Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: UZWWx/P3zN8fUHD4rI1bEU5xj6gIgKa+ViFgKt4kSwM=
Subject key identifier: FB:B7:AD:3D:44:59:22:98:FD:A6:05:11:76:79:F8:FE:8D:20:19:CE
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 019CACEBCD67791E8E19C7EE027D3F21CF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 17DD
Signing time: Mon 02 Mar 2026 05:01:00 +0000
Manifest this update: Mon 02 Mar 2026 05:01:00 +0000
Manifest next update: Tue 03 Mar 2026 05:01:00 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: GUsFM2xgWZDgRbUsgHL/fImoMR1bnJZSx3yMUeAjgO4=)
2: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (hash: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:cd:67:79:1e:8e:19:c7:ee:02:7d:3f:21:cf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Mar 2 05:01:00 2026 GMT
Not After : Mar 3 05:01:00 2026 GMT
Subject: CN=fbb7ad3d44592298fda605117679f8fe8d2019ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:25:8b:33:a3:e9:28:44:99:d2:5a:85:60:
56:88:f6:95:3a:f3:f7:2d:a7:d6:80:12:7d:18:bf:
2e:cb:00:7f:bc:0b:16:99:6a:71:2c:89:29:68:e6:
6d:66:af:14:87:c9:9c:1a:4c:7c:41:55:94:a8:0c:
b1:d4:5b:a6:1d:1e:89:a0:c8:a1:de:4a:a4:1c:c2:
6b:05:2f:51:e0:e8:d4:2c:b6:62:56:76:0b:d8:24:
8c:2a:34:40:fd:65:21:bb:e3:df:9d:3c:cf:3f:dd:
44:71:19:70:2e:27:99:ad:63:18:0e:38:eb:40:a8:
51:0d:37:34:83:53:49:17:b8:58:37:22:be:67:ac:
b6:a1:6a:d5:05:4a:19:ab:30:0d:96:2d:87:c7:2b:
dd:d9:3e:73:45:5c:64:80:49:5c:f7:4c:5f:e1:fd:
d0:62:ab:15:78:26:e4:75:b4:a4:fa:b3:ea:05:90:
0b:16:11:88:e3:24:af:00:7f:07:82:b1:a4:fb:41:
f4:39:55:eb:b2:53:b2:35:44:c5:16:b6:8d:3b:28:
a2:1b:2b:a7:7d:df:d8:c6:0f:54:33:15:8a:10:c7:
11:4f:14:44:39:b3:0a:36:53:ad:7d:f3:d1:2e:1a:
b3:4c:c4:ee:86:54:c6:1a:60:6f:47:f6:1c:d7:9e:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B7:AD:3D:44:59:22:98:FD:A6:05:11:76:79:F8:FE:8D:20:19:CE
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:2b:1d:c4:7c:6f:98:4b:21:1c:17:fd:43:ad:a9:13:96:
13:e0:31:1d:2a:77:3b:8b:5f:1e:72:a0:35:a7:5c:5a:61:85:
6c:7b:48:69:7e:74:85:11:0a:d7:dd:b4:9c:e4:ff:d7:46:d4:
36:d4:6a:c7:e6:7e:d2:b6:26:96:26:5a:96:5e:88:7c:58:38:
95:10:50:eb:0d:43:22:c5:98:fb:d6:52:d3:93:96:f6:6f:35:
b3:6a:33:ed:bf:cd:31:fc:8d:df:3c:d4:89:00:87:77:37:5c:
82:e4:75:84:77:ae:b1:37:f5:33:cf:c3:41:e5:01:de:a0:4d:
9c:ce:90:f0:cb:6f:9f:6b:20:3f:94:a4:57:9c:4d:b9:d4:c9:
e8:47:19:f9:9f:96:ab:c5:25:c3:63:9a:f0:80:e4:d8:5d:9f:
8c:db:72:11:5a:dc:a5:02:92:50:06:d3:49:48:b3:e4:39:4e:
94:e8:f3:a6:1a:f2:4e:ee:71:1e:9b:15:2a:cf:c7:14:62:04:
54:ed:b7:2b:f2:00:18:64:38:32:92:5d:1b:95:34:8b:19:8b:
d9:45:2c:10:34:c5:37:91:05:4f:b8:d0:b2:88:9b:81:19:a2:
8b:be:25:b6:14:2d:3f:7e:12:79:8b:d8:f7:80:3d:79:75:82:
75:da:36:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys681neR6OGcfuAn0/Ic8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz
ZTdmNzQwHhcNMjYwMzAyMDUwMTAwWhcNMjYwMzAzMDUwMTAwWjAzMTEwLwYDVQQD
EyhmYmI3YWQzZDQ0NTkyMjk4ZmRhNjA1MTE3Njc5ZjhmZThkMjAxOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYslizOj6ShEmdJahWBWiPaVOvP3
LafWgBJ9GL8uywB/vAsWmWpxLIkpaOZtZq8Uh8mcGkx8QVWUqAyx1FumHR6JoMih
3kqkHMJrBS9R4OjULLZiVnYL2CSMKjRA/WUhu+PfnTzPP91EcRlwLieZrWMYDjjr
QKhRDTc0g1NJF7hYNyK+Z6y2oWrVBUoZqzANli2Hxyvd2T5zRVxkgElc90xf4f3Q
YqsVeCbkdbSk+rPqBZALFhGI4ySvAH8HgrGk+0H0OVXrslOyNUTFFraNOyiiGyun
fd/Yxg9UMxWKEMcRTxREObMKNlOtffPRLhqzTMTuhlTGGmBvR/Yc155KIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu3rT1EWSKY/aYFEXZ5+P6NIBnOMB8GA1UdIwQY
MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt
YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj
LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8srHcR8
b5hLIRwX/UOtqROWE+AxHSp3O4tfHnKgNadcWmGFbHtIaX50hREK1920nOT/10bU
NtRqx+Z+0rYmliZall6IfFg4lRBQ6w1DIsWY+9ZS05OW9m81s2oz7b/NMfyN3zzU
iQCHdzdcguR1hHeusTf1M8/DQeUB3qBNnM6Q8Mtvn2sgP5SkV5xNudTJ6EcZ+Z+W
q8Ulw2Oa8IDk2F2fjNtyEVrcpQKSUAbTSUiz5DlOlOjzphryTu5xHpsVKs/HFGIE
VO23K/IAGGQ4MpJdG5U0ixmL2UUsEDTFN5EFT7jQsoibgRmii74lthQtP34SeYvY
94A9eXWCddo2xw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:33 2026 by rpki-client