Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: uwGQatcSxmPO7B5Dly4DHdBEL7oYh0W5EZvJ6O+CDEk=
Subject key identifier: 48:59:E0:CF:06:BC:A8:A2:BC:EA:1D:01:1A:EE:0E:92:75:C9:30:65
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019D9C2D3CEC369EF3DD105087FEBE8B7A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 10C6
Signing time: Fri 17 Apr 2026 16:01:43 +0000
Manifest this update: Fri 17 Apr 2026 16:01:43 +0000
Manifest next update: Sat 18 Apr 2026 16:01:43 +0000
Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=)
3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
4: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: aJ51oznaPDsuhldiSK65hE5P8HFO3Hn2bnJO6b80oY8=)
6: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:3c:ec:36:9e:f3:dd:10:50:87:fe:be:8b:7a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Apr 17 16:01:43 2026 GMT
Not After : Apr 18 16:01:43 2026 GMT
Subject: CN=4859e0cf06bca8a2bcea1d011aee0e9275c93065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:7e:a3:50:d7:8f:db:b0:db:48:8a:8d:be:
65:3c:d4:21:dd:9f:78:f1:2a:20:89:08:61:44:d8:
3a:b4:96:47:a9:37:74:3e:dd:69:e0:39:a8:fb:d7:
96:7b:8d:e5:d1:02:f4:bc:70:91:53:f5:a0:fc:0f:
a5:4d:d6:c0:05:2f:39:e7:17:5f:52:c9:38:a8:c1:
fd:be:d0:af:96:76:1a:ad:5f:dd:cb:a2:bf:33:b1:
c7:97:82:f3:5b:84:dd:60:c1:fc:61:8b:13:19:b3:
87:34:fc:89:1a:de:5e:15:bf:c1:52:1e:cb:b9:56:
47:0c:28:0c:c3:2a:01:12:52:fe:c0:10:58:6f:ff:
59:e4:71:45:66:f4:51:d6:17:84:55:bc:45:77:65:
81:db:5e:65:8d:5a:dd:ca:ea:a2:f5:a0:4e:44:0a:
e0:9f:a5:21:46:0b:bf:d0:41:e4:81:d0:1f:68:f1:
05:43:c1:9a:5f:88:10:b8:02:6b:0c:f7:23:ee:38:
c1:1c:29:8c:e6:0b:f3:15:5a:35:84:26:16:40:1e:
cf:17:bd:15:27:89:89:36:22:16:90:30:2b:5d:cf:
f5:11:9a:87:b6:76:73:f3:00:d1:ef:0d:37:f6:79:
f7:5b:57:71:e0:c8:86:dd:97:4c:93:64:2c:24:ba:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:59:E0:CF:06:BC:A8:A2:BC:EA:1D:01:1A:EE:0E:92:75:C9:30:65
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f3:98:99:21:97:ef:5a:09:aa:4d:ab:f0:0c:9a:88:2a:97:
f6:a3:95:34:12:6c:c9:d2:73:aa:81:7d:be:6a:ae:79:7d:eb:
21:dd:61:c9:8f:e0:f7:be:6c:34:d0:88:6b:5d:85:95:62:e7:
09:98:f4:3b:a7:75:bc:0d:77:87:0b:bf:16:36:5c:92:4a:39:
91:0b:cd:1a:af:2b:c8:cf:02:ae:11:74:db:40:7a:0e:35:ca:
a8:1c:fc:4a:9d:38:8a:a7:9c:83:ef:aa:f2:d1:ef:6f:02:1e:
a4:b2:05:31:af:0e:6a:84:39:18:1f:93:4d:2e:7c:28:6b:a0:
c6:97:12:0f:11:86:47:c4:83:a7:33:47:14:ab:0d:5c:3b:dd:
eb:fa:bb:dc:01:51:91:c0:c2:ce:1f:5e:4f:bb:d9:08:fa:2c:
37:ee:9a:cc:04:34:66:4d:19:f9:3d:2b:cb:86:48:17:02:34:
2f:1e:a7:aa:32:da:96:e7:71:49:ae:7a:62:3b:c3:32:17:db:
31:d1:54:13:f4:f8:ae:60:52:42:3d:16:ed:08:65:04:85:ce:
dd:32:52:e4:40:13:a0:4b:de:fe:ba:c1:82:e6:3b:d9:ba:83:
e7:d5:50:c7:a8:74:f9:f5:94:5e:47:15:00:2f:15:03:bc:b0:
46:0e:d8:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLTzsNp7z3RBQh/6+i3pHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2
ZGVmMjAwHhcNMjYwNDE3MTYwMTQzWhcNMjYwNDE4MTYwMTQzWjAzMTEwLwYDVQQD
Eyg0ODU5ZTBjZjA2YmNhOGEyYmNlYTFkMDExYWVlMGU5Mjc1YzkzMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbd+o1DXj9uw20iKjb5lPNQh3Z94
8SogiQhhRNg6tJZHqTd0Pt1p4Dmo+9eWe43l0QL0vHCRU/Wg/A+lTdbABS855xdf
Usk4qMH9vtCvlnYarV/dy6K/M7HHl4LzW4TdYMH8YYsTGbOHNPyJGt5eFb/BUh7L
uVZHDCgMwyoBElL+wBBYb/9Z5HFFZvRR1heEVbxFd2WB215ljVrdyuqi9aBORArg
n6UhRgu/0EHkgdAfaPEFQ8GaX4gQuAJrDPcj7jjBHCmM5gvzFVo1hCYWQB7PF70V
J4mJNiIWkDArXc/1EZqHtnZz8wDR7w039nn3W1dx4MiG3ZdMk2QsJLrMqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhZ4M8GvKiivOodARruDpJ1yTBlMB8GA1UdIwQY
MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt
MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1
LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvOYmSGX
71oJqk2r8AyaiCqX9qOVNBJsydJzqoF9vmqueX3rId1hyY/g975sNNCIa12FlWLn
CZj0O6d1vA13hwu/FjZckko5kQvNGq8ryM8CrhF020B6DjXKqBz8Sp04iqecg++q
8tHvbwIepLIFMa8OaoQ5GB+TTS58KGugxpcSDxGGR8SDpzNHFKsNXDvd6/q73AFR
kcDCzh9eT7vZCPosN+6azAQ0Zk0Z+T0ry4ZIFwI0Lx6nqjLaludxSa56YjvDMhfb
MdFUE/T4rmBSQj0W7QhlBIXO3TJS5EAToEve/rrBguY72bqD59VQx6h0+fWUXkcV
AC8VA7ywRg7YnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:45 2026 by rpki-client