
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: PlFmhV3hk1e4C01fzJv54CWzDYCd2eFkagTzbLoPkjM=
Subject key identifier: DA:56:61:1C:AE:29:65:04:66:4D:1F:4B:FD:07:D9:24:FA:EA:4F:42
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 01A0CFA4850823DAD10C9513EECBA5F8CC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 19FA
Signing time: Wed 23 Sep 2026 19:01:00 +0000
Manifest this update: Wed 23 Sep 2026 19:01:00 +0000
Manifest next update: Thu 24 Sep 2026 19:01:00 +0000
Files and hashes: 1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: QLn88GSbP7MY+oNu6aeGuBQmxB6DXE+Ama1CcVBtZ0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:85:08:23:da:d1:0c:95:13:ee:cb:a5:f8:cc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Sep 23 19:01:00 2026 GMT
Not After : Sep 24 19:01:00 2026 GMT
Subject: CN=da56611cae296504664d1f4bfd07d924faea4f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:48:72:03:65:62:33:c5:6e:3d:fc:b1:6e:
e7:5b:6e:6b:00:be:74:c4:e8:dc:52:4e:5c:ec:dc:
30:72:3d:77:4e:21:ab:59:59:c8:c2:d1:45:d4:99:
21:68:86:55:12:0e:c3:53:3d:61:d9:46:7d:66:6d:
b8:c5:4d:ff:29:58:58:2a:e4:38:e5:66:e0:84:f9:
79:eb:41:0f:86:3a:bc:f1:2c:e5:3b:88:a7:ab:34:
f2:54:90:b3:43:bf:20:4f:2d:3d:d7:46:af:b2:d5:
9d:2c:ff:eb:2e:d4:c0:66:9a:12:41:c2:d0:61:30:
d0:e1:fb:0f:c7:4b:5a:71:80:a4:32:ad:54:fb:9d:
ab:8d:a9:22:f9:68:78:a9:d3:36:ae:ed:31:f5:72:
a3:dc:6d:b7:ea:4a:01:cf:84:bd:37:79:96:b8:65:
bd:3c:cb:a2:0c:c2:15:57:6a:06:3c:27:c9:91:f1:
25:f2:49:74:77:8f:e7:78:c7:11:7f:10:43:7f:37:
97:98:76:44:1f:44:28:a8:0f:62:96:ff:2c:6b:fc:
68:ce:0b:53:5b:e7:84:37:6d:7f:60:e3:30:16:cc:
26:a7:0a:76:1d:a5:36:ee:a2:6a:9d:ae:b7:38:5e:
83:69:24:4b:ce:6d:19:f4:f6:68:c2:25:fb:06:a3:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:56:61:1C:AE:29:65:04:66:4D:1F:4B:FD:07:D9:24:FA:EA:4F:42
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:81:1d:1e:a4:41:64:07:48:84:c0:e9:21:be:eb:cc:b8:aa:
f0:f3:37:b1:61:f8:eb:6d:41:18:f1:c4:d1:05:67:3f:8c:c1:
8d:4f:25:ba:0d:1e:ef:36:72:ec:d7:18:1d:49:56:80:eb:00:
9c:36:98:24:a0:ad:e1:5f:d4:fc:39:01:b9:78:b5:31:59:c3:
8d:9d:85:ed:f7:90:82:7f:7b:d0:89:f2:bd:81:9e:41:d1:58:
61:af:fc:5b:74:a5:e7:6c:7d:65:47:ec:6b:f8:1d:50:c3:1a:
9a:78:8a:99:14:20:63:5c:d9:8d:e6:89:47:9b:59:1d:8d:54:
9a:36:f0:c5:37:0b:ef:1c:ea:fe:10:46:1e:1c:bb:95:de:ef:
28:63:69:8c:88:c4:90:19:c5:53:e3:d1:c2:18:4d:d0:2e:0e:
f4:74:0f:b3:28:1c:22:01:0f:d5:35:dd:89:38:a3:b4:a2:bc:
66:d3:c7:d4:37:56:93:3d:30:9f:6b:28:e6:45:1c:de:6b:d1:
e1:68:b9:e0:6d:7f:4d:d4:c9:7c:13:2d:57:84:44:3c:66:3a:
5c:82:ad:69:7e:8a:d1:7e:4d:80:e6:54:23:07:dc:ef:6b:ab:
32:4a:ec:b3:4f:4d:51:32:7b:61:a3:5e:f5:36:4a:46:fa:00:
23:04:88:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpIUII9rRDJUT7sul+MyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOTRjZGVhOTM2NTYxMmFkZjc2MTExNDQ2NjgyNTRiMzg4
ZmE2MTIwHhcNMjYwOTIzMTkwMTAwWhcNMjYwOTI0MTkwMTAwWjAzMTEwLwYDVQQD
EyhkYTU2NjExY2FlMjk2NTA0NjY0ZDFmNGJmZDA3ZDkyNGZhZWE0ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfxIcgNlYjPFbj38sW7nW25rAL50
xOjcUk5c7Nwwcj13TiGrWVnIwtFF1JkhaIZVEg7DUz1h2UZ9Zm24xU3/KVhYKuQ4
5WbghPl560EPhjq88SzlO4inqzTyVJCzQ78gTy0910avstWdLP/rLtTAZpoSQcLQ
YTDQ4fsPx0tacYCkMq1U+52rjaki+Wh4qdM2ru0x9XKj3G236koBz4S9N3mWuGW9
PMuiDMIVV2oGPCfJkfEl8kl0d4/neMcRfxBDfzeXmHZEH0QoqA9ilv8sa/xozgtT
W+eEN21/YOMwFswmpwp2HaU27qJqna63OF6DaSRLzm0Z9PZowiX7BqNX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpWYRyuKWUEZk0fS/0H2ST66k9CMB8GA1UdIwQY
MBaAFG6UzeqTZWEq33YRFEZoJUs4j6YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2Njgt
OWFmN2QyYjU5YTRjLzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2NjgtOWFmN2QyYjU5YTRj
LzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIEdHqRB
ZAdIhMDpIb7rzLiq8PM3sWH4621BGPHE0QVnP4zBjU8lug0e7zZy7NcYHUlWgOsA
nDaYJKCt4V/U/DkBuXi1MVnDjZ2F7feQgn970InyvYGeQdFYYa/8W3Sl52x9ZUfs
a/gdUMMamniKmRQgY1zZjeaJR5tZHY1UmjbwxTcL7xzq/hBGHhy7ld7vKGNpjIjE
kBnFU+PRwhhN0C4O9HQPsygcIgEP1TXdiTijtKK8ZtPH1DdWkz0wn2so5kUc3mvR
4Wi54G1/TdTJfBMtV4REPGY6XIKtaX6K0X5NgOZUIwfc72urMkrss09NUTJ7YaNe
9TZKRvoAIwSIFg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:39:07 2026 by rpki-client