Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: B8bBLmJroMiL+G/LQdP/1dZ6EyHSGIF4vSta6c50ALY=
Subject key identifier: 3A:80:7C:DB:F0:9C:93:38:47:95:72:06:11:9F:04:46:72:0B:7E:A6
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 019CABD92C166B7C090F9C4DD24063A95717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 0C53
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: xCtFa+GS5+myU7ABKTom6yZD3DV5bYMV2sG37ouMLSY=)
2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2c:16:6b:7c:09:0f:9c:4d:d2:40:63:a9:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=3a807cdbf09c933847957206119f0446720b7ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:ee:50:0e:71:29:ef:14:36:84:63:e8:91:
b8:1e:fd:7b:cd:70:fc:d9:4f:f0:30:f3:5b:51:b2:
ad:24:af:d3:71:26:e3:e0:05:ae:a6:0f:1a:00:42:
ba:05:33:eb:8b:6e:7c:d0:63:84:89:f0:2b:53:c1:
3d:c2:e3:42:ef:0d:24:d2:a2:f3:1b:b6:91:01:2b:
12:0e:51:2d:da:af:1d:b2:b6:5b:b8:a4:45:63:28:
ff:68:d4:54:aa:fa:00:00:54:76:41:1f:9b:23:1a:
b4:46:da:97:1f:21:02:a5:66:8d:bd:fc:91:0d:4e:
a7:d6:88:bb:59:4e:b5:25:7b:62:72:43:6a:6b:b6:
60:7b:e9:dc:ca:8d:61:03:a3:3c:68:61:8d:16:8b:
51:c8:a2:55:2f:04:a9:f6:a7:d7:18:ce:63:63:8f:
0f:b9:8a:c8:94:a9:8f:15:27:40:fb:5d:0c:7a:6e:
dc:5a:27:7a:2c:9b:f2:72:3a:c1:97:67:98:81:57:
87:4e:4d:e5:77:3c:1d:5d:1d:1e:b7:3b:6a:56:81:
b4:8c:50:fe:fd:d1:4d:14:50:e3:db:62:b5:41:ca:
f2:80:e3:f5:2f:b1:ac:f4:f9:a5:bc:d5:c3:4b:52:
3d:1e:03:d0:10:c2:7a:84:42:79:97:8e:c6:55:a1:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:7C:DB:F0:9C:93:38:47:95:72:06:11:9F:04:46:72:0B:7E:A6
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:72:cf:71:7b:4f:51:21:f6:cb:6e:82:b8:0e:7f:83:7d:
c0:c5:41:15:62:05:f3:82:c6:72:2d:2b:0a:17:23:63:68:74:
3d:51:b5:77:95:55:3f:f5:60:86:87:08:fc:4e:90:f6:b8:7b:
09:cb:20:ad:a5:55:51:8f:3c:28:3e:71:c2:6d:fc:48:7e:94:
69:ee:31:e4:23:9f:ef:4e:28:8a:95:cd:5d:78:e5:40:4d:01:
84:7e:1b:ee:08:60:33:85:a5:73:88:b8:d6:5d:95:5e:2e:14:
b3:be:2e:fb:1c:46:54:81:1d:43:9f:17:51:8c:0b:6f:62:36:
72:bd:67:50:96:09:1b:ff:fa:7a:fe:8c:e1:98:c0:70:18:10:
16:32:d5:95:f4:1f:65:93:32:9f:e0:e9:1e:6e:34:e5:65:c5:
f2:03:6e:af:b7:19:09:ae:b0:3d:86:84:14:c2:6e:a1:72:42:
ad:c7:ad:4a:c1:4d:94:b8:8c:2f:ae:6d:20:83:c0:0e:41:f3:
26:56:fc:ae:d5:85:dd:ed:75:c6:bb:51:b4:4c:cc:9a:b6:7b:
13:ec:1a:f8:34:cf:5d:a2:b9:e4:5a:43:35:9c:fb:fa:8b:2d:
42:a0:ae:33:a2:20:b5:d7:07:8e:7f:38:ca:16:bf:d0:c4:68:
66:ce:08:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2SwWa3wJD5xN0kBjqVcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0
OWFhNmMwHhcNMjYwMzAyMDAwMTAyWhcNMjYwMzAzMDAwMTAyWjAzMTEwLwYDVQQD
EygzYTgwN2NkYmYwOWM5MzM4NDc5NTcyMDYxMTlmMDQ0NjcyMGI3ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb7uUA5xKe8UNoRj6JG4Hv17zXD8
2U/wMPNbUbKtJK/TcSbj4AWupg8aAEK6BTPri2580GOEifArU8E9wuNC7w0k0qLz
G7aRASsSDlEt2q8dsrZbuKRFYyj/aNRUqvoAAFR2QR+bIxq0RtqXHyECpWaNvfyR
DU6n1oi7WU61JXtickNqa7Zge+ncyo1hA6M8aGGNFotRyKJVLwSp9qfXGM5jY48P
uYrIlKmPFSdA+10Mem7cWid6LJvycjrBl2eYgVeHTk3ldzwdXR0etztqVoG0jFD+
/dFNFFDj22K1QcrygOP1L7Gs9PmlvNXDS1I9HgPQEMJ6hEJ5l47GVaGD8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqAfNvwnJM4R5VyBhGfBEZyC36mMB8GA1UdIwQY
MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt
MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj
LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf75yz3F7
T1Eh9stugrgOf4N9wMVBFWIF84LGci0rChcjY2h0PVG1d5VVP/VghocI/E6Q9rh7
CcsgraVVUY88KD5xwm38SH6Uae4x5COf704oipXNXXjlQE0BhH4b7ghgM4Wlc4i4
1l2VXi4Us74u+xxGVIEdQ58XUYwLb2I2cr1nUJYJG//6ev6M4ZjAcBgQFjLVlfQf
ZZMyn+DpHm405WXF8gNur7cZCa6wPYaEFMJuoXJCrcetSsFNlLiML65tIIPADkHz
Jlb8rtWF3e11xrtRtEzMmrZ7E+wa+DTPXaK55FpDNZz7+ostQqCuM6IgtdcHjn84
yha/0MRoZs4IZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:00 2026 by rpki-client