Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: 0I8RJBwCZlZ5O/9Sm05asoZ1cbhE8pAZP6EbC5jBWmI=
Subject key identifier: 6D:F7:18:D9:A3:75:34:B3:7F:E2:87:71:B2:E5:73:C6:7C:04:C5:F3
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 019CAC103A0772EA65C787A9E411B6701782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 1749
Signing time: Mon 02 Mar 2026 01:01:10 +0000
Manifest this update: Mon 02 Mar 2026 01:01:10 +0000
Manifest next update: Tue 03 Mar 2026 01:01:10 +0000
Files and hashes: 1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=)
2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: T0qzx6cZ6yXykYmoW2PSc7pF875jbCY2o2PJO1bTzDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3a:07:72:ea:65:c7:87:a9:e4:11:b6:70:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Mar 2 01:01:10 2026 GMT
Not After : Mar 3 01:01:10 2026 GMT
Subject: CN=6df718d9a37534b37fe28771b2e573c67c04c5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:20:36:0a:dd:ae:83:ec:e6:08:fb:12:7b:
37:0d:04:09:3b:e9:2f:60:9c:f0:5b:ab:6a:31:ea:
ad:f1:42:df:ca:28:09:7e:b7:c5:bb:1e:32:09:d4:
c2:d0:80:8a:6e:b6:0a:ce:7c:35:7e:ee:ec:d5:63:
d8:1d:f4:a4:81:48:c4:be:57:eb:fd:7c:51:f4:9b:
c3:1d:b6:01:59:47:2d:a4:58:c6:32:42:34:ca:e6:
9b:e7:ba:34:63:3c:d6:39:43:59:99:e3:fa:b0:2a:
36:90:37:33:4e:dd:f9:aa:cb:00:2e:54:28:6e:64:
7f:ed:8e:3f:1c:cf:b3:bf:fe:b6:37:15:1f:da:bc:
df:f6:d3:f6:5e:b8:32:ee:65:c9:a1:ab:6a:96:92:
d5:c4:98:20:05:27:21:07:dc:f5:49:89:b7:7d:d7:
88:64:71:8d:d7:93:d1:4e:b8:f2:f1:05:3c:43:75:
3c:6f:4a:0b:c3:8b:2a:79:3b:6b:4c:58:9b:65:9a:
66:12:f7:99:fb:77:02:6a:b5:24:a4:e2:1a:0a:c9:
5f:79:88:f4:2e:09:a4:71:88:06:c0:19:7d:49:37:
d5:b7:4c:63:c2:6b:a4:05:28:53:6f:68:59:80:ce:
07:f6:9c:67:2f:90:7f:99:2d:2b:2c:db:c2:fb:ed:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F7:18:D9:A3:75:34:B3:7F:E2:87:71:B2:E5:73:C6:7C:04:C5:F3
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4f:24:05:59:ed:c5:39:a7:e5:40:13:42:0e:88:37:d4:6b:
83:56:8a:9f:ca:17:10:8b:6d:c1:a3:4b:80:75:23:4a:1a:5c:
6c:64:45:6b:5e:fd:f3:e6:c0:b6:18:f2:54:6f:e4:81:16:d3:
ae:3d:60:cd:bd:71:44:59:e6:8b:a0:02:4a:6d:39:1d:50:83:
70:7b:12:5d:a8:1b:ad:f2:7d:91:ec:c2:12:75:cf:be:de:2e:
09:d6:41:d4:11:f7:0a:3b:c5:62:2c:34:33:29:70:0d:c3:60:
a0:30:50:d4:cb:15:24:04:05:af:f4:5a:2d:cb:57:d4:04:ea:
3e:40:c1:26:44:f6:3c:c5:8d:e4:39:d4:17:39:8c:58:95:7c:
6d:f9:e3:36:ac:54:7d:3a:dc:11:e8:47:69:39:31:09:f9:a8:
b9:5d:e3:82:12:62:d5:62:7c:37:e3:d3:24:63:32:29:64:83:
56:22:1c:0c:76:20:82:44:d3:12:55:a3:16:99:ce:c1:c8:ab:
06:88:b1:c8:93:3f:d0:64:2c:95:33:4c:72:c8:c4:3b:5f:72:
f5:29:9d:50:8f:47:dd:48:bb:c8:46:5d:1b:c1:f4:3d:ec:5f:
ea:a8:ce:9a:0e:36:42:28:f3:b8:96:14:45:9f:80:b0:7f:db:
6a:3d:80:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEDoHcuplx4ep5BG2cBeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5
ZTg5NzgwHhcNMjYwMzAyMDEwMTEwWhcNMjYwMzAzMDEwMTEwWjAzMTEwLwYDVQQD
Eyg2ZGY3MThkOWEzNzUzNGIzN2ZlMjg3NzFiMmU1NzNjNjdjMDRjNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3wgNgrdroPs5gj7Ens3DQQJO+kv
YJzwW6tqMeqt8ULfyigJfrfFux4yCdTC0ICKbrYKznw1fu7s1WPYHfSkgUjEvlfr
/XxR9JvDHbYBWUctpFjGMkI0yuab57o0YzzWOUNZmeP6sCo2kDczTt35qssALlQo
bmR/7Y4/HM+zv/62NxUf2rzf9tP2Xrgy7mXJoatqlpLVxJggBSchB9z1SYm3fdeI
ZHGN15PRTrjy8QU8Q3U8b0oLw4sqeTtrTFibZZpmEveZ+3cCarUkpOIaCslfeYj0
LgmkcYgGwBl9STfVt0xjwmukBShTb2hZgM4H9pxnL5B/mS0rLNvC++15owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG33GNmjdTSzf+KHcbLlc8Z8BMXzMB8GA1UdIwQY
MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct
YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1
LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU8kBVnt
xTmn5UATQg6IN9Rrg1aKn8oXEIttwaNLgHUjShpcbGRFa1798+bAthjyVG/kgRbT
rj1gzb1xRFnmi6ACSm05HVCDcHsSXagbrfJ9kezCEnXPvt4uCdZB1BH3CjvFYiw0
MylwDcNgoDBQ1MsVJAQFr/RaLctX1ATqPkDBJkT2PMWN5DnUFzmMWJV8bfnjNqxU
fTrcEehHaTkxCfmouV3jghJi1WJ8N+PTJGMyKWSDViIcDHYggkTTElWjFpnOwcir
BoixyJM/0GQslTNMcsjEO19y9SmdUI9H3Ui7yEZdG8H0Pexf6qjOmg42QijzuJYU
RZ+AsH/baj2AiA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:39 2026 by rpki-client