Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: L9ckE+VGtE3Sit0mHyAUTo7yd/KdoGWvX6G8jfOjRVE=
Subject key identifier: 4D:A3:91:2F:58:1E:76:7D:C7:80:EC:5F:C0:22:C5:60:14:A4:23:0D
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 01A0C10D2C0A19875C3D59818D0A94BA3FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 0662
Signing time: Sun 20 Sep 2026 23:01:00 +0000
Manifest this update: Sun 20 Sep 2026 23:01:00 +0000
Manifest next update: Mon 21 Sep 2026 23:01:00 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: 0OfcT79RnwGO74IvN1LeWgi7ZMTV3s639RcGgJa6eJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:2c:0a:19:87:5c:3d:59:81:8d:0a:94:ba:3f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Sep 20 23:01:00 2026 GMT
Not After : Sep 21 23:01:00 2026 GMT
Subject: CN=4da3912f581e767dc780ec5fc022c56014a4230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:22:10:eb:b5:1e:bc:9d:8a:05:28:22:18:
6a:2b:30:ef:26:96:a5:45:58:73:1d:d2:5a:04:4a:
93:d5:8a:7d:a9:88:a2:66:f9:b2:cf:89:b5:31:2f:
7f:f2:e7:ca:49:f3:c1:fc:06:84:df:86:11:d8:9b:
cb:20:c2:f8:d5:25:64:e7:72:22:e8:1c:46:0b:17:
39:fc:6b:cd:1b:19:5e:af:3f:c4:a4:e5:86:b2:93:
54:db:41:f0:6b:ca:5c:f0:ca:40:74:2d:10:a6:20:
f8:5a:3b:e1:0e:52:d4:7b:e4:da:6b:90:d1:78:30:
e6:47:94:ca:6b:23:7c:b6:2e:02:e1:2f:bf:28:ab:
f4:67:0e:32:00:44:0f:62:e2:f9:ac:5e:32:85:7d:
ad:31:94:ac:79:f3:2f:26:14:e9:0f:7d:96:53:2d:
d4:5a:38:ad:11:b7:8e:c7:f9:09:0d:5f:81:82:93:
ef:e7:42:20:6d:d3:fa:5e:36:bc:38:8a:1b:7c:52:
20:eb:97:cf:d0:c1:55:a7:9f:2b:98:d9:29:87:ab:
7c:97:1f:61:bb:27:86:2f:36:a2:4f:73:9c:d7:3f:
99:a7:d4:db:a6:4c:1a:e8:1a:6c:12:6c:eb:f2:c3:
37:f3:e0:73:3c:40:0c:df:7e:53:2c:52:c1:5a:d4:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:91:2F:58:1E:76:7D:C7:80:EC:5F:C0:22:C5:60:14:A4:23:0D
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2e:45:67:e3:b3:5c:8c:08:fc:20:5a:b1:d2:00:2a:c1:dc:
2e:a6:f3:0f:70:54:b4:8f:08:2c:f7:d4:e6:19:5e:e5:73:4c:
65:ff:3f:41:c0:9f:f6:58:7a:15:bf:61:ad:b5:d5:2d:c6:94:
e5:23:9b:98:c4:99:8d:03:1c:ac:47:91:29:cb:b6:1f:ca:4c:
be:37:92:9d:1c:ed:ac:a9:1f:4c:fa:1b:b2:56:c9:16:3d:54:
cb:3b:e7:7b:e3:7a:bc:40:a4:cf:ed:19:a1:70:f4:01:5c:63:
cb:15:0e:58:0d:13:92:d5:99:5b:4e:81:ca:db:06:f6:9a:6a:
aa:e6:61:59:6c:bf:0c:04:c4:be:10:ab:24:93:85:1b:e0:70:
99:c4:54:be:a6:5e:e5:76:18:01:d3:52:16:8f:d8:7a:cc:d9:
c7:10:5b:2a:8e:f8:27:8e:4a:6c:9a:30:1b:5b:e6:01:40:08:
2c:ec:09:9f:24:c6:0f:85:db:5f:2e:68:35:50:9e:cb:67:61:
97:21:ce:87:2c:93:68:fa:82:43:28:26:17:99:07:5d:77:bf:
ec:6e:73:5d:f3:a0:15:91:36:2e:32:f6:3f:15:62:d6:e5:78:
cc:89:ea:28:5b:b3:bb:c9:21:84:ae:8b:17:1c:b1:40:05:90:
87:88:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:27:49 2026 by rpki-client