Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File: bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier: NlPnkqy72aoHVZIIPzpkKmqGHmzNgKoE4dtj61B0GyM=
Subject key identifier: 22:51:4F:F2:8A:0A:8F:EB:D4:3C:92:BE:EE:4E:33:52:C7:23:42:DB
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer: /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial: 01A0E5BE7F33AC55D66C54A3BBD23C50DC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number: 0325
Signing time: Mon 28 Sep 2026 02:01:01 +0000
Manifest this update: Mon 28 Sep 2026 02:01:01 +0000
Manifest next update: Tue 29 Sep 2026 02:01:01 +0000
Files and hashes: 1: IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (hash: MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=)
2: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: Ei/Sif7ox19swzNND6QO6hIdXn1WFcnr8fJWOYw8N6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:7f:33:ac:55:d6:6c:54:a3:bb:d2:3c:50:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Validity
Not Before: Sep 28 02:01:01 2026 GMT
Not After : Sep 29 02:01:01 2026 GMT
Subject: CN=22514ff28a0a8febd43c92beee4e3352c72342db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:a0:b0:06:98:8b:fd:b7:5f:c9:df:83:12:
4e:c3:ca:32:b7:c5:2b:fa:e3:eb:42:9d:0c:ee:ab:
37:bb:90:01:fb:8b:be:74:60:21:5f:ad:ec:9f:26:
6a:51:b5:35:35:2d:e3:11:11:cd:8c:d4:6a:fa:59:
c6:74:d6:8b:cd:df:db:bb:61:2c:b0:b5:28:77:ed:
bb:37:c8:2f:3d:97:c6:c5:1c:2c:62:b5:9c:2e:8b:
43:9d:9c:10:b3:13:f0:32:23:9b:a9:c9:23:25:47:
e8:40:a4:fb:41:d5:48:5b:fe:d6:db:3b:bb:d2:22:
17:90:57:ba:7e:1c:a6:8b:76:f2:86:9b:1a:5c:e3:
d8:64:df:bf:6f:7b:eb:f5:0d:bd:2a:1c:af:53:a0:
02:df:1a:34:d4:e2:1b:9f:34:bb:72:69:43:d4:24:
65:42:77:35:21:ab:2a:a1:7c:f1:fa:9b:50:20:fd:
cb:73:ef:02:a0:39:17:ed:20:76:75:1b:60:6d:ab:
6d:e7:c0:d4:5f:fa:24:23:42:97:76:33:8d:36:42:
e5:b5:da:63:63:bb:cd:40:fb:f4:53:85:df:ce:04:
c1:e6:e8:39:1a:88:e6:e5:1c:bb:4b:c2:a2:23:e8:
b8:f9:bc:0b:8d:53:e3:12:e2:79:3c:85:79:0d:e5:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:4F:F2:8A:0A:8F:EB:D4:3C:92:BE:EE:4E:33:52:C7:23:42:DB
X509v3 Authority Key Identifier:
keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:cc:a1:f1:06:5a:f1:10:7c:c4:d2:18:a3:e4:7e:02:b6:
65:c8:15:4f:e0:95:8d:3a:ab:70:3a:aa:e2:e2:35:68:c7:66:
8a:c7:8b:d2:cc:e6:74:81:1e:d9:1e:80:f8:cf:61:54:33:57:
1b:e3:c2:63:96:94:05:67:cf:d0:22:26:eb:dd:0f:1f:49:4f:
c1:31:a3:7e:02:d5:51:41:e7:d1:ae:37:00:29:4f:56:2e:9b:
46:21:9c:a0:62:a4:d7:5c:41:82:40:b4:06:7c:84:9e:d3:74:
44:c5:96:09:8d:f0:ca:b0:7d:f4:8a:2a:6c:ec:98:4e:4e:42:
9e:5a:f1:f4:98:6a:40:e3:8a:b6:4f:38:33:21:52:52:00:b8:
5a:bc:3c:8a:45:08:ae:69:5a:d2:63:54:85:d6:d3:81:ec:89:
9f:9b:20:39:5a:5e:c8:e5:bf:c2:35:ce:f3:db:37:05:a0:d6:
1e:d7:02:13:bb:23:d9:9f:c6:95:4f:d3:4f:21:43:f3:a2:f3:
6e:30:dd:4d:f2:5c:f9:28:73:ab:e1:32:77:15:53:06:9d:3c:
6b:4e:53:47:8e:f1:3c:8a:b7:d3:eb:e8:e0:f7:17:37:98:69:
8b:74:3f:80:ac:69:0b:ee:8d:fd:8c:f1:97:2a:e2:37:b8:d4:
33:0f:8e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlvn8zrFXWbFSju9I8UNxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGM2ZTUxNGY0ZjYyZWFkYjNlMjcxMGVhYzljOWYyZjA2
NDVmNzgwHhcNMjYwOTI4MDIwMTAxWhcNMjYwOTI5MDIwMTAxWjAzMTEwLwYDVQQD
EygyMjUxNGZmMjhhMGE4ZmViZDQzYzkyYmVlZTRlMzM1MmM3MjM0MmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FygsAaYi/23X8nfgxJOw8oyt8Ur
+uPrQp0M7qs3u5AB+4u+dGAhX63snyZqUbU1NS3jERHNjNRq+lnGdNaLzd/bu2Es
sLUod+27N8gvPZfGxRwsYrWcLotDnZwQsxPwMiObqckjJUfoQKT7QdVIW/7W2zu7
0iIXkFe6fhymi3byhpsaXOPYZN+/b3vr9Q29KhyvU6AC3xo01OIbnzS7cmlD1CRl
Qnc1IasqoXzx+ptQIP3Lc+8CoDkX7SB2dRtgbatt58DUX/okI0KXdjONNkLltdpj
Y7vNQPv0U4XfzgTB5ug5Gojm5Ry7S8KiI+i4+bwLjVPjEuJ5PIV5DeVQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJRT/KKCo/r1DySvu5OM1LHI0LbMB8GA1UdIwQY
MBaAFG3cblFPT2Lq2z4nEOrJyfLwZF94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2Mt
YjZiNzRhZDc1MjJhLzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2MtYjZiNzRhZDc1MjJh
LzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl17MofEG
WvEQfMTSGKPkfgK2ZcgVT+CVjTqrcDqq4uI1aMdmiseL0szmdIEe2R6A+M9hVDNX
G+PCY5aUBWfP0CIm690PH0lPwTGjfgLVUUHn0a43AClPVi6bRiGcoGKk11xBgkC0
BnyEntN0RMWWCY3wyrB99IoqbOyYTk5Cnlrx9JhqQOOKtk84MyFSUgC4Wrw8ikUI
rmla0mNUhdbTgeyJn5sgOVpeyOW/wjXO89s3BaDWHtcCE7sj2Z/GlU/TTyFD86Lz
bjDdTfJc+Shzq+EydxVTBp08a05TR47xPIq30+vo4PcXN5hpi3Q/gKxpC+6N/Yzx
lyriN7jUMw+ORA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:14:50 2026 by rpki-client