Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: t1iZhBsjgx0a5psXynTZuwa28JDml+VZMxTXBgt+d+4=
Subject key identifier: ED:5B:9E:E4:F7:C9:51:D0:48:E9:AD:7C:56:19:1D:93:A8:CB:A6:70
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 019CACB4DCE682504C801BC8BB99699EA5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: 8gzT35LzVYKd7VoxK9JD3S6mS9+WtAsZn8v65ZUvXU8=)
2: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (hash: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:dc:e6:82:50:4c:80:1b:c8:bb:99:69:9e:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=ed5b9ee4f7c951d048e9ad7c56191d93a8cba670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:10:dd:50:90:37:0a:62:5a:65:07:4e:73:
b1:9c:72:9f:86:9f:cc:db:88:cf:6d:df:12:81:85:
22:9b:35:d0:bc:1a:7a:d1:ff:14:30:92:18:28:ae:
a2:71:7d:b4:7a:1b:e4:c6:18:48:44:25:4a:44:18:
55:61:71:48:ae:98:09:78:4a:9c:3b:2f:69:60:11:
16:e3:e5:a1:d6:4d:79:52:30:5c:0f:05:1a:da:32:
58:66:50:f9:30:5b:39:a8:18:01:cb:24:bd:89:c5:
d4:f3:ed:b9:6b:b4:cd:08:d3:9d:3b:ce:36:c3:7c:
06:62:5a:e4:e9:44:3b:a0:6a:66:27:1c:69:89:20:
f5:ad:18:bd:a8:86:ba:d8:ef:6a:e5:53:cb:69:c8:
13:e7:0d:97:75:88:41:5b:93:02:04:a7:94:df:49:
a0:a7:83:33:5f:f9:37:78:b7:1a:02:e8:7c:02:08:
9b:28:78:ab:94:3a:70:8e:64:db:9e:e5:37:4f:c5:
82:9b:07:69:44:dc:56:10:c2:76:ec:c1:4d:a5:c1:
b4:10:6c:dd:21:ec:fa:e1:11:3e:cc:25:85:06:05:
95:66:2b:e6:05:1f:ff:23:0b:2f:6e:6d:73:45:e4:
c8:8b:cf:7c:38:ff:b2:53:a7:18:23:2e:fe:56:71:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:9E:E4:F7:C9:51:D0:48:E9:AD:7C:56:19:1D:93:A8:CB:A6:70
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:10:58:1d:b0:85:1d:40:69:a2:f2:ed:7c:51:71:b6:52:4f:
b2:e1:ea:0c:87:ef:b7:8b:db:a8:5b:4c:7f:0f:88:a6:e3:9d:
50:d1:f9:40:17:92:d9:23:0f:b9:c3:aa:4c:75:99:d4:67:e2:
8b:cc:d0:a1:2a:9f:1b:e4:43:9d:08:49:bc:4d:b6:d4:81:8f:
60:5e:6a:9e:2f:ae:dd:99:a7:eb:a1:f6:c4:01:71:52:6e:28:
b4:21:0e:92:22:17:a6:2b:ae:35:80:66:ee:a9:fe:c5:a4:10:
60:ec:d3:eb:85:68:94:e5:db:70:66:af:23:0a:b1:cb:fc:0f:
39:9a:7c:f8:40:75:d8:02:ec:72:03:0f:7f:50:f0:88:fe:fd:
ce:2e:52:68:39:f1:e8:a6:f8:a0:03:71:71:39:95:1d:14:3f:
71:a4:39:0f:0b:9f:8f:24:ad:27:16:a9:6a:df:d4:0a:90:fc:
53:f8:ff:8a:d6:11:70:e4:d4:96:cc:f2:55:ae:8b:40:10:54:
89:d5:03:26:36:e5:a0:da:fa:94:ab:5a:fc:e1:9f:cc:d0:ec:
9e:cc:ce:7c:06:43:f8:e4:28:51:4e:b3:12:14:90:23:93:09:
33:1e:ec:1c:f4:d3:f8:f0:a9:af:38:69:4f:ad:3b:85:e5:e1:
8b:bd:95:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystNzmglBMgBvIu5lpnqXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4
OThlNTMwHhcNMjYwMzAyMDQwMTAwWhcNMjYwMzAzMDQwMTAwWjAzMTEwLwYDVQQD
EyhlZDViOWVlNGY3Yzk1MWQwNDhlOWFkN2M1NjE5MWQ5M2E4Y2JhNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIIQ3VCQNwpiWmUHTnOxnHKfhp/M
24jPbd8SgYUimzXQvBp60f8UMJIYKK6icX20ehvkxhhIRCVKRBhVYXFIrpgJeEqc
Oy9pYBEW4+Wh1k15UjBcDwUa2jJYZlD5MFs5qBgByyS9icXU8+25a7TNCNOdO842
w3wGYlrk6UQ7oGpmJxxpiSD1rRi9qIa62O9q5VPLacgT5w2XdYhBW5MCBKeU30mg
p4MzX/k3eLcaAuh8AgibKHirlDpwjmTbnuU3T8WCmwdpRNxWEMJ27MFNpcG0EGzd
Iez64RE+zCWFBgWVZivmBR//Iwsvbm1zReTIi898OP+yU6cYIy7+VnFzGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1bnuT3yVHQSOmtfFYZHZOoy6ZwMB8GA1UdIwQY
MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt
ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw
LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBBYHbCF
HUBpovLtfFFxtlJPsuHqDIfvt4vbqFtMfw+IpuOdUNH5QBeS2SMPucOqTHWZ1Gfi
i8zQoSqfG+RDnQhJvE221IGPYF5qni+u3Zmn66H2xAFxUm4otCEOkiIXpiuuNYBm
7qn+xaQQYOzT64VolOXbcGavIwqxy/wPOZp8+EB12ALscgMPf1DwiP79zi5SaDnx
6Kb4oANxcTmVHRQ/caQ5DwufjyStJxapat/UCpD8U/j/itYRcOTUlszyVa6LQBBU
idUDJjbloNr6lKta/OGfzNDsnszOfAZD+OQoUU6zEhSQI5MJMx7sHPTT+PCprzhp
T607heXhi72VLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:06 2026 by rpki-client