Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: gMcFc8KGUNaKdRUksbQx6UkS6485XFccZ4IUPvD7aLA=
Subject key identifier: 86:96:A8:68:69:1B:A5:70:06:2D:E2:ED:A5:11:B2:27:C0:C4:A0:A3
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 019CADFE6DCCD15F2593AE9F3F9EAB942943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 174A
Signing time: Mon 02 Mar 2026 10:00:58 +0000
Manifest this update: Mon 02 Mar 2026 10:00:58 +0000
Manifest next update: Tue 03 Mar 2026 10:00:58 +0000
Files and hashes: 1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=)
2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: mYP2ZeBv3Oii/3HliBjScMUU578QTJXJegD5Zvg4nUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:6d:cc:d1:5f:25:93:ae:9f:3f:9e:ab:94:29:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Mar 2 10:00:58 2026 GMT
Not After : Mar 3 10:00:58 2026 GMT
Subject: CN=8696a868691ba570062de2eda511b227c0c4a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:a8:e6:ba:03:3a:e6:ea:9f:b4:e0:8a:8d:
bf:6e:62:d5:28:4f:29:9e:49:e2:e1:63:ad:59:e8:
96:d7:19:3f:a7:1f:cd:4e:b9:d8:64:05:6f:61:0c:
f9:7a:da:0d:d9:0b:03:41:02:b1:57:e6:10:97:92:
29:20:f1:39:a9:52:03:d4:c7:52:6c:2e:55:3d:33:
eb:6a:a8:1b:14:fa:6a:6c:a2:50:a7:4b:e6:e1:b1:
a8:05:f7:e4:0b:94:86:c6:25:64:8e:19:cf:8e:df:
39:71:6f:04:dd:09:9f:02:d4:12:67:62:f4:5b:90:
58:6a:c1:ca:96:f5:c6:eb:02:ac:5b:6f:05:12:b1:
1c:31:28:00:99:70:e2:84:30:3e:7d:31:32:1e:fd:
8d:7c:45:b8:68:e3:48:c0:94:05:3d:e8:f9:0d:72:
55:51:90:cc:ef:32:47:27:29:47:99:12:7b:ec:be:
a9:12:6d:03:2c:92:5e:b3:75:12:1b:a8:2e:96:a6:
c9:3a:0f:db:0e:4b:f4:64:4a:8a:8f:76:a7:a3:39:
a4:4d:d4:57:f6:99:69:ca:99:c7:d8:03:78:a7:68:
d4:a3:00:24:9f:57:7f:c8:6f:a9:2a:48:ab:14:b7:
96:c6:b6:6a:64:0f:ac:cc:2b:fe:7f:eb:d7:b6:82:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:A8:68:69:1B:A5:70:06:2D:E2:ED:A5:11:B2:27:C0:C4:A0:A3
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:c0:85:09:67:ab:cb:ee:92:b0:9e:1c:72:bb:0a:00:db:
39:92:2b:e7:d9:45:f7:09:d7:09:7e:fc:81:8e:38:96:7b:82:
79:80:78:52:f2:7e:4c:c7:63:dc:b9:b9:46:66:77:72:6b:ed:
1e:9e:41:19:09:a7:a3:8a:5d:7b:7d:8b:3b:2a:39:7f:68:dd:
d1:e9:1b:dc:a1:66:07:af:1f:15:25:4c:d9:28:dc:ff:a2:d1:
59:38:be:1b:13:37:ca:48:8c:86:5d:68:f4:7d:f9:80:69:e0:
83:d2:c7:e8:a1:ff:0e:db:bb:28:e9:81:b8:c0:10:ef:ce:5f:
bb:2f:10:5f:6e:ab:e1:00:fb:30:77:19:25:06:3c:f9:f3:31:
cb:69:98:da:9d:29:f1:5c:3e:f2:8e:9d:81:c3:18:2f:af:9c:
4c:a4:40:97:4b:d2:99:40:e4:68:37:ae:8a:d7:dd:4c:7a:85:
cf:9c:2c:44:1c:94:8f:79:32:ab:0f:b4:fd:5d:29:2a:f0:22:
20:a3:5b:a2:fb:f6:27:84:46:23:5b:fe:5e:b1:86:4a:3c:55:
e0:00:1f:81:d2:b7:f7:37:da:77:b2:72:fe:44:0d:9f:ef:18:
ca:6a:f7:f7:37:f9:61:cb:70:d7:20:b4:22:c9:23:e0:6d:d6:
fe:3e:89:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/m3M0V8lk66fP56rlClDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5
ZTg5NzgwHhcNMjYwMzAyMTAwMDU4WhcNMjYwMzAzMTAwMDU4WjAzMTEwLwYDVQQD
Eyg4Njk2YTg2ODY5MWJhNTcwMDYyZGUyZWRhNTExYjIyN2MwYzRhMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOo5roDOubqn7Tgio2/bmLVKE8p
nkni4WOtWeiW1xk/px/NTrnYZAVvYQz5etoN2QsDQQKxV+YQl5IpIPE5qVID1MdS
bC5VPTPraqgbFPpqbKJQp0vm4bGoBffkC5SGxiVkjhnPjt85cW8E3QmfAtQSZ2L0
W5BYasHKlvXG6wKsW28FErEcMSgAmXDihDA+fTEyHv2NfEW4aONIwJQFPej5DXJV
UZDM7zJHJylHmRJ77L6pEm0DLJJes3USG6gulqbJOg/bDkv0ZEqKj3anozmkTdRX
9plpypnH2AN4p2jUowAkn1d/yG+pKkirFLeWxrZqZA+szCv+f+vXtoJGpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaWqGhpG6VwBi3i7aURsifAxKCjMB8GA1UdIwQY
MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct
YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1
LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp7AhQln
q8vukrCeHHK7CgDbOZIr59lF9wnXCX78gY44lnuCeYB4UvJ+TMdj3Lm5RmZ3cmvt
Hp5BGQmno4pde32LOyo5f2jd0ekb3KFmB68fFSVM2Sjc/6LRWTi+GxM3ykiMhl1o
9H35gGngg9LH6KH/Dtu7KOmBuMAQ785fuy8QX26r4QD7MHcZJQY8+fMxy2mY2p0p
8Vw+8o6dgcMYL6+cTKRAl0vSmUDkaDeuitfdTHqFz5wsRByUj3kyqw+0/V0pKvAi
IKNbovv2J4RGI1v+XrGGSjxV4AAfgdK39zfad7Jy/kQNn+8Yymr39zf5Yctw1yC0
Iskj4G3W/j6JkA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:40 2026 by rpki-client