Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File: bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier: OBfFeTAvjhH9USsWqR85iYkXrj/egvCLdhHTyVal0Hw=
Subject key identifier: B5:AE:C8:89:18:4B:79:C5:61:51:76:60:70:EE:B4:DB:97:E5:3B:D1
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer: /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial: 019EC0DABC647FC678C8D5A02575872BD977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 12:00:21 +0000
Manifest this update: Sat 13 Jun 2026 12:00:21 +0000
Manifest next update: Sun 14 Jun 2026 12:00:21 +0000
Files and hashes: 1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: caLEjx4BOi0E70eSo9L5iZrHJsUoS75M5yaPsH6c8NM=)
2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:bc:64:7f:c6:78:c8:d5:a0:25:75:87:2b:d9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Validity
Not Before: Jun 13 12:00:21 2026 GMT
Not After : Jun 14 12:00:21 2026 GMT
Subject: CN=b5aec889184b79c56151766070eeb4db97e53bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:c9:ea:91:03:a2:48:f6:ed:28:0b:73:d8:
6b:bf:cc:be:b1:ec:af:62:10:0e:fd:a0:96:e3:24:
47:d5:1a:88:2c:96:a8:9c:ad:a1:99:8b:3a:eb:8f:
59:5c:f2:b4:07:c7:87:b3:15:12:d1:4c:01:42:98:
17:3e:cf:ab:68:11:11:a8:50:fe:fb:c6:f8:72:88:
2b:bf:79:4d:54:27:0d:cf:56:a2:e4:7f:ff:b0:83:
27:c4:e8:c3:62:55:35:87:b6:9c:7c:d5:16:35:d0:
48:f2:db:ed:0e:3b:ed:37:53:70:d2:60:66:ab:43:
38:1a:f2:8c:34:bd:19:74:71:d7:32:f3:33:6e:f0:
b9:44:c8:a1:14:42:f9:9c:a7:03:dd:67:6d:9d:21:
16:18:56:5a:f1:08:ff:43:39:93:33:67:ff:16:91:
d8:ca:30:5e:12:47:49:21:ee:8a:d4:c5:3d:b1:5c:
96:a8:5a:0f:0d:e3:6e:a4:b3:6f:19:16:14:89:b1:
2e:5d:8c:b9:aa:21:cc:86:b9:64:27:ef:b0:2d:6b:
80:b3:c7:0b:b3:cb:ff:f9:39:e1:a6:47:56:bd:9a:
eb:11:88:1c:15:2f:ed:aa:6e:3f:58:9b:61:68:59:
56:67:1d:ce:d7:3a:90:25:87:23:50:1f:87:d9:58:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AE:C8:89:18:4B:79:C5:61:51:76:60:70:EE:B4:DB:97:E5:3B:D1
X509v3 Authority Key Identifier:
keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:14:93:56:67:f5:f7:20:99:4c:ae:0f:cc:a9:cb:2c:ca:a2:
c1:a1:64:49:b9:e2:ca:d7:22:4b:0c:ed:d3:5b:1a:23:70:4c:
75:a6:50:23:b0:c7:2a:7c:a5:ee:3b:a7:96:c7:9a:d9:19:79:
b4:5b:0a:9c:8b:e2:20:bb:d0:7c:0d:8c:2c:44:6f:bf:3f:ff:
f3:71:3a:9a:cd:67:a6:ff:f8:c1:07:9d:ee:a9:0a:fd:44:44:
01:4b:88:d8:b5:f0:8b:38:1e:c5:b8:a3:48:a4:4b:85:44:00:
d9:24:c5:bd:2c:20:b5:08:4d:f8:8d:c2:bf:36:b5:53:d6:44:
d0:fc:5e:66:ac:c8:67:cd:be:51:27:40:c6:4a:a6:3d:9a:e5:
ea:67:ea:79:49:1e:c1:e7:ab:14:9a:ed:44:63:16:c0:9d:21:
52:2b:63:57:89:b9:3f:f4:63:69:63:4b:90:02:ab:a3:5c:b9:
1a:1d:d1:3f:7b:f4:0f:45:8b:3b:4c:0a:b7:50:c8:a5:4f:aa:
74:89:c6:3c:d0:5b:7a:ee:41:74:f0:da:53:7c:65:e8:e2:45:
81:c7:8e:30:c6:be:d0:33:06:7f:2b:df:a2:e6:5a:1e:fa:96:
2f:88:2d:cd:f8:c6:25:b1:fe:9a:89:55:b5:59:f2:ff:c9:6e:
26:3e:df:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2rxkf8Z4yNWgJXWHK9l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGI0NzIzYjMzYjRmNzJkMjBhOGM2YThiY2M2NDZhNDc4
MDE3MDUwHhcNMjYwNjEzMTIwMDIxWhcNMjYwNjE0MTIwMDIxWjAzMTEwLwYDVQQD
EyhiNWFlYzg4OTE4NGI3OWM1NjE1MTc2NjA3MGVlYjRkYjk3ZTUzYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcfJ6pEDokj27SgLc9hrv8y+seyv
YhAO/aCW4yRH1RqILJaonK2hmYs6649ZXPK0B8eHsxUS0UwBQpgXPs+raBERqFD+
+8b4cogrv3lNVCcNz1ai5H//sIMnxOjDYlU1h7acfNUWNdBI8tvtDjvtN1Nw0mBm
q0M4GvKMNL0ZdHHXMvMzbvC5RMihFEL5nKcD3WdtnSEWGFZa8Qj/QzmTM2f/FpHY
yjBeEkdJIe6K1MU9sVyWqFoPDeNupLNvGRYUibEuXYy5qiHMhrlkJ++wLWuAs8cL
s8v/+TnhpkdWvZrrEYgcFS/tqm4/WJthaFlWZx3O1zqQJYcjUB+H2VivHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWuyIkYS3nFYVF2YHDutNuX5TvRMB8GA1UdIwQY
MBaAFG3bRyOzO09y0gqMaovMZGpHgBcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmR0SEk3TTdUM0xTQ294cWk4eGtha2VBRndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82NGQ1MmUtOWJjMy00ODE5LTljMzkt
Nzc5ZDUzYzBkMWZkLzEvYmR0SEk3TTdUM0xTQ294cWk4eGtha2VBRndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82NGQ1MmUtOWJjMy00ODE5LTljMzktNzc5ZDUzYzBkMWZk
LzEvYmR0SEk3TTdUM0xTQ294cWk4eGtha2VBRndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRSTVmf1
9yCZTK4PzKnLLMqiwaFkSbniytciSwzt01saI3BMdaZQI7DHKnyl7junlsea2Rl5
tFsKnIviILvQfA2MLERvvz//83E6ms1npv/4wQed7qkK/UREAUuI2LXwizgexbij
SKRLhUQA2STFvSwgtQhN+I3Cvza1U9ZE0PxeZqzIZ82+USdAxkqmPZrl6mfqeUke
weerFJrtRGMWwJ0hUitjV4m5P/RjaWNLkAKro1y5Gh3RP3v0D0WLO0wKt1DIpU+q
dInGPNBbeu5BdPDaU3xl6OJFgceOMMa+0DMGfyvfouZaHvqWL4gtzfjGJbH+molV
tVny/8luJj7fHA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:39 2026 by rpki-client