Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: fpKPOqpkRraY41B3RKgiHjGBucu0XryYr7lyC8GIKmo=
Subject key identifier: 37:2E:31:60:E6:CC:D0:1A:38:FA:8A:8E:87:B8:D4:3E:6A:45:BD:C8
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 019CAB6B162C2BCAA61D9F65AB3CA34C1F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 10E1
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa (hash: Y4+66kr490+tAfYv+Li1KCX6wSQ4d0GvtrjYF/+CHtM=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: ub4+95dMQUtATEl34BRgYwt2/Btq5oE8bMGGWhaGA6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:16:2c:2b:ca:a6:1d:9f:65:ab:3c:a3:4c:1f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=372e3160e6ccd01a38fa8a8e87b8d43e6a45bdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:00:1f:fb:98:bb:33:42:21:a3:28:53:86:
41:c6:e5:f3:f2:14:06:de:5b:47:3f:84:7d:58:d0:
e0:93:2f:65:2a:7f:ff:79:b2:7f:03:46:8a:26:79:
33:1e:bf:b2:85:e5:d2:f1:39:27:b0:0c:4a:3c:7a:
70:d9:a5:3f:39:f6:58:3b:30:dd:67:d5:dc:95:f2:
76:19:c6:f7:b4:f6:2c:59:7c:4a:78:71:d8:53:e5:
ee:c5:d2:5d:16:c6:46:2d:77:4a:0d:e8:ac:7d:9e:
7a:60:e9:a6:07:84:b7:ef:53:6f:b9:da:30:3c:94:
05:69:b9:a8:25:63:cf:67:77:0a:9b:42:28:2c:eb:
da:0e:cb:ae:97:7e:b7:15:f6:ef:db:c4:96:78:4d:
e0:99:1d:64:bb:68:0c:6c:34:94:7b:b0:84:c6:f9:
9e:c7:6a:55:43:e7:c4:71:05:59:db:de:88:2d:8e:
dc:3c:44:42:b2:e0:c7:6a:c9:28:c7:4c:7d:2a:35:
28:5f:7c:ce:61:8f:90:ac:b6:0b:cb:1e:49:af:86:
f1:aa:28:c0:39:c8:7c:57:c4:c2:80:cb:15:2f:70:
e4:c2:0a:e7:43:a4:36:33:cb:c9:d1:de:aa:22:47:
ca:cd:f8:79:43:cd:41:96:74:53:2d:b9:ee:36:e0:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:31:60:E6:CC:D0:1A:38:FA:8A:8E:87:B8:D4:3E:6A:45:BD:C8
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b0:3d:6e:5c:ca:d0:22:38:17:03:ab:8e:cb:8f:35:d1:eb:
28:a7:d0:b1:e7:c1:ba:bf:56:7c:92:36:51:14:b4:9e:29:08:
fb:2c:f0:eb:45:0c:b4:d9:b3:90:ea:e6:50:c8:ac:f8:d1:8a:
6a:3a:6e:e6:f0:c8:3b:19:9e:43:6e:e2:a4:20:94:dd:e8:ce:
bf:f0:7f:f9:fc:91:f4:17:b5:64:5c:a2:5b:62:c5:40:c2:98:
05:41:0f:41:72:6e:98:49:fe:1a:0c:28:d1:05:c4:0f:49:5d:
e7:af:be:12:a1:21:98:63:99:18:27:9c:51:85:da:5b:44:d2:
bc:7d:5d:60:0d:99:f3:ca:b2:71:1f:06:02:00:a7:5b:a8:10:
3e:e9:81:f6:69:3f:83:30:81:31:d2:69:53:8e:2c:d6:51:46:
88:93:65:78:0a:d4:0c:16:bf:7f:e7:99:e7:59:50:a3:9f:10:
45:73:41:3b:dc:49:14:51:af:79:4d:ef:34:5a:97:59:1f:6c:
a9:73:e4:4e:5e:54:e7:87:79:96:00:c3:de:df:2f:df:e0:88:
c0:60:96:6f:e3:39:2e:a5:85:d5:db:ef:e9:a9:57:5f:2e:a2:
3a:8d:04:ea:37:68:73:a4:25:d5:25:18:6d:b0:c3:7e:86:dc:
c3:19:12:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraxYsK8qmHZ9lqzyjTB+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2
Nzg2ZGMwHhcNMjYwMzAxMjIwMDQ3WhcNMjYwMzAyMjIwMDQ3WjAzMTEwLwYDVQQD
EygzNzJlMzE2MGU2Y2NkMDFhMzhmYThhOGU4N2I4ZDQzZTZhNDViZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylkAH/uYuzNCIaMoU4ZBxuXz8hQG
3ltHP4R9WNDgky9lKn//ebJ/A0aKJnkzHr+yheXS8TknsAxKPHpw2aU/OfZYOzDd
Z9XclfJ2Gcb3tPYsWXxKeHHYU+XuxdJdFsZGLXdKDeisfZ56YOmmB4S371Nvudow
PJQFabmoJWPPZ3cKm0IoLOvaDsuul363Ffbv28SWeE3gmR1ku2gMbDSUe7CExvme
x2pVQ+fEcQVZ296ILY7cPERCsuDHaskox0x9KjUoX3zOYY+QrLYLyx5Jr4bxqijA
Och8V8TCgMsVL3DkwgrnQ6Q2M8vJ0d6qIkfKzfh5Q81BlnRTLbnuNuAPlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcuMWDmzNAaOPqKjoe41D5qRb3IMB8GA1UdIwQY
MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt
Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh
LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErA9blzK
0CI4FwOrjsuPNdHrKKfQsefBur9WfJI2URS0nikI+yzw60UMtNmzkOrmUMis+NGK
ajpu5vDIOxmeQ27ipCCU3ejOv/B/+fyR9Be1ZFyiW2LFQMKYBUEPQXJumEn+Ggwo
0QXED0ld56++EqEhmGOZGCecUYXaW0TSvH1dYA2Z88qycR8GAgCnW6gQPumB9mk/
gzCBMdJpU44s1lFGiJNleArUDBa/f+eZ51lQo58QRXNBO9xJFFGveU3vNFqXWR9s
qXPkTl5U54d5lgDD3t8v3+CIwGCWb+M5LqWF1dvv6alXXy6iOo0E6jdoc6Ql1SUY
bbDDfobcwxkSKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:14 2026 by rpki-client