Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
File: bckzC9OJcGPbv9IOXru-UcDV0VM.mft (raw, json)
Hash identifier: Gvti2S2moLmWDMPff+XqAhAY8RM6vi07qCs8Mh22tkA=
Subject key identifier: 67:DA:90:23:FA:70:8F:26:5D:4C:0B:A2:42:FC:7A:91:09:54:C5:5C
Authority key identifier: 6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
Certificate issuer: /CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Certificate serial: 019FAA50B9CE9863A66EB50C2D76FA146812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
Manifest number: 86
Signing time: Tue 28 Jul 2026 20:00:44 +0000
Manifest this update: Tue 28 Jul 2026 20:00:44 +0000
Manifest next update: Wed 29 Jul 2026 20:00:44 +0000
Files and hashes: 1: bOqTY_nDXoESSF_447Tk5tX5AOI.roa (hash: sQ1q20oUgDBcHDCGZ4CXZ3dUrLutFstvaNLWfTrNEsw=)
2: bckzC9OJcGPbv9IOXru-UcDV0VM.crl (hash: eKhsC7WaW6NqrehGGTdhfSSBG5LppYJn4ekwVe37ENQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:b9:ce:98:63:a6:6e:b5:0c:2d:76:fa:14:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Validity
Not Before: Jul 28 20:00:44 2026 GMT
Not After : Jul 29 20:00:44 2026 GMT
Subject: CN=67da9023fa708f265d4c0ba242fc7a910954c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:7f:d8:86:f8:af:8f:d6:45:d9:27:d2:0b:
a0:bb:52:7b:24:8d:1f:76:3a:59:ff:e1:47:69:9f:
5a:6a:1b:1a:c9:55:45:77:db:17:10:4e:06:33:6d:
32:de:9d:13:55:68:7e:78:8f:58:f9:6d:5a:ec:ff:
3d:0b:4b:61:02:9c:e3:ff:be:19:01:7c:41:9e:03:
f4:2c:7c:e0:c0:a6:32:62:30:53:7b:00:5d:c0:77:
2a:d0:c3:1b:7f:03:7a:22:c0:8d:ad:a0:08:60:71:
92:f8:3f:1a:5c:b0:ef:2a:19:84:17:43:9f:19:b4:
d3:82:06:b9:35:39:5c:c2:64:22:61:de:5c:c8:21:
5d:56:9b:f2:d2:a2:f6:89:53:89:4b:23:09:a1:27:
55:80:73:e7:d6:ad:fa:01:31:66:e8:3b:54:a2:ac:
91:0a:6f:73:14:a3:81:77:d4:1f:66:5d:5e:8d:92:
8c:7d:64:37:ad:70:58:91:78:b2:9a:f6:2f:c5:64:
2c:ce:29:17:59:14:e3:e5:26:67:f1:50:33:6f:23:
9f:e0:ec:51:fa:e4:60:57:7b:03:f0:da:20:b1:4e:
dd:ea:e3:54:32:68:94:d6:53:cb:0d:e0:b8:11:90:
69:4f:57:3c:c9:f3:12:21:bf:7e:72:0a:4c:1d:f2:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:90:23:FA:70:8F:26:5D:4C:0B:A2:42:FC:7A:91:09:54:C5:5C
X509v3 Authority Key Identifier:
keyid:6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:98:a1:5e:9b:8f:5c:2c:81:00:3a:21:ab:6b:b5:38:d2:a5:
75:43:3b:6f:a1:00:d1:19:8e:92:7f:73:91:36:d6:44:6e:22:
1d:50:81:8a:79:ab:c0:15:96:52:4c:5f:8a:07:4d:ba:af:52:
ea:68:ac:3d:65:cd:c8:67:de:74:f5:16:25:16:e0:6d:c7:23:
51:74:bf:c4:8c:a8:28:cb:12:14:46:70:5c:8a:32:81:5d:e1:
17:5a:0d:66:e6:b4:e2:d4:fc:3f:a5:7f:97:d4:7a:a9:33:9f:
ca:00:c7:f0:de:b7:40:92:9b:6c:69:71:44:d3:9d:ab:68:b5:
87:c5:e8:bf:7f:39:8a:26:13:52:7c:4f:8b:2d:cd:bc:bc:7c:
7c:9e:56:b7:ee:bc:49:fc:83:02:1f:f5:63:04:8a:cc:d9:03:
d7:e6:a3:77:52:ac:e9:a0:78:15:f5:4f:18:d0:18:ea:22:83:
8c:98:f6:6f:ce:6b:4f:46:12:94:27:a5:4b:a3:5d:ea:55:4d:
d8:f5:53:d6:ab:b9:0f:53:96:27:3a:c7:7b:5a:9c:f1:68:31:
a0:f2:75:3a:f3:56:67:90:75:fc:91:4f:6c:80:53:5e:bb:9c:
d3:c3:4a:1f:6e:24:11:44:73:24:68:93:04:07:51:ce:e7:c1:
3b:7e:43:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qULnOmGOmbrUMLXb6FGgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzkzMzBiZDM4OTcwNjNkYmJmZDIwZTVlYmJiZTUxYzBk
NWQxNTMwHhcNMjYwNzI4MjAwMDQ0WhcNMjYwNzI5MjAwMDQ0WjAzMTEwLwYDVQQD
Eyg2N2RhOTAyM2ZhNzA4ZjI2NWQ0YzBiYTI0MmZjN2E5MTA5NTRjNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9x/2Ib4r4/WRdkn0gugu1J7JI0f
djpZ/+FHaZ9aahsayVVFd9sXEE4GM20y3p0TVWh+eI9Y+W1a7P89C0thApzj/74Z
AXxBngP0LHzgwKYyYjBTewBdwHcq0MMbfwN6IsCNraAIYHGS+D8aXLDvKhmEF0Of
GbTTgga5NTlcwmQiYd5cyCFdVpvy0qL2iVOJSyMJoSdVgHPn1q36ATFm6DtUoqyR
Cm9zFKOBd9QfZl1ejZKMfWQ3rXBYkXiymvYvxWQszikXWRTj5SZn8VAzbyOf4OxR
+uRgV3sD8NogsU7d6uNUMmiU1lPLDeC4EZBpT1c8yfMSIb9+cgpMHfIKpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfakCP6cI8mXUwLokL8epEJVMVcMB8GA1UdIwQY
MBaAFG3JMwvTiXBj27/SDl67vlHA1dFTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNrekM5T0pjR1BidjlJT1hydS1VY0RWMFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZjI3NmMtZWQzYy00NzM5LTliNTQt
ODM1YTVmOGE4YWUzLzEvYmNrekM5T0pjR1BidjlJT1hydS1VY0RWMFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85ZjI3NmMtZWQzYy00NzM5LTliNTQtODM1YTVmOGE4YWUz
LzEvYmNrekM5T0pjR1BidjlJT1hydS1VY0RWMFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJihXpuP
XCyBADohq2u1ONKldUM7b6EA0RmOkn9zkTbWRG4iHVCBinmrwBWWUkxfigdNuq9S
6misPWXNyGfedPUWJRbgbccjUXS/xIyoKMsSFEZwXIoygV3hF1oNZua04tT8P6V/
l9R6qTOfygDH8N63QJKbbGlxRNOdq2i1h8Xov385iiYTUnxPiy3NvLx8fJ5Wt+68
SfyDAh/1YwSKzNkD1+ajd1Ks6aB4FfVPGNAY6iKDjJj2b85rT0YSlCelS6Nd6lVN
2PVT1qu5D1OWJzrHe1qc8WgxoPJ1OvNWZ5B1/JFPbIBTXruc08NKH24kEURzJGiT
BAdRzufBO35DNg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:08 2026 by rpki-client