Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
File: bQ1tLElBrnWMSVIKy3V38jKuRiY.mft (raw, json)
Hash identifier: 8773Mq5HR+qxzex7npitmYzUj/BIK/Indf9yyHfrbNk=
Subject key identifier: CA:BC:44:E8:28:B2:14:0A:3E:8A:9D:FD:E7:4D:DF:0F:7B:E0:D8:48
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Certificate issuer: /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial: 019EBE7FB1E982274EDBA31A7A9A8A10D9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
Manifest number: 6B
Signing time: Sat 13 Jun 2026 01:01:40 +0000
Manifest this update: Sat 13 Jun 2026 01:01:40 +0000
Manifest next update: Sun 14 Jun 2026 01:01:40 +0000
Files and hashes: 1: BBATvh4xeWeL839jiNfIKPcK8JA.roa (hash: VpG3w6G88UCXf4PVa4Xkm7ESG9W4N22rBINybDK9cYA=)
2: ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (hash: 5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=)
3: bQ1tLElBrnWMSVIKy3V38jKuRiY.crl (hash: mCsGvNVG6UYUyeWOfKWl8nLdRx/h6FQQFip6aozHOok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:b1:e9:82:27:4e:db:a3:1a:7a:9a:8a:10:d9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Validity
Not Before: Jun 13 01:01:40 2026 GMT
Not After : Jun 14 01:01:40 2026 GMT
Subject: CN=cabc44e828b2140a3e8a9dfde74ddf0f7be0d848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:2f:40:0d:c5:17:d6:de:c1:33:3e:b3:f1:
07:a8:b7:88:46:06:26:88:9c:40:fb:74:fd:1a:83:
47:55:3c:16:10:73:b3:85:bd:8b:96:48:24:99:5d:
39:bf:40:d9:69:4a:61:ea:47:9f:b3:f4:20:9e:9d:
a0:7a:0f:20:68:99:81:8c:55:35:c1:36:99:35:82:
0d:bb:e9:be:f2:34:1e:ab:6d:1d:f1:6f:66:ad:b9:
9d:b1:0f:5a:be:3a:57:00:f5:0a:c7:b3:45:5e:5a:
a9:e6:df:5e:cc:51:9b:7d:55:38:cc:9c:9e:15:79:
6d:0f:14:2f:a8:e8:b8:28:b2:4e:cb:3b:c5:c0:54:
53:77:ac:d4:ae:8c:aa:aa:d1:33:ca:c4:70:bd:a4:
57:14:fd:d1:ae:fa:90:ea:b8:8d:0f:8f:17:16:11:
da:55:e1:88:ad:7a:36:fb:d1:6a:46:13:85:7a:53:
54:eb:fe:aa:19:b9:71:01:5c:11:04:4a:68:17:ed:
72:fa:bb:be:91:51:9b:98:db:6e:c7:26:20:06:ce:
1c:e0:c3:a6:93:21:ae:e1:09:f0:09:0b:99:45:63:
13:35:be:a5:1f:00:32:40:f6:9b:9e:ae:d0:9b:19:
e3:ec:34:34:22:a8:46:50:69:28:2f:be:d4:6d:fd:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:44:E8:28:B2:14:0A:3E:8A:9D:FD:E7:4D:DF:0F:7B:E0:D8:48
X509v3 Authority Key Identifier:
keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c3:ba:e8:fc:69:17:ef:f4:8b:75:71:ce:a9:4d:61:fb:cd:
9f:ef:c2:2c:d2:23:fd:de:c6:f0:a7:3a:af:ba:76:38:3d:54:
a8:a2:ec:bc:ca:1f:93:0a:bb:44:20:c2:f1:f1:bc:81:5c:b5:
32:1a:ef:b1:d2:be:7f:3f:f4:c6:eb:30:aa:5f:73:94:4b:e2:
c2:ae:5e:21:a3:2b:d5:31:3f:3b:19:a7:f0:06:d1:17:fe:e2:
75:f9:fa:c6:31:78:ff:ca:3e:20:a5:dc:07:3e:a5:26:be:c6:
bf:69:e9:bf:0e:16:3d:7e:38:ae:bd:07:d5:7b:01:d9:ba:7a:
5f:6c:8a:c6:07:4f:79:68:66:04:92:ce:6a:f9:ee:20:b7:6b:
6b:43:04:63:fa:f7:fa:72:84:6c:f4:fe:ee:c9:45:7c:80:f6:
55:3b:c2:e0:ea:af:f6:47:d9:26:40:51:6e:22:cd:42:8b:27:
97:04:de:97:c0:c3:5f:b1:89:c4:7b:e2:2b:08:4e:e4:7e:3b:
a2:86:ff:95:8e:9f:93:9e:3b:a2:10:21:2c:56:4b:f8:90:4e:
cf:d4:56:6a:e5:7b:d1:c3:7e:16:84:ed:6a:0e:d0:93:01:47:
69:8b:1b:58:e4:94:34:2c:1b:88:37:d1:5d:d2:26:4c:11:e6:
de:38:a2:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f7HpgidO26MaepqKENmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGQ2ZDJjNDk0MWFlNzU4YzQ5NTIwYWNiNzU3N2YyMzJh
ZTQ2MjYwHhcNMjYwNjEzMDEwMTQwWhcNMjYwNjE0MDEwMTQwWjAzMTEwLwYDVQQD
EyhjYWJjNDRlODI4YjIxNDBhM2U4YTlkZmRlNzRkZGYwZjdiZTBkODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPIvQA3FF9bewTM+s/EHqLeIRgYm
iJxA+3T9GoNHVTwWEHOzhb2LlkgkmV05v0DZaUph6kefs/Qgnp2geg8gaJmBjFU1
wTaZNYINu+m+8jQeq20d8W9mrbmdsQ9avjpXAPUKx7NFXlqp5t9ezFGbfVU4zJye
FXltDxQvqOi4KLJOyzvFwFRTd6zUroyqqtEzysRwvaRXFP3RrvqQ6riND48XFhHa
VeGIrXo2+9FqRhOFelNU6/6qGblxAVwRBEpoF+1y+ru+kVGbmNtuxyYgBs4c4MOm
kyGu4QnwCQuZRWMTNb6lHwAyQPabnq7Qmxnj7DQ0IqhGUGkoL77Ubf103wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq8ROgoshQKPoqd/edN3w974NhIMB8GA1UdIwQY
MBaAFG0NbSxJQa51jElSCst1d/IyrkYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlExdExFbEJybldNU1ZJS3kzVjM4akt1UmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mMzI3MWUtMmY1OS00M2UyLTgxZTct
YzZiMDI4ZmFkOTU2LzEvYlExdExFbEJybldNU1ZJS3kzVjM4akt1UmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mMzI3MWUtMmY1OS00M2UyLTgxZTctYzZiMDI4ZmFkOTU2
LzEvYlExdExFbEJybldNU1ZJS3kzVjM4akt1UmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMO66Pxp
F+/0i3VxzqlNYfvNn+/CLNIj/d7G8Kc6r7p2OD1UqKLsvMofkwq7RCDC8fG8gVy1
MhrvsdK+fz/0xuswql9zlEviwq5eIaMr1TE/Oxmn8AbRF/7idfn6xjF4/8o+IKXc
Bz6lJr7Gv2npvw4WPX44rr0H1XsB2bp6X2yKxgdPeWhmBJLOavnuILdra0MEY/r3
+nKEbPT+7slFfID2VTvC4Oqv9kfZJkBRbiLNQosnlwTel8DDX7GJxHviKwhO5H47
oob/lY6fk547ohAhLFZL+JBOz9RWauV70cN+FoTtag7QkwFHaYsbWOSUNCwbiDfR
XdImTBHm3jiiOw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:58 2026 by rpki-client