:18:7c:
ee:ae:d6:90:6a:56:58:7a:cb:46:51:b3:b1:a1:2b:23:23:a9:
f4:01:b6:dd:44:78:1f:a8:ee:bf:53:a8:99:57:69:3d:bf:a0:
70:92:49:0c:ca:8f:94:e1:5c:c7:55:10:6e:07:61:0e:dc:3d:
bb:a9:71:b0:f8:d9:81:d5:84:34:95:3a:92:66:00:40:30:d2:
bb:98:fe:fb:7c:87:9b:38:e0:a2:b4:92:2c:61:04:4c:5a:d3:
53:ab:d9:9a:58:44:26:ac:a7:1b:6c:92:5b:e1:d4:53:a9:17:
5a:a6:c1:59:1b:e4:ba:04:c8:c3:17:df:38:11:dd:35:94:54:
6b:00:3b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt1vOKLEgQdIVmJ9MWGomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTZiYTk4YzY3NDVhNjMwMjZkNzhmYzI4NDcyMjM5OWQy
ZWI4NDkwHhcNMjYwNzI0MjAwMDQ5WhcNMjYwNzI1MjAwMDQ5WjAzMTEwLwYDVQQD
Eyg2OTQxYTZhYWI1NjZhNmE4NzY5MDQwNzMyZjJkZGY0MmQ4MTZmOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+7VlAiNJdyW2dGT58YSeCVu/8az
PZNITQVc0ldSOocV+MH8ag4GN+Wz4Q4hC8xauvMIaQIzVguoc61gIMbP6ENCDxIp
kRyGV1LEvK0WAVrCltgOThINit+eZyIX8DWKTxMuO8xTmMCyf9j+H+OIht/KbOxc
YUrd+IVESfYE3Gps/EQVIxoPbX82BGAJeYOeaQ6NjCyIAPfOHOjHQJcTHCvLU3wi
o62ubCN/sdFxMaBvoxgHLF4ROMxc84tSXQs3qHed2yLroi8veW2Gvf2IGwm/Ldgx
ZM6sxYAOkKf8i58V3otMJ9GB916tYHWoR3EBn8RS50VVaUfwxCZGpyEgCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlBpqq1ZqaodpBAcy8t30LYFvmBMB8GA1UdIwQY
MBaAFL9WupjGdFpjAm14/ChHIjmdLrhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYt
NTg3ZmM4NGFjZWZlLzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYtNTg3ZmM4NGFjZWZl
LzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaQFy/IV
wVfR5YK7IGZWyg6cIqPUCpt9abFou/OmqkfdaO+6OBDBtXeK3fFdzGY/O+IOn9HN
156gJPjKjOEcKPoCM/sZbOe+42M0Klf7Bysa3qPZBP5y8PgH85roUzGeGdhkFtWH
zzcLAzhDxZ4MX/U1aaP0G1zi+2X5Whh87q7WkGpWWHrLRlGzsaErIyOp9AG23UR4
H6juv1OomVdpPb+gcJJJDMqPlOFcx1UQbgdhDtw9u6lxsPjZgdWENJU6kmYAQDDS
u5j++3yHmzjgorSSLGEETFrTU6vZmlhEJqynG2ySW+HUU6kXWqbBWRvkugTIwxff
OBHdNZRUawA7mg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:52:11 2026 by rpki-client