Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: q1Z3yGiVRqvBX1KQUXUG0zW7BaxUSkVwrKhotKyWLKg=
Subject key identifier: 2F:D5:7B:5B:D9:5D:FC:11:28:E1:87:45:BD:10:C3:AE:60:81:31:E9
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 01A0D3B84775B8C1C929DFB9F0C642C6CDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 14:01:04 +0000
Manifest this update: Thu 24 Sep 2026 14:01:04 +0000
Manifest next update: Fri 25 Sep 2026 14:01:04 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: wNahstPe8Q7bYBWXSbyBhWS9NlzuriRJfonYEzzFFBE=)
2: M_A3e3R8jmuhb-5C7iHURiY1mF4.roa (hash: pposJ11ASLS11U+yEHFg+J1Wl26KYyJ65Lb1yj0wnLk=)
3: lymEYBnEsOOn3Gt3ofBUwjJiEh4.roa (hash: LpPWNCNkVyG5VQaWrVRu1QVmk/jU2fSetHMizIkYcOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:47:75:b8:c1:c9:29:df:b9:f0:c6:42:c6:cd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Sep 24 14:01:04 2026 GMT
Not After : Sep 25 14:01:04 2026 GMT
Subject: CN=2fd57b5bd95dfc1128e18745bd10c3ae608131e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:53:a9:17:2a:1f:32:2b:a8:16:9d:8a:05:
fa:d6:46:14:3d:38:d8:32:dd:c4:4d:b2:6c:79:2b:
bf:76:6b:1f:7f:df:01:7b:8b:e3:73:49:e6:33:61:
0a:28:24:0e:22:06:4e:8f:ea:ca:e8:27:a5:83:77:
be:67:ff:e6:c4:f7:d5:a8:b9:e9:24:53:b3:73:2f:
c3:27:24:ab:1f:ea:f9:47:f1:5d:58:0b:1b:33:78:
d5:8c:29:11:66:9a:26:07:4a:b6:fb:18:7c:fc:c2:
73:c1:a5:cc:a0:3b:df:1b:1b:e2:bc:b8:0d:d9:99:
fb:f0:9a:f4:61:66:73:ab:77:41:49:4c:91:40:89:
f4:bf:ce:d5:7c:c6:86:95:49:de:21:da:f1:4f:3b:
d3:ae:2b:ab:f7:19:6c:a2:ab:b6:b2:6c:e7:18:92:
f2:36:ea:a5:99:ac:90:0e:32:b6:25:e0:cf:23:10:
99:18:56:27:72:02:58:d5:e1:0c:b6:97:48:99:69:
f6:94:bc:c2:5f:34:96:64:12:fd:d0:48:ba:2d:7e:
bf:44:10:46:5e:ea:6d:f8:6b:a7:92:03:58:af:3f:
0e:da:bc:8c:08:1c:a8:c0:4e:a6:3c:a2:53:14:42:
be:70:5d:f1:e5:53:51:10:9e:40:c4:56:08:19:37:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D5:7B:5B:D9:5D:FC:11:28:E1:87:45:BD:10:C3:AE:60:81:31:E9
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:ae:b6:c8:ee:6d:18:70:29:aa:ab:b8:f0:90:77:c3:5a:
7e:73:65:4f:37:0f:64:99:58:d5:f9:87:7b:80:c8:47:2c:c5:
71:93:82:85:28:75:2e:34:e0:50:aa:c7:c6:ce:95:72:ae:1d:
a5:be:71:8a:e6:f2:25:70:25:5c:de:a5:56:62:14:f0:97:79:
fd:88:4b:4b:90:9b:3f:1e:93:cc:4e:dd:e6:f3:a5:71:9e:d8:
32:28:73:f8:56:e4:00:ed:ed:0d:65:ad:9d:cd:31:18:98:5c:
03:8a:3e:fa:d6:f8:2d:b7:7a:b1:10:22:5f:ea:36:f4:25:ac:
c1:94:82:fc:98:50:6f:17:9b:20:6c:d4:5f:f7:d6:da:d9:d3:
4b:f4:ca:21:9b:7c:cf:4e:ff:8c:9d:75:34:cc:ee:fd:d1:71:
e2:31:bc:bd:d9:49:99:71:2f:a1:03:64:28:14:89:01:cf:cd:
4e:a2:0a:ac:55:35:6b:21:a5:ec:c1:64:aa:5d:fb:92:6f:5e:
39:7c:90:26:0d:11:bb:f8:e1:87:dc:36:b6:55:8b:e9:d2:f7:
b7:af:1a:0d:00:b6:b0:c6:b5:eb:41:32:7a:3e:61:4c:1d:17:
53:44:5a:bc:60:ee:6d:b0:55:bf:0a:55:88:29:c7:c1:76:6e:
87:ec:0d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuEd1uMHJKd+58MZCxs3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1M2U5NDUwMWYwZmQyY2RlYTNjMmU3YjQ2MzE4ZTZlN2Y1
MTVmNzMwHhcNMjYwOTI0MTQwMTA0WhcNMjYwOTI1MTQwMTA0WjAzMTEwLwYDVQQD
EygyZmQ1N2I1YmQ5NWRmYzExMjhlMTg3NDViZDEwYzNhZTYwODEzMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQNTqRcqHzIrqBadigX61kYUPTjY
Mt3ETbJseSu/dmsff98Be4vjc0nmM2EKKCQOIgZOj+rK6Celg3e+Z//mxPfVqLnp
JFOzcy/DJySrH+r5R/FdWAsbM3jVjCkRZpomB0q2+xh8/MJzwaXMoDvfGxvivLgN
2Zn78Jr0YWZzq3dBSUyRQIn0v87VfMaGlUneIdrxTzvTriur9xlsoqu2smznGJLy
NuqlmayQDjK2JeDPIxCZGFYncgJY1eEMtpdImWn2lLzCXzSWZBL90Ei6LX6/RBBG
Xupt+GunkgNYrz8O2ryMCByowE6mPKJTFEK+cF3x5VNREJ5AxFYIGTfsDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/Ve1vZXfwRKOGHRb0Qw65ggTHpMB8GA1UdIwQY
MBaAFAU+lFAfD9LN6jwue0Yxjm5/UV9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTIt
NjFiNTI2Mzc5MjFiLzEvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTItNjFiNTI2Mzc5MjFi
LzEvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACq+utsju
bRhwKaqruPCQd8NafnNlTzcPZJlY1fmHe4DIRyzFcZOChSh1LjTgUKrHxs6Vcq4d
pb5xiubyJXAlXN6lVmIU8Jd5/YhLS5CbPx6TzE7d5vOlcZ7YMihz+FbkAO3tDWWt
nc0xGJhcA4o++tb4Lbd6sRAiX+o29CWswZSC/JhQbxebIGzUX/fW2tnTS/TKIZt8
z07/jJ11NMzu/dFx4jG8vdlJmXEvoQNkKBSJAc/NTqIKrFU1ayGl7MFkql37km9e
OXyQJg0Ru/jhh9w2tlWL6dL3t68aDQC2sMa160Eyej5hTB0XU0RavGDubbBVvwpV
iCnHwXZuh+wN8Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:58:17 2026 by rpki-client