Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: n3+SO+EFABl4M88XX5lKV68NDbAKc/obXsgmtD4Wj9M=
Subject key identifier: 06:FD:8D:9A:71:8F:79:6A:F5:10:D7:07:6A:13:48:5A:0F:0B:BB:47
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019CA945A20667481E24FBE5D8DABEAE411C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 12:00:38 +0000
Manifest this update: Sun 01 Mar 2026 12:00:38 +0000
Manifest next update: Mon 02 Mar 2026 12:00:38 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: z2GNdjQ02QAY8KREFKNz9YFALRXf3ddnLdIpxVQJ4qE=)
2: NnEIJrnmhkwELld_U_QBTUbqU90.asa (hash: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:a2:06:67:48:1e:24:fb:e5:d8:da:be:ae:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Mar 1 12:00:38 2026 GMT
Not After : Mar 2 12:00:38 2026 GMT
Subject: CN=06fd8d9a718f796af510d7076a13485a0f0bbb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:98:2e:8d:ce:68:21:4a:6a:ee:71:45:a1:36:
6c:08:95:43:d3:ad:13:b0:87:f6:bc:c2:d2:b9:ea:
fc:06:54:e0:88:02:64:ae:4b:b6:ae:dd:ab:b8:cf:
ec:ec:23:c4:56:02:1b:e3:0c:55:24:3a:72:64:a5:
b9:5a:f3:fd:97:e4:6d:42:f5:f1:f9:79:af:e8:76:
c7:79:01:fb:4f:31:bb:44:1b:5d:bb:2d:36:ba:a2:
39:89:e6:4f:c1:48:a5:cb:86:ac:d6:2c:62:40:ca:
86:1b:9d:46:79:b3:dc:dd:8f:9b:d7:10:85:68:61:
02:6b:d4:f1:9c:e3:9a:c2:3f:ad:b9:86:ae:ad:bc:
5d:64:bf:27:d1:0e:14:07:6b:fb:0f:d1:c9:f0:4e:
02:5d:f5:80:43:69:24:80:9c:a2:de:ab:07:2c:14:
d2:6f:73:48:20:83:86:30:71:c9:81:dc:5a:49:14:
b6:ed:8e:e2:2c:8e:97:a1:0a:00:91:4b:9a:40:ea:
29:e3:85:86:a9:e4:c7:62:89:c3:c9:a9:b6:17:95:
74:7d:ba:fd:56:1a:8e:d6:f5:19:ab:3a:f2:2f:68:
93:1f:2d:ee:4c:6e:bc:83:49:77:20:73:29:86:6f:
b8:4a:44:e4:fd:d9:34:84:c7:7e:9e:62:09:e3:0a:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:8D:9A:71:8F:79:6A:F5:10:D7:07:6A:13:48:5A:0F:0B:BB:47
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:df:4c:25:1c:34:88:c1:9d:94:fe:46:16:b2:98:f8:b2:
f0:bc:73:b5:c4:db:57:f1:f0:ff:0a:13:c3:96:04:93:68:2a:
e6:65:b0:79:04:ff:00:d9:15:0d:57:60:fe:08:23:c6:33:24:
75:99:be:ad:52:b3:70:c3:25:04:49:aa:ae:46:0f:32:1c:a1:
89:ed:e4:e4:48:5c:de:b1:42:35:f5:75:03:98:c2:a9:e4:f1:
22:d4:09:8f:f3:d1:69:aa:a6:94:a9:bf:52:c2:00:1e:05:60:
94:dc:cc:1a:8a:f7:a1:16:91:e1:38:63:ba:85:a3:4c:c0:0c:
6b:c5:29:71:1c:20:aa:8c:92:3a:b3:6b:92:08:db:3e:b9:a4:
93:8c:7e:7e:09:09:bb:d0:ef:8a:23:b9:97:b3:5e:92:e5:9a:
15:fb:01:e7:fb:33:53:ef:b8:62:a6:49:e3:80:df:6b:d3:e5:
ff:b0:02:f3:6f:51:89:49:c3:34:33:c8:6f:b7:4d:76:88:24:
49:05:32:64:3d:dc:4b:e9:31:52:b1:33:06:ef:84:cb:9b:e8:
f4:64:6f:07:24:c4:7a:45:45:85:8a:80:e0:c6:19:2a:61:79:
ab:f1:96:6b:cf:bb:03:9b:44:5e:30:72:96:57:00:e6:0c:f9:
cb:30:2d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRaIGZ0geJPvl2Nq+rkEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1
ZDJkOGEwHhcNMjYwMzAxMTIwMDM4WhcNMjYwMzAyMTIwMDM4WjAzMTEwLwYDVQQD
EygwNmZkOGQ5YTcxOGY3OTZhZjUxMGQ3MDc2YTEzNDg1YTBmMGJiYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jgujc5oIUpq7nFFoTZsCJVD060T
sIf2vMLSuer8BlTgiAJkrku2rt2ruM/s7CPEVgIb4wxVJDpyZKW5WvP9l+RtQvXx
+Xmv6HbHeQH7TzG7RBtduy02uqI5ieZPwUily4as1ixiQMqGG51GebPc3Y+b1xCF
aGECa9TxnOOawj+tuYaurbxdZL8n0Q4UB2v7D9HJ8E4CXfWAQ2kkgJyi3qsHLBTS
b3NIIIOGMHHJgdxaSRS27Y7iLI6XoQoAkUuaQOop44WGqeTHYonDyam2F5V0fbr9
VhqO1vUZqzryL2iTHy3uTG68g0l3IHMphm+4SkTk/dk0hMd+nmIJ4wq1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb9jZpxj3lq9RDXB2oTSFoPC7tHMB8GA1UdIwQY
MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt
MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2
LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemjfTCUc
NIjBnZT+RhaymPiy8LxztcTbV/Hw/woTw5YEk2gq5mWweQT/ANkVDVdg/ggjxjMk
dZm+rVKzcMMlBEmqrkYPMhyhie3k5Ehc3rFCNfV1A5jCqeTxItQJj/PRaaqmlKm/
UsIAHgVglNzMGor3oRaR4ThjuoWjTMAMa8UpcRwgqoySOrNrkgjbPrmkk4x+fgkJ
u9DviiO5l7NekuWaFfsB5/szU++4YqZJ44Dfa9Pl/7AC829RiUnDNDPIb7dNdogk
SQUyZD3cS+kxUrEzBu+Ey5vo9GRvByTEekVFhYqA4MYZKmF5q/GWa8+7A5tEXjBy
llcA5gz5yzAtpg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:39:03 2026 by rpki-client