Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: lvoApawsO4esQXEctXcuKZYuIKEcKYFyievDNTTv410=
Subject key identifier: 65:10:FA:49:BE:78:1A:B3:89:9A:D6:C5:D1:90:E1:B7:59:E5:5C:BE
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019D99624A473C077AAA38116078DDE03AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 16A6
Signing time: Fri 17 Apr 2026 03:00:48 +0000
Manifest this update: Fri 17 Apr 2026 03:00:48 +0000
Manifest next update: Sat 18 Apr 2026 03:00:48 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: zIHmI6sKzAaqPhCDWB3VxQBFzD6CNPXi9V2VCXyT/T0=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:4a:47:3c:07:7a:aa:38:11:60:78:dd:e0:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Apr 17 03:00:48 2026 GMT
Not After : Apr 18 03:00:48 2026 GMT
Subject: CN=6510fa49be781ab3899ad6c5d190e1b759e55cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:d9:43:7c:03:66:92:be:51:75:1a:c4:ec:
30:3a:40:8f:41:8f:50:bd:a3:15:05:22:d8:55:22:
be:15:74:0c:e9:63:72:d2:9c:3b:43:91:f4:81:db:
d6:17:23:32:66:ef:ee:83:07:d2:f1:af:fa:12:11:
49:e1:4c:4c:e0:aa:5d:7f:5a:e3:ef:dd:f0:d8:f2:
33:38:bf:fa:90:6e:ea:a9:1d:d3:c0:da:af:b2:d2:
d1:4a:7c:3a:9f:56:c0:8f:72:db:30:73:24:20:fe:
10:e5:9b:d1:85:6c:c6:ca:db:8f:de:fc:7f:cd:47:
a1:02:a2:21:bb:c9:30:66:3b:c3:dd:c2:4a:3c:cf:
5d:9e:ea:37:96:12:7d:f7:72:0a:f2:75:f6:26:d6:
7f:3e:bc:18:cb:ed:0b:f0:7d:68:d8:07:d2:a8:6e:
da:ab:21:ab:e1:64:65:89:4a:5f:f8:db:f5:88:95:
bd:8d:83:1e:35:88:18:7b:65:04:f6:82:54:d5:83:
67:7e:1d:33:05:07:98:8d:3d:cf:70:04:f2:c2:32:
17:3b:0a:94:1b:ea:ec:59:6a:5f:6b:6a:eb:58:ee:
4c:95:a8:ac:f8:01:e5:9d:9c:4d:43:02:5c:43:10:
50:5b:7c:9a:6a:9f:c8:0e:6f:f5:45:51:b8:5a:ab:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:FA:49:BE:78:1A:B3:89:9A:D6:C5:D1:90:E1:B7:59:E5:5C:BE
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2b:12:03:c7:71:bd:4c:83:93:90:be:f3:d2:30:c8:3e:31:
e1:1e:80:33:e7:20:bd:c6:e4:b2:79:b0:11:4d:7b:c7:e5:64:
08:ad:d8:0f:1a:b4:0f:ef:49:f9:55:8c:a2:e5:c6:f6:4a:02:
3f:50:c5:5b:b3:b5:8f:72:2d:54:06:31:5f:57:d9:42:ba:59:
70:aa:37:7b:db:a9:10:2e:95:7b:7f:1b:36:64:5d:33:ad:5f:
19:30:dd:e0:c3:37:d8:b7:24:3f:b7:34:81:86:29:24:0d:98:
00:a8:1a:50:67:77:26:bd:ee:70:4f:04:13:e5:56:6e:6a:51:
5d:52:37:a1:5a:76:3d:79:64:0b:bb:09:40:e5:b5:1c:66:f5:
bf:29:2e:d5:e3:1f:86:08:0d:68:b1:d0:79:66:21:21:86:16:
71:c2:bf:c8:03:a0:6e:8d:08:c8:93:60:54:b8:76:e7:a4:99:
2f:b0:8b:32:e6:69:ad:bd:36:84:70:e8:c7:06:61:40:cf:47:
b7:16:9a:44:a1:66:9f:59:84:e6:28:70:4d:cf:5d:43:2c:37:
a7:c4:17:a4:7c:33:04:80:da:19:46:88:ed:19:a2:5c:f4:ce:
a6:b2:e5:33:5c:6d:e0:50:3c:03:de:52:4e:47:fd:46:cf:f4:
1c:a9:98:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYkpHPAd6qjgRYHjd4DryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjYwNDE3MDMwMDQ4WhcNMjYwNDE4MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg2NTEwZmE0OWJlNzgxYWIzODk5YWQ2YzVkMTkwZTFiNzU5ZTU1Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDvZQ3wDZpK+UXUaxOwwOkCPQY9Q
vaMVBSLYVSK+FXQM6WNy0pw7Q5H0gdvWFyMyZu/ugwfS8a/6EhFJ4UxM4Kpdf1rj
793w2PIzOL/6kG7qqR3TwNqvstLRSnw6n1bAj3LbMHMkIP4Q5ZvRhWzGytuP3vx/
zUehAqIhu8kwZjvD3cJKPM9dnuo3lhJ993IK8nX2JtZ/PrwYy+0L8H1o2AfSqG7a
qyGr4WRliUpf+Nv1iJW9jYMeNYgYe2UE9oJU1YNnfh0zBQeYjT3PcATywjIXOwqU
G+rsWWpfa2rrWO5Mlais+AHlnZxNQwJcQxBQW3yaap/IDm/1RVG4Wqu5cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUQ+km+eBqziZrWxdGQ4bdZ5Vy+MB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCsSA8dx
vUyDk5C+89IwyD4x4R6AM+cgvcbksnmwEU17x+VkCK3YDxq0D+9J+VWMouXG9koC
P1DFW7O1j3ItVAYxX1fZQrpZcKo3e9upEC6Ve38bNmRdM61fGTDd4MM32LckP7c0
gYYpJA2YAKgaUGd3Jr3ucE8EE+VWbmpRXVI3oVp2PXlkC7sJQOW1HGb1vyku1eMf
hggNaLHQeWYhIYYWccK/yAOgbo0IyJNgVLh256SZL7CLMuZprb02hHDoxwZhQM9H
txaaRKFmn1mE5ihwTc9dQyw3p8QXpHwzBIDaGUaI7RmiXPTOprLlM1xt4FA8A95S
Tkf9Rs/0HKmYtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:36 2026 by rpki-client