Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier: 4g0kYIu1HWY1idk0eY4zlYzXqBWpSPmtkep8GFU5IGY=
Subject key identifier: 01:71:82:F2:44:24:5E:3C:90:8E:7B:A3:24:2C:8A:63:4A:21:E4:D5
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial: 019CAB344264FEFCD9587DB3D2C9B884D3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number: 09DC
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: qDNVfS06+TaP4Fn9NY/EhE1HZg2awWAuCE13QGSVmhY=)
2: e1omXpCIQpnerGyCBf44XvMH7b8.roa (hash: WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:42:64:fe:fc:d9:58:7d:b3:d2:c9:b8:84:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=017182f244245e3c908e7ba3242c8a634a21e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:9b:54:f1:bc:7b:e8:ad:03:f1:44:d4:5f:
31:ea:ec:64:a7:12:b6:8d:ea:32:24:9b:97:01:34:
5a:11:26:7f:a8:40:ac:83:35:e5:65:9c:ea:e6:0f:
cc:4a:c4:39:56:fc:90:14:5f:f9:eb:80:4b:69:87:
dd:68:43:a9:7f:c1:a5:62:ea:76:39:2e:94:75:d9:
2d:f8:ba:9a:f0:7b:c4:ec:02:e4:d4:a6:6b:fe:5a:
ea:20:77:09:4c:65:81:d8:18:d6:6d:47:08:7d:2a:
22:77:62:8b:b5:44:6b:e4:3c:55:6d:8b:de:ca:95:
db:c6:31:a9:73:85:93:4f:57:0b:89:b1:ad:4d:e4:
23:ba:3c:bf:f3:6b:94:ab:ac:60:ba:e4:c3:35:8e:
68:69:27:92:a1:e6:e7:eb:f3:87:3b:72:c1:9a:cf:
4c:a4:ab:b2:68:14:e7:7f:c9:54:a1:e3:ca:1d:6e:
cb:f3:88:4a:fd:5d:6f:be:b5:fa:c2:c4:34:01:1e:
34:5c:ac:cb:3a:0c:7b:14:a1:05:d3:00:35:27:47:
0b:26:e9:e7:e9:94:0c:1c:0a:74:41:a2:04:dd:fa:
75:6e:28:d3:c8:8a:30:4a:29:67:40:58:a7:a5:2a:
14:8f:48:6f:d3:fa:72:9b:61:3b:ab:94:35:34:7f:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:82:F2:44:24:5E:3C:90:8E:7B:A3:24:2C:8A:63:4A:21:E4:D5
X509v3 Authority Key Identifier:
keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:5d:6c:d2:07:49:7c:39:9b:d5:53:f0:e3:9b:96:78:24:
76:ad:5e:f4:aa:a5:54:db:1f:4f:d0:f5:96:38:f6:44:a3:ea:
07:8d:40:0e:4f:11:78:0a:6c:57:ff:bd:4b:a5:47:9c:06:a4:
6e:cf:a7:b8:cf:d0:ac:46:a6:b1:52:6e:fc:e3:5c:5f:12:1e:
6c:0d:c5:00:66:95:aa:49:e3:ca:72:bc:a2:f9:ad:ef:e1:91:
73:6c:c7:84:9a:e9:fd:74:5c:50:dc:3d:dd:b4:3d:60:02:d3:
1d:9b:88:d0:b1:30:eb:7a:89:6b:af:83:cb:4b:90:ae:c3:99:
cd:7f:bd:bd:db:22:78:46:68:83:1a:41:d6:a4:77:63:5b:e6:
45:cd:e6:36:4c:33:49:d3:ce:7c:08:03:1d:9c:05:c4:71:ff:
1e:c3:c6:07:e6:15:de:d1:99:07:d2:3a:ef:20:fb:9e:eb:9c:
cb:86:98:ee:da:79:5a:e8:3c:3e:d9:9d:a8:b2:af:5e:0e:1c:
5d:6e:db:78:74:0c:36:40:d8:c4:5c:b3:24:45:51:24:2b:76:
f6:17:14:ce:53:9b:47:9d:4e:3c:8c:6f:5b:ae:12:2a:e9:6c:
72:42:85:4b:a9:0d:a1:15:97:aa:34:52:f7:9c:a9:6a:bf:59:
04:95:02:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNEJk/vzZWH2z0sm4hNOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWI3N2JjNGVkZDhhNGI4Mzc0NDc2YTczNDc3MTliNjc2
Yjc1NWUwHhcNMjYwMzAxMjEwMDU0WhcNMjYwMzAyMjEwMDU0WjAzMTEwLwYDVQQD
EygwMTcxODJmMjQ0MjQ1ZTNjOTA4ZTdiYTMyNDJjOGE2MzRhMjFlNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBabVPG8e+itA/FE1F8x6uxkpxK2
jeoyJJuXATRaESZ/qECsgzXlZZzq5g/MSsQ5VvyQFF/564BLaYfdaEOpf8GlYup2
OS6Uddkt+Lqa8HvE7ALk1KZr/lrqIHcJTGWB2BjWbUcIfSoid2KLtURr5DxVbYve
ypXbxjGpc4WTT1cLibGtTeQjujy/82uUq6xguuTDNY5oaSeSoebn6/OHO3LBms9M
pKuyaBTnf8lUoePKHW7L84hK/V1vvrX6wsQ0AR40XKzLOgx7FKEF0wA1J0cLJunn
6ZQMHAp0QaIE3fp1bijTyIowSilnQFinpSoUj0hv0/pym2E7q5Q1NH8jkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFxgvJEJF48kI57oyQsimNKIeTVMB8GA1UdIwQY
MBaAFGwbd7xO3YpLg3RHanNHcZtna3VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYt
ZmZkOTFiNDI1YTAwLzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYtZmZkOTFiNDI1YTAw
LzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgZdbNIH
SXw5m9VT8OOblngkdq1e9KqlVNsfT9D1ljj2RKPqB41ADk8ReApsV/+9S6VHnAak
bs+nuM/QrEamsVJu/ONcXxIebA3FAGaVqknjynK8ovmt7+GRc2zHhJrp/XRcUNw9
3bQ9YALTHZuI0LEw63qJa6+Dy0uQrsOZzX+9vdsieEZogxpB1qR3Y1vmRc3mNkwz
SdPOfAgDHZwFxHH/HsPGB+YV3tGZB9I67yD7nuucy4aY7tp5Wug8PtmdqLKvXg4c
XW7beHQMNkDYxFyzJEVRJCt29hcUzlObR51OPIxvW64SKulsckKFS6kNoRWXqjRS
95ypar9ZBJUCfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:12 2026 by rpki-client