Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
File: bckzC9OJcGPbv9IOXru-UcDV0VM.mft (raw, json)
Hash identifier: lxh2QjiUXuIApSiFkS0as5I6TsolB1gFWGAN7AKZM3A=
Subject key identifier: 77:B6:67:C0:CF:8B:24:32:7F:18:95:09:BD:4C:C5:C2:40:E9:10:7B
Authority key identifier: 6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
Certificate issuer: /CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Certificate serial: 01A0D3B843D87FB7FC71BE48311C463A48A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
Manifest number: 0120
Signing time: Thu 24 Sep 2026 14:01:03 +0000
Manifest this update: Thu 24 Sep 2026 14:01:03 +0000
Manifest next update: Fri 25 Sep 2026 14:01:03 +0000
Files and hashes: 1: bOqTY_nDXoESSF_447Tk5tX5AOI.roa (hash: sQ1q20oUgDBcHDCGZ4CXZ3dUrLutFstvaNLWfTrNEsw=)
2: bckzC9OJcGPbv9IOXru-UcDV0VM.crl (hash: rttfXNkyEs+yg2xmmBiUUDmhgGktwupJTB5sJwZlzXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:43:d8:7f:b7:fc:71:be:48:31:1c:46:3a:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Validity
Not Before: Sep 24 14:01:03 2026 GMT
Not After : Sep 25 14:01:03 2026 GMT
Subject: CN=77b667c0cf8b24327f189509bd4cc5c240e9107b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:fc:57:91:01:9b:35:58:97:a1:3f:6b:1e:
86:6b:74:3c:22:b4:0e:14:8e:91:d8:0e:5a:59:0f:
e5:c1:6e:6c:16:9f:8e:cb:23:a7:16:0d:d8:e5:30:
e4:61:39:ec:dd:0a:4a:0e:3a:ba:74:64:72:93:37:
b5:e1:d6:19:de:c1:c5:26:75:72:d0:4f:b1:e5:e7:
ed:55:76:4f:75:b0:85:d0:c1:1a:0e:90:60:a6:14:
42:d5:c4:a0:51:15:b2:70:a1:f7:39:b1:47:1d:94:
d6:e9:ca:ff:96:4d:fd:3b:48:d3:a1:51:29:a2:d2:
0b:25:57:35:94:3d:30:34:ef:5e:be:94:75:e3:52:
cd:49:f0:ea:28:d7:71:ae:af:f8:ab:1a:37:59:21:
08:1f:1a:c8:aa:e8:0f:d2:e9:74:32:66:18:9c:37:
ea:3e:84:d8:20:71:a9:e2:a4:7d:00:8d:0c:3b:4d:
05:4b:b2:27:d9:a2:15:b5:35:d2:b6:ab:91:82:ac:
4e:ab:63:6a:82:fc:b0:ac:f3:3e:8a:01:50:fa:fa:
a9:d1:f9:f6:18:25:80:55:e5:ce:2d:3e:ac:4a:11:
04:14:57:2d:47:3d:31:c2:d7:44:37:06:f3:fc:a0:
f1:fd:c3:4b:0b:e5:87:9e:17:59:58:bd:7a:d2:23:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B6:67:C0:CF:8B:24:32:7F:18:95:09:BD:4C:C5:C2:40:E9:10:7B
X509v3 Authority Key Identifier:
keyid:6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cd:50:64:bf:61:17:f0:ab:58:1f:46:ef:0e:31:f8:5f:51:
94:b5:9d:de:7c:ee:04:73:8b:99:b6:70:3b:e7:01:b0:ed:ec:
cc:75:11:95:ed:a5:de:14:6c:5e:be:74:35:eb:71:4f:1e:39:
ec:ff:d1:c0:95:42:50:b0:bc:fc:3b:19:20:66:78:8e:de:4b:
49:d3:de:6a:d6:5a:56:5d:22:e4:95:f7:33:91:cd:43:5b:f8:
c3:8d:3a:03:5a:83:2b:a7:62:aa:05:f6:09:63:42:f9:aa:e0:
14:fd:ab:6e:cd:dd:de:c2:66:21:66:1d:9d:cb:9e:c0:1e:24:
66:e5:55:4f:8f:84:b8:a9:83:0b:cb:f5:b9:48:38:22:58:2a:
de:36:86:8e:c1:a0:14:1a:b9:77:99:95:fd:78:77:40:27:b2:
de:34:08:89:c4:c7:79:a9:9b:f8:f9:c7:11:15:ec:8a:c6:a6:
23:c8:7e:61:da:50:17:fb:db:d8:44:92:8c:40:d5:e9:a4:bc:
13:02:5a:e1:f5:17:78:b1:cd:4b:15:9c:1e:9b:cf:55:0f:01:
11:30:6b:3a:57:6d:0e:22:df:8a:6e:71:21:87:b9:82:22:37:
71:43:f9:14:3d:2a:19:15:b3:5c:95:57:d9:a5:6b:fc:70:94:
4c:29:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:09:51 2026 by rpki-client