Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: 4urJ6EChFnu3xfdx3GEw44Wf4Pi9VfPLnz5lia/X7G8=
Subject key identifier: 65:68:DE:68:72:B6:48:A6:2D:AE:2A:E5:D6:54:70:C3:B4:F0:1E:16
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 01A0CF6D556ABA2E350B4D685493AA8F821B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 18:00:44 +0000
Manifest this update: Wed 23 Sep 2026 18:00:44 +0000
Manifest next update: Thu 24 Sep 2026 18:00:44 +0000
Files and hashes: 1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: V1l7oWmsBW4AoDudTP2OaEv1REfLlb4dHf8DW+IHTYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:55:6a:ba:2e:35:0b:4d:68:54:93:aa:8f:82:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Sep 23 18:00:44 2026 GMT
Not After : Sep 24 18:00:44 2026 GMT
Subject: CN=6568de6872b648a62dae2ae5d65470c3b4f01e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:9c:2d:2c:e2:ed:db:59:3a:b6:51:76:11:
f7:a0:36:a4:41:5c:38:b0:af:cf:b8:d3:c6:09:35:
8d:d0:fd:68:6b:a3:3a:ad:c7:d6:b2:19:33:f4:69:
6e:f0:19:2f:bc:91:20:f8:b5:0e:3d:12:e9:91:1b:
f9:85:e3:1a:17:72:26:4a:d7:81:57:5a:b3:c0:2a:
b3:81:04:b0:3d:87:d0:9b:02:c9:51:d3:aa:d5:be:
15:23:eb:84:e7:e5:0f:c0:1d:96:4b:34:7a:3d:70:
7e:49:c0:61:54:2f:ff:52:1a:ba:8e:ec:dc:61:d5:
ac:0e:54:7a:ad:84:e1:d9:a6:4c:62:88:e4:c0:f8:
8c:3d:33:03:c6:b7:49:ce:2a:2c:ed:f5:3f:2c:a8:
0d:fe:d1:79:07:d5:a8:a3:7e:3a:bc:30:b0:43:de:
de:12:2d:2e:37:9e:78:d6:9f:c6:7c:42:d7:c2:f3:
d9:91:ef:36:31:41:60:1c:5e:47:8e:b2:a2:9f:6e:
a2:69:40:65:ec:68:b0:de:f1:be:ec:47:4d:77:6e:
cd:32:e5:2e:be:60:45:0c:56:82:ae:2c:60:f8:b7:
d4:cc:df:3d:3e:0d:10:37:5a:01:d1:2b:d4:2f:27:
90:01:e6:27:db:f3:a2:55:d0:3d:f6:c4:2d:58:47:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:DE:68:72:B6:48:A6:2D:AE:2A:E5:D6:54:70:C3:B4:F0:1E:16
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:66:2c:82:1d:65:7c:9b:1e:af:5d:e4:da:28:ef:79:02:
5b:62:87:ad:2f:4c:e5:11:f2:f6:74:7f:87:9e:ca:2b:3d:b9:
11:34:9d:39:af:ee:45:96:34:14:96:7c:16:38:16:4b:00:1a:
71:24:b1:8e:e8:70:cd:4c:a2:4b:f0:6e:8f:0f:7e:9a:2f:68:
15:c2:ab:6a:7b:cd:f6:98:0f:90:6e:0f:e8:3a:0c:91:71:62:
33:0c:87:9c:45:19:d3:32:88:e7:86:09:95:a6:a0:48:b5:7e:
43:4c:07:66:7f:95:08:5c:01:f8:fb:fd:66:83:20:6e:99:19:
62:d7:02:06:89:49:db:4f:82:79:56:bf:53:50:fe:35:d4:3b:
ac:9e:c4:12:34:0e:4b:94:0f:69:6b:2f:91:23:da:3b:06:fd:
e9:00:69:fc:8e:b3:d9:1c:ca:dd:c2:df:b0:dc:53:e9:9d:4d:
a3:71:5b:22:7b:76:b9:c0:a9:99:dc:88:24:e5:49:b0:f2:73:
71:09:c1:6a:8e:5c:d5:07:07:91:f7:2b:ec:9e:e9:e2:20:8c:
54:89:39:4e:4a:ac:32:aa:24:2a:ae:5e:7e:f9:f9:62:40:c3:
b6:27:d4:b7:75:ad:e9:c4:4c:c5:ae:6b:c7:b6:2e:79:f6:9c:
d4:c6:ab:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbVVqui41C01oVJOqj4IbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2
OTkwZjcwHhcNMjYwOTIzMTgwMDQ0WhcNMjYwOTI0MTgwMDQ0WjAzMTEwLwYDVQQD
Eyg2NTY4ZGU2ODcyYjY0OGE2MmRhZTJhZTVkNjU0NzBjM2I0ZjAxZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonScLSzi7dtZOrZRdhH3oDakQVw4
sK/PuNPGCTWN0P1oa6M6rcfWshkz9Glu8BkvvJEg+LUOPRLpkRv5heMaF3ImSteB
V1qzwCqzgQSwPYfQmwLJUdOq1b4VI+uE5+UPwB2WSzR6PXB+ScBhVC//Uhq6juzc
YdWsDlR6rYTh2aZMYojkwPiMPTMDxrdJzios7fU/LKgN/tF5B9Woo346vDCwQ97e
Ei0uN5541p/GfELXwvPZke82MUFgHF5HjrKin26iaUBl7Giw3vG+7EdNd27NMuUu
vmBFDFaCrixg+LfUzN89Pg0QN1oB0SvULyeQAeYn2/OiVdA99sQtWEekQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVo3mhytkimLa4q5dZUcMO08B4WMB8GA1UdIwQY
MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt
MGZiZTdiZDc2ZmZiLzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi
LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJFmLIId
ZXybHq9d5Noo73kCW2KHrS9M5RHy9nR/h57KKz25ETSdOa/uRZY0FJZ8FjgWSwAa
cSSxjuhwzUyiS/Bujw9+mi9oFcKranvN9pgPkG4P6DoMkXFiMwyHnEUZ0zKI54YJ
laagSLV+Q0wHZn+VCFwB+Pv9ZoMgbpkZYtcCBolJ20+CeVa/U1D+NdQ7rJ7EEjQO
S5QPaWsvkSPaOwb96QBp/I6z2RzK3cLfsNxT6Z1No3FbInt2ucCpmdyIJOVJsPJz
cQnBao5c1QcHkfcr7J7p4iCMVIk5TkqsMqokKq5efvn5YkDDtifUt3Wt6cRMxa5r
x7Yuefac1Marqg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:23 2026 by rpki-client