Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: Y+uUxWcgqXCV4AYDYd1fmflkpKonm4dNEb+X0tJ7rUc=
Subject key identifier: 37:79:AA:E6:F0:13:1D:15:F6:E7:4B:BD:8E:C9:CB:23:5B:B0:1A:19
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 01A0D15B63F7DDBA101EB7F4392A049ACA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 03:00:22 +0000
Manifest this update: Thu 24 Sep 2026 03:00:22 +0000
Manifest next update: Fri 25 Sep 2026 03:00:22 +0000
Files and hashes: 1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: ROShXIeQf9UmI1PtuYEOKlZhJcWFTA2u+E2WaDEoODQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:63:f7:dd:ba:10:1e:b7:f4:39:2a:04:9a:ca:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Sep 24 03:00:22 2026 GMT
Not After : Sep 25 03:00:22 2026 GMT
Subject: CN=3779aae6f0131d15f6e74bbd8ec9cb235bb01a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:99:21:df:e6:7e:0c:4a:f1:ac:77:c9:8b:
09:1d:26:ab:be:c7:68:db:d6:b6:6b:e1:fc:ac:c8:
2f:5c:c0:3e:73:7d:50:58:e8:1b:fc:52:67:01:3d:
59:76:ff:d3:7f:22:77:20:ef:46:a4:ca:2f:6a:8a:
65:0b:90:d4:8c:5f:aa:6c:ca:6d:51:26:57:1f:35:
e7:53:c0:e9:0f:62:ef:66:84:ce:e8:8a:36:05:3b:
3a:89:f8:6d:69:47:ba:eb:08:39:45:80:b2:22:1a:
aa:85:84:d3:e7:a8:0c:b7:14:b7:a5:6c:dc:4a:34:
34:79:a6:f5:69:56:9a:fa:81:67:8e:41:d2:bc:09:
39:25:a8:e3:7d:4d:9e:a8:90:4c:96:14:40:2a:10:
74:4c:dc:7c:27:3f:09:bb:7a:f4:fa:8e:cc:dc:0d:
8e:ba:46:ab:00:3c:78:12:ec:07:ff:dc:1f:fb:54:
7f:93:aa:ef:d3:04:75:6a:b5:b7:4d:40:56:ea:3c:
c1:f1:12:f7:7d:a3:27:8e:cd:13:c4:5f:4c:ac:79:
1a:f4:25:2f:d4:6c:95:8f:bd:d6:43:63:6d:17:c8:
b9:ce:20:68:4c:b7:d4:96:f5:92:d8:a4:5f:d8:e1:
e6:27:54:a3:73:76:c7:27:94:0d:99:32:a4:92:d1:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:AA:E6:F0:13:1D:15:F6:E7:4B:BD:8E:C9:CB:23:5B:B0:1A:19
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:29:d3:d7:6a:bf:ec:5a:4e:00:f0:6e:3c:77:1f:7b:ed:72:
45:59:64:0d:d2:a4:fd:6c:81:72:cf:fc:5e:fa:66:b3:62:dd:
5e:03:ab:f4:c6:67:d0:f2:75:bd:6d:2e:27:82:82:59:3b:04:
87:ab:7d:92:2a:f4:d3:f6:f5:88:ef:54:0c:7c:e9:32:3c:c0:
0e:80:d3:b4:02:40:0d:32:9c:c8:a9:3c:bd:20:ee:08:fb:7c:
68:3f:06:f1:57:f9:7d:d8:1a:03:be:6c:42:5f:b7:fe:d6:69:
e6:d8:1e:2e:5a:f6:7c:61:03:35:68:4b:44:a4:26:4e:40:ef:
4a:91:db:cd:60:38:cb:c2:6f:de:a7:d8:b9:ab:cb:bd:50:60:
1f:c4:97:19:87:d8:ec:4b:12:9e:06:5c:9a:73:6d:d8:09:d0:
9f:55:96:a0:e3:8d:20:29:a3:b4:0f:94:ee:9f:cd:94:05:87:
b3:86:f2:8c:e2:81:8f:1d:74:86:6d:d3:f5:8b:b7:1b:f5:9b:
04:89:cb:78:39:55:19:22:15:d1:a6:b6:98:8f:c8:81:bf:19:
fe:c3:de:73:5b:6b:96:a6:3c:52:95:8f:3c:8f:40:be:87:b9:
55:9f:ba:61:dd:96:50:57:0c:ca:99:b0:96:fb:cf:d5:3c:d6:
71:04:0e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW2P33boQHrf0OSoEmsoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2
OTkwZjcwHhcNMjYwOTI0MDMwMDIyWhcNMjYwOTI1MDMwMDIyWjAzMTEwLwYDVQQD
EygzNzc5YWFlNmYwMTMxZDE1ZjZlNzRiYmQ4ZWM5Y2IyMzViYjAxYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLWZId/mfgxK8ax3yYsJHSarvsdo
29a2a+H8rMgvXMA+c31QWOgb/FJnAT1Zdv/TfyJ3IO9GpMovaoplC5DUjF+qbMpt
USZXHzXnU8DpD2LvZoTO6Io2BTs6ifhtaUe66wg5RYCyIhqqhYTT56gMtxS3pWzc
SjQ0eab1aVaa+oFnjkHSvAk5JajjfU2eqJBMlhRAKhB0TNx8Jz8Ju3r0+o7M3A2O
ukarADx4EuwH/9wf+1R/k6rv0wR1arW3TUBW6jzB8RL3faMnjs0TxF9MrHka9CUv
1GyVj73WQ2NtF8i5ziBoTLfUlvWS2KRf2OHmJ1Sjc3bHJ5QNmTKkktFNvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDd5qubwEx0V9udLvY7JyyNbsBoZMB8GA1UdIwQY
MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt
MGZiZTdiZDc2ZmZiLzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi
LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSnT12q/
7FpOAPBuPHcfe+1yRVlkDdKk/WyBcs/8Xvpms2LdXgOr9MZn0PJ1vW0uJ4KCWTsE
h6t9kir00/b1iO9UDHzpMjzADoDTtAJADTKcyKk8vSDuCPt8aD8G8Vf5fdgaA75s
Ql+3/tZp5tgeLlr2fGEDNWhLRKQmTkDvSpHbzWA4y8Jv3qfYuavLvVBgH8SXGYfY
7EsSngZcmnNt2AnQn1WWoOONICmjtA+U7p/NlAWHs4byjOKBjx10hm3T9Yu3G/Wb
BInLeDlVGSIV0aa2mI/Igb8Z/sPec1trlqY8UpWPPI9Avoe5VZ+6Yd2WUFcMypmw
lvvP1TzWcQQOQQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:44:18 2026 by rpki-client