Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
File: bCecf9LtlfgYXaFSKg9XxQPuxas.mft (raw, json)
Hash identifier: NAlJsEQFTXFJNrMGN5ChdUriqR9g/8JF6F2QXfN7nlc=
Subject key identifier: F3:9A:2F:30:3A:40:6B:AC:23:30:D2:A3:07:0D:EF:76:55:A2:18:14
Authority key identifier: 6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
Certificate issuer: /CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Certificate serial: 01A0EC9D1B7D4B669B256F245A455900DD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
Manifest number: F5
Signing time: Tue 29 Sep 2026 10:01:54 +0000
Manifest this update: Tue 29 Sep 2026 10:01:54 +0000
Manifest next update: Wed 30 Sep 2026 10:01:54 +0000
Files and hashes: 1: VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa (hash: PJAiuPsV0OJUExzoh82Xuin/NOUbTrHxFe1Pka5/k/Q=)
2: bCecf9LtlfgYXaFSKg9XxQPuxas.crl (hash: FvgzjME51cnHXq9u5nHgq6p/EoG1VLDDvyEBjZCTM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9d:1b:7d:4b:66:9b:25:6f:24:5a:45:59:00:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Validity
Not Before: Sep 29 10:01:54 2026 GMT
Not After : Sep 30 10:01:54 2026 GMT
Subject: CN=f39a2f303a406bac2330d2a3070def7655a21814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:30:28:9d:02:ea:a8:ac:60:64:02:f3:4a:e0:
1b:3b:54:36:43:c0:b0:8b:cc:87:65:6c:a0:8d:96:
3a:b0:c5:61:09:b7:fc:41:24:1b:5d:0d:fc:72:5b:
bf:a7:2a:dd:f5:eb:8a:25:8b:a7:52:fc:45:dc:f7:
38:bd:0c:12:b2:f5:2b:62:e3:bb:ec:b0:7d:d7:7a:
47:24:85:0a:5b:43:95:22:bd:0c:ed:75:e3:90:70:
18:2f:33:a4:92:70:90:b4:ff:f8:7f:bc:f9:27:54:
e5:dc:d8:1d:20:d5:02:13:29:0a:f9:b3:c7:f8:2b:
5a:9a:03:f9:68:34:1f:12:c6:ff:18:09:b5:c2:23:
8c:2a:b4:61:91:89:a4:34:b9:3d:3a:78:12:e0:db:
ea:a6:e0:27:0d:70:15:a4:dd:c5:14:7f:52:60:43:
b3:7d:c9:0e:07:71:05:5a:8c:62:3d:6d:42:ef:2a:
96:c5:01:33:14:a5:fc:f3:a9:40:cc:0e:88:e2:6d:
bd:b4:fa:db:7f:cb:e0:87:74:d7:90:bf:af:f0:1c:
93:31:96:9a:b5:74:e7:88:5e:97:f1:e3:21:68:b2:
2b:42:12:53:b3:6a:75:b6:30:60:9a:4e:e5:95:f0:
f4:73:46:f6:32:17:73:ca:14:27:21:24:d8:25:0c:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:2F:30:3A:40:6B:AC:23:30:D2:A3:07:0D:EF:76:55:A2:18:14
X509v3 Authority Key Identifier:
keyid:6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7b:12:cb:d8:ca:14:3a:1d:8b:0f:1c:47:b5:99:3b:b3:66:
72:13:c5:de:ae:a4:19:d4:5e:87:8d:d0:7e:a8:39:f5:ca:72:
16:17:22:cd:fe:fa:19:35:58:70:bc:c2:61:a5:1e:b0:fc:9d:
c1:f2:72:e0:93:61:b2:49:3f:09:10:79:f3:be:10:c9:d9:7d:
0b:0c:8e:8d:0c:0d:31:a2:54:5d:b4:60:13:27:fe:2d:6d:96:
43:86:30:4c:f5:73:6c:ec:ce:1c:4f:71:ed:cd:a5:5c:cb:5a:
37:cc:dd:f0:96:8d:c6:58:28:d0:2c:5a:b5:d8:c3:e1:37:af:
16:6b:d8:bc:ad:5c:57:26:f4:b8:c0:2d:0a:fc:53:89:ae:99:
52:0c:2b:10:19:54:47:3e:cf:a3:fd:98:a4:42:e6:c6:09:43:
54:b5:a2:66:b3:19:a5:a3:f5:7e:0f:79:d8:67:59:fd:eb:79:
65:a7:36:de:4b:88:7c:af:44:a3:a1:37:85:e4:1b:a2:23:5a:
1e:b2:10:e4:26:76:bd:94:27:50:b2:d1:db:e3:26:72:49:d2:
8e:91:d7:07:fe:2a:5b:a2:0c:1e:cb:b0:fb:ba:e7:83:8b:8b:
bc:83:73:a8:75:e8:f6:80:ef:a6:fb:23:22:0e:52:88:2e:05:
19:d7:9f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsnRt9S2abJW8kWkVZAN0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMjc5YzdmZDJlZDk1ZjgxODVkYTE1MjJhMGY1N2M1MDNl
ZWM1YWIwHhcNMjYwOTI5MTAwMTU0WhcNMjYwOTMwMTAwMTU0WjAzMTEwLwYDVQQD
EyhmMzlhMmYzMDNhNDA2YmFjMjMzMGQyYTMwNzBkZWY3NjU1YTIxODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/DAonQLqqKxgZALzSuAbO1Q2Q8Cw
i8yHZWygjZY6sMVhCbf8QSQbXQ38clu/pyrd9euKJYunUvxF3Pc4vQwSsvUrYuO7
7LB913pHJIUKW0OVIr0M7XXjkHAYLzOkknCQtP/4f7z5J1Tl3NgdINUCEykK+bPH
+CtamgP5aDQfEsb/GAm1wiOMKrRhkYmkNLk9OngS4NvqpuAnDXAVpN3FFH9SYEOz
fckOB3EFWoxiPW1C7yqWxQEzFKX886lAzA6I4m29tPrbf8vgh3TXkL+v8ByTMZaa
tXTniF6X8eMhaLIrQhJTs2p1tjBgmk7llfD0c0b2MhdzyhQnISTYJQynHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOaLzA6QGusIzDSowcN73ZVohgUMB8GA1UdIwQY
MBaAFGwnnH/S7ZX4GF2hUioPV8UD7sWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkNlY2Y5THRsZmdZWGFGU0tnOVh4UVB1eGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kMjJhZGUtNTNkZC00MGQwLTgyNTQt
MjQwZGQ4NjM2ZTQ3LzEvYkNlY2Y5THRsZmdZWGFGU0tnOVh4UVB1eGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kMjJhZGUtNTNkZC00MGQwLTgyNTQtMjQwZGQ4NjM2ZTQ3
LzEvYkNlY2Y5THRsZmdZWGFGU0tnOVh4UVB1eGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3sSy9jK
FDodiw8cR7WZO7NmchPF3q6kGdReh43Qfqg59cpyFhcizf76GTVYcLzCYaUesPyd
wfJy4JNhskk/CRB5874Qydl9CwyOjQwNMaJUXbRgEyf+LW2WQ4YwTPVzbOzOHE9x
7c2lXMtaN8zd8JaNxlgo0CxatdjD4TevFmvYvK1cVyb0uMAtCvxTia6ZUgwrEBlU
Rz7Po/2YpELmxglDVLWiZrMZpaP1fg952GdZ/et5Zac23kuIfK9Eo6E3heQboiNa
HrIQ5CZ2vZQnULLR2+MmcknSjpHXB/4qW6IMHsuw+7rng4uLvINzqHXo9oDvpvsj
Ig5SiC4FGdefLw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:41:37 2026 by rpki-client