Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: EFIIjpSuCLCrF0oCLIbhKBH89FXipRzUfgoMbxWPwRE=
Subject key identifier: D7:7C:8E:39:E2:8B:33:B2:0C:7B:EC:DB:4C:CA:0A:DD:4F:6E:8B:6F
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 019CAD230403498B2CA84A93C6C915DB817B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 1157
Signing time: Mon 02 Mar 2026 06:01:18 +0000
Manifest this update: Mon 02 Mar 2026 06:01:18 +0000
Manifest next update: Tue 03 Mar 2026 06:01:18 +0000
Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: mzXo3wn5dwAxADFzPgYn3W9W9XwkFs3AlLSmOxpACWg=)
2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:04:03:49:8b:2c:a8:4a:93:c6:c9:15:db:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Mar 2 06:01:18 2026 GMT
Not After : Mar 3 06:01:18 2026 GMT
Subject: CN=d77c8e39e28b33b20c7becdb4cca0add4f6e8b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:16:2b:f4:58:c3:0e:36:22:ac:c5:81:f6:28:
f4:4a:bd:af:a5:d1:28:bd:05:6c:68:de:37:80:b8:
ff:6c:19:63:b9:0b:c6:c6:18:7a:79:90:76:ee:1a:
5b:d0:05:91:e2:af:e4:f6:8b:c5:d2:79:35:23:76:
5b:db:14:f0:0d:09:1d:3f:41:03:d4:8c:12:4c:87:
9e:c5:74:98:57:0d:11:cb:60:e3:20:22:38:7d:04:
96:5d:1c:bc:13:99:f5:61:71:63:48:28:58:f6:9e:
c9:53:3f:9a:1f:ea:5d:a4:3a:46:af:b2:b6:99:a1:
53:23:05:39:ae:db:64:c1:e2:0c:78:8a:7b:49:3c:
60:bd:b5:af:eb:90:fd:1f:ef:34:16:cf:88:00:8f:
09:83:89:fc:7c:79:71:d8:34:99:a0:af:46:5a:72:
f1:0b:85:b5:eb:21:fc:25:d4:f2:85:57:92:ef:16:
05:1a:25:de:65:12:cd:e9:22:64:77:41:52:10:7a:
1e:62:eb:3f:ab:95:c2:4d:1d:c3:9d:99:fe:5d:5b:
41:bd:f4:92:49:f9:74:cb:d6:f6:cb:22:8a:e6:b6:
89:5f:e4:5f:09:b7:c0:00:79:ff:e2:88:af:f8:5c:
f1:f6:b4:d0:e2:c4:48:f6:7c:65:29:47:c6:43:5f:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:8E:39:E2:8B:33:B2:0C:7B:EC:DB:4C:CA:0A:DD:4F:6E:8B:6F
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:3b:c9:cb:0c:4d:cc:db:d9:af:e8:90:41:87:44:fa:b4:
78:a9:c0:80:c1:4e:11:da:69:d4:e5:47:00:46:e9:19:27:d5:
04:31:9a:19:71:b1:09:4b:23:11:82:bb:70:f4:c8:ee:86:b1:
ba:73:e7:ef:2f:c4:75:cd:f2:5c:03:7a:2b:20:d9:78:c0:58:
58:8a:40:bc:aa:51:e2:d0:08:c0:78:59:07:34:70:07:96:29:
36:e8:c6:ed:af:eb:40:4f:12:b2:1a:d2:c8:88:32:be:c8:5b:
2e:6b:6c:75:b3:34:14:25:33:95:97:c9:c5:b5:ce:b0:e2:85:
ab:a9:39:cc:27:9d:be:12:4c:b4:75:f4:93:3a:68:bc:87:50:
05:7c:30:33:ff:3d:4a:06:04:ba:c7:36:82:cb:e7:b6:cb:06:
57:63:be:9b:9d:b6:e6:a1:30:65:ef:43:ca:7b:90:bd:80:01:
9d:0c:ae:93:5f:d6:6b:33:d6:e5:09:ba:8a:45:f4:1c:4b:92:
f8:9f:19:2c:bc:ad:27:cd:ea:a9:23:40:b8:42:80:9e:68:f2:
4a:9e:30:22:55:59:6e:83:23:56:bf:b2:cd:67:d7:3b:6d:82:
51:ad:91:ab:3a:90:a5:cd:86:48:f8:b3:99:8c:2d:51:57:92:
4f:70:f7:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIwQDSYssqEqTxskV24F7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ0MDUyZTBmYzc2NTM2MzYxY2JiZGM3NzUwODc3ZGRm
MzYwYWQwHhcNMjYwMzAyMDYwMTE4WhcNMjYwMzAzMDYwMTE4WjAzMTEwLwYDVQQD
EyhkNzdjOGUzOWUyOGIzM2IyMGM3YmVjZGI0Y2NhMGFkZDRmNmU4YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xYr9FjDDjYirMWB9ij0Sr2vpdEo
vQVsaN43gLj/bBljuQvGxhh6eZB27hpb0AWR4q/k9ovF0nk1I3Zb2xTwDQkdP0ED
1IwSTIeexXSYVw0Ry2DjICI4fQSWXRy8E5n1YXFjSChY9p7JUz+aH+pdpDpGr7K2
maFTIwU5rttkweIMeIp7STxgvbWv65D9H+80Fs+IAI8Jg4n8fHlx2DSZoK9GWnLx
C4W16yH8JdTyhVeS7xYFGiXeZRLN6SJkd0FSEHoeYus/q5XCTR3DnZn+XVtBvfSS
Sfl0y9b2yyKK5raJX+RfCbfAAHn/4oiv+Fzx9rTQ4sRI9nxlKUfGQ183QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd8jjniizOyDHvs20zKCt1PbotvMB8GA1UdIwQY
MBaAFG3dQFLg/HZTY2HLvcd1CHfd82CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQt
YmE3YjFmMzc2OWUzLzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQtYmE3YjFmMzc2OWUz
LzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClo7ycsM
Tczb2a/okEGHRPq0eKnAgMFOEdpp1OVHAEbpGSfVBDGaGXGxCUsjEYK7cPTI7oax
unPn7y/Edc3yXAN6KyDZeMBYWIpAvKpR4tAIwHhZBzRwB5YpNujG7a/rQE8SshrS
yIgyvshbLmtsdbM0FCUzlZfJxbXOsOKFq6k5zCedvhJMtHX0kzpovIdQBXwwM/89
SgYEusc2gsvntssGV2O+m5225qEwZe9DynuQvYABnQyuk1/WazPW5Qm6ikX0HEuS
+J8ZLLytJ83qqSNAuEKAnmjySp4wIlVZboMjVr+yzWfXO22CUa2RqzqQpc2GSPiz
mYwtUVeST3D3eA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:15:12 2026 by rpki-client