Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: nZu5BV4ogLCbCOqU3DBd32wsIhc7QdnyX9cEOHM1db0=
Subject key identifier: 88:48:D1:D8:20:7C:48:D6:23:E8:41:02:2D:DD:37:BC:9A:73:E8:FA
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 01A139A41857F59D498AD01D8ECD4241B7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 13B2
Signing time: Wed 14 Oct 2026 09:00:17 +0000
Manifest this update: Wed 14 Oct 2026 09:00:17 +0000
Manifest next update: Thu 15 Oct 2026 09:00:17 +0000
Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: Y0s2oDpRprIQw8Or2tX9u7mlHz3cQb8CApavzHW2r/M=)
2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:18:57:f5:9d:49:8a:d0:1d:8e:cd:42:41:b7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Oct 14 09:00:17 2026 GMT
Not After : Oct 15 09:00:17 2026 GMT
Subject: CN=8848d1d8207c48d623e841022ddd37bc9a73e8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:4b:c1:7e:5c:17:7f:15:b5:f2:4d:b9:66:
b6:25:3d:0b:9b:01:33:f7:a6:bb:66:73:a1:17:87:
cf:6b:d9:07:f0:3a:b7:a7:3f:83:b6:58:79:e3:7e:
2a:32:6a:71:1c:01:34:98:ca:0b:91:eb:34:bf:98:
92:50:b6:c6:47:bd:8a:cd:ad:89:40:24:7f:3a:e4:
cb:22:b4:47:2e:22:e1:5e:c5:0e:d0:77:a7:d4:7b:
c7:86:24:37:ee:e5:6c:18:8e:1d:9b:f7:bf:c9:bc:
5c:86:7d:01:ff:25:f3:e8:26:4c:8b:4d:ef:7b:0e:
5e:96:6b:e4:34:38:99:81:95:a0:65:2e:f2:82:2c:
00:79:b5:41:81:8d:20:32:82:e6:49:40:07:77:cd:
fb:1b:51:e3:88:fe:a7:b6:f2:1f:23:40:20:7e:ab:
cb:af:eb:b7:a8:e1:8c:35:a9:8a:11:a6:40:fa:da:
e4:ff:ba:f2:c0:5b:44:0a:e9:9b:7b:65:69:61:fe:
78:5d:51:b9:7e:41:3b:86:20:98:a7:6d:4b:c1:87:
f6:93:6b:db:9d:2f:0b:51:8f:ca:3d:66:aa:2d:f1:
19:64:5f:3e:25:d7:09:ab:3d:81:a9:80:86:5a:05:
fc:c5:51:82:bf:e9:14:08:dd:ce:58:a3:7c:ef:f1:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:D1:D8:20:7C:48:D6:23:E8:41:02:2D:DD:37:BC:9A:73:E8:FA
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:79:3a:d9:bb:56:96:e2:dc:6c:30:04:70:0f:28:27:62:5b:
45:2c:80:ac:9c:14:7f:71:d0:a6:0e:c7:ca:37:c2:75:1b:eb:
60:a4:3a:d2:06:c1:25:c6:4d:36:f2:bb:dc:74:19:a2:4d:c5:
d4:9a:6a:8d:b8:a0:57:b5:4a:ec:1d:25:30:19:65:ca:19:1a:
bd:7c:ca:51:66:fd:7a:fa:34:39:c9:2e:3b:e2:e2:4f:be:38:
ab:2b:dd:0f:41:13:ca:72:56:bb:4a:c7:0e:11:83:c6:bb:f8:
03:0a:09:56:9a:15:c4:23:9a:3a:7a:29:b6:eb:59:e8:2b:74:
c0:04:e8:1c:8e:50:79:78:50:b9:a6:fe:53:01:24:bf:7f:1f:
2d:ed:d7:84:6f:10:fe:90:68:fd:a8:65:53:6c:73:b4:98:90:
77:82:fc:55:58:84:88:86:07:19:25:ca:4a:70:2c:27:c2:4d:
6a:9c:45:eb:f8:f6:e8:5b:3a:94:9e:90:31:d6:11:c8:fd:da:
52:b5:37:b5:a6:72:2d:8b:08:e5:3f:61:eb:c1:86:fe:5a:52:
17:a5:93:ef:21:1e:aa:5f:44:d1:1c:d3:82:91:2e:1a:06:87:
48:93:89:8a:15:ba:63:46:0c:da:1a:20:a2:89:d2:c0:62:ea:
64:ad:c1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5pBhX9Z1JitAdjs1CQbexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ0MDUyZTBmYzc2NTM2MzYxY2JiZGM3NzUwODc3ZGRm
MzYwYWQwHhcNMjYxMDE0MDkwMDE3WhcNMjYxMDE1MDkwMDE3WjAzMTEwLwYDVQQD
Eyg4ODQ4ZDFkODIwN2M0OGQ2MjNlODQxMDIyZGRkMzdiYzlhNzNlOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzhLwX5cF38VtfJNuWa2JT0LmwEz
96a7ZnOhF4fPa9kH8Dq3pz+Dtlh5434qMmpxHAE0mMoLkes0v5iSULbGR72Kza2J
QCR/OuTLIrRHLiLhXsUO0Hen1HvHhiQ37uVsGI4dm/e/ybxchn0B/yXz6CZMi03v
ew5elmvkNDiZgZWgZS7ygiwAebVBgY0gMoLmSUAHd837G1HjiP6ntvIfI0AgfqvL
r+u3qOGMNamKEaZA+trk/7rywFtECumbe2VpYf54XVG5fkE7hiCYp21LwYf2k2vb
nS8LUY/KPWaqLfEZZF8+JdcJqz2BqYCGWgX8xVGCv+kUCN3OWKN87/FLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhI0dggfEjWI+hBAi3dN7yac+j6MB8GA1UdIwQY
MBaAFG3dQFLg/HZTY2HLvcd1CHfd82CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQt
YmE3YjFmMzc2OWUzLzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQtYmE3YjFmMzc2OWUz
LzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXk62btW
luLcbDAEcA8oJ2JbRSyArJwUf3HQpg7HyjfCdRvrYKQ60gbBJcZNNvK73HQZok3F
1JpqjbigV7VK7B0lMBllyhkavXzKUWb9evo0OckuO+LiT744qyvdD0ETynJWu0rH
DhGDxrv4AwoJVpoVxCOaOnoptutZ6Ct0wAToHI5QeXhQuab+UwEkv38fLe3XhG8Q
/pBo/ahlU2xztJiQd4L8VViEiIYHGSXKSnAsJ8JNapxF6/j26Fs6lJ6QMdYRyP3a
UrU3taZyLYsI5T9h68GG/lpSF6WT7yEeql9E0RzTgpEuGgaHSJOJihW6Y0YM2hog
oonSwGLqZK3Bnw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:24:05 2026 by rpki-client