Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: 05Hu+HUYY5tPP0ECoDXYkcLZEdc1vkcnntcaYPDWAQg=
Subject key identifier: 4C:19:D1:F9:79:16:8C:A4:24:11:19:FF:AD:EE:02:35:D8:37:7E:E7
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 01A0C9A22E1C4DD345864E5609CB7D5F5B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 068D
Signing time: Tue 22 Sep 2026 15:00:44 +0000
Manifest this update: Tue 22 Sep 2026 15:00:44 +0000
Manifest next update: Wed 23 Sep 2026 15:00:44 +0000
Files and hashes: 1: 5v9iEqqw9h8Wg3xh2Nok2-eNQQM.roa (hash: 3N4L/xDAzZWmVmC1vE/Ib8W3ZzU4rXZkkHgA9mF0qSI=)
2: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: rolcXOka0OipVWzmTZcPbv6TCpJ8iKsj3zvofyCXkJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:2e:1c:4d:d3:45:86:4e:56:09:cb:7d:5f:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Sep 22 15:00:44 2026 GMT
Not After : Sep 23 15:00:44 2026 GMT
Subject: CN=4c19d1f979168ca4241119ffadee0235d8377ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:68:cd:0a:68:09:5b:ba:f1:5e:00:59:f4:
c4:f0:9a:91:48:6b:d0:95:0a:b4:0a:b1:97:56:a1:
28:75:e6:07:cf:cc:fc:5e:74:0a:0f:67:9c:b7:76:
be:07:6d:df:96:22:ea:92:9f:9d:05:23:d6:de:50:
de:bc:1c:b2:c6:a5:fc:51:16:ab:cb:a0:0b:55:40:
c2:28:6c:61:f9:72:38:7b:e9:23:cc:74:f7:de:ce:
5c:ec:9a:ac:55:42:bf:db:df:23:71:7c:bd:cc:40:
b6:e9:4b:f9:de:8f:50:b0:b0:0b:46:71:2c:63:27:
ce:ea:7f:17:2d:c4:17:17:59:7c:8d:1a:b5:67:da:
43:a7:23:4b:78:e8:b7:fe:2d:73:1d:cb:d9:0a:f5:
c0:63:6f:34:5b:7d:a0:a4:ef:72:18:c2:79:ae:73:
89:21:8b:21:64:4d:1f:a6:de:c9:56:fc:1e:bf:54:
8a:76:2e:05:23:7e:1d:5a:f9:14:c6:01:0b:6e:00:
67:b0:91:79:62:d6:b3:e7:ab:29:55:f6:68:b5:2a:
ff:ac:b9:9d:e7:08:bf:19:b2:da:bc:93:7a:12:d2:
f1:b6:22:a6:cb:81:bd:c1:bd:d8:d1:dc:29:64:15:
04:53:10:85:ae:87:32:43:c2:dd:c4:f8:0d:b7:cb:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:D1:F9:79:16:8C:A4:24:11:19:FF:AD:EE:02:35:D8:37:7E:E7
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ca:5c:3d:cd:07:0b:e1:4b:99:e3:49:33:d9:39:60:80:1a:
f0:5c:d3:62:a2:73:b2:00:57:67:a9:c4:8d:45:19:28:3a:35:
03:b8:fa:be:e7:dc:c4:ed:24:3c:ab:c9:22:7f:24:43:11:90:
33:9e:02:9e:6b:6a:8e:a5:41:f3:81:85:45:e3:a5:0d:88:5d:
07:3d:ba:39:c0:9c:c4:34:83:90:03:55:0a:4c:1b:c7:97:5b:
13:ad:f2:e9:a1:fe:f2:1b:52:81:08:00:30:6d:b9:d4:88:40:
06:6b:b8:4c:10:b1:94:2e:3c:37:41:d2:cc:44:e6:19:0d:2a:
3e:a7:50:ed:27:f3:a1:13:db:bd:b8:bd:d4:09:d0:02:bd:df:
cb:7d:e0:40:f9:0c:c3:cb:b0:71:aa:7f:a6:96:fb:9d:62:a4:
24:42:76:ba:95:c7:a6:62:e0:ac:30:e8:77:a5:9b:46:da:af:
27:81:0e:e2:90:73:28:dc:15:ca:47:ce:9b:a1:d6:06:b9:8a:
0c:d4:18:ef:0e:7c:90:34:30:d3:41:d6:1d:d4:59:e9:ea:e0:
f5:30:f8:3b:67:ad:5a:c0:cf:3c:ae:c8:81:de:4f:85:de:78:
30:de:64:b4:36:6c:94:01:c3:15:4f:a3:d0:2a:5b:b4:35:58:
e8:b3:f7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJoi4cTdNFhk5WCct9X1ttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj
Y2Q0MWIwHhcNMjYwOTIyMTUwMDQ0WhcNMjYwOTIzMTUwMDQ0WjAzMTEwLwYDVQQD
Eyg0YzE5ZDFmOTc5MTY4Y2E0MjQxMTE5ZmZhZGVlMDIzNWQ4Mzc3ZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs9ozQpoCVu68V4AWfTE8JqRSGvQ
lQq0CrGXVqEodeYHz8z8XnQKD2ect3a+B23fliLqkp+dBSPW3lDevByyxqX8URar
y6ALVUDCKGxh+XI4e+kjzHT33s5c7JqsVUK/298jcXy9zEC26Uv53o9QsLALRnEs
YyfO6n8XLcQXF1l8jRq1Z9pDpyNLeOi3/i1zHcvZCvXAY280W32gpO9yGMJ5rnOJ
IYshZE0fpt7JVvwev1SKdi4FI34dWvkUxgELbgBnsJF5Ytaz56spVfZotSr/rLmd
5wi/GbLavJN6EtLxtiKmy4G9wb3Y0dwpZBUEUxCFrocyQ8LdxPgNt8uRuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwZ0fl5FoykJBEZ/63uAjXYN37nMB8GA1UdIwQY
MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt
Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm
LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgspcPc0H
C+FLmeNJM9k5YIAa8FzTYqJzsgBXZ6nEjUUZKDo1A7j6vufcxO0kPKvJIn8kQxGQ
M54CnmtqjqVB84GFReOlDYhdBz26OcCcxDSDkANVCkwbx5dbE63y6aH+8htSgQgA
MG251IhABmu4TBCxlC48N0HSzETmGQ0qPqdQ7SfzoRPbvbi91AnQAr3fy33gQPkM
w8uwcap/ppb7nWKkJEJ2upXHpmLgrDDod6WbRtqvJ4EO4pBzKNwVykfOm6HWBrmK
DNQY7w58kDQw00HWHdRZ6erg9TD4O2etWsDPPK7Igd5Phd54MN5ktDZslAHDFU+j
0CpbtDVY6LP3Qw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:51:00 2026 by rpki-client