Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: Khj85YxthH+vTdsfTQ0mDKWdz0GECJALMnNgPpFGnRk=
Subject key identifier: B6:71:85:B5:47:7A:95:D2:EF:C3:E7:FB:1E:32:A6:8C:62:4B:D9:08
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019D27A8CCE5B3356E27DE390D8620636BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0E8F
Signing time: Thu 26 Mar 2026 01:01:07 +0000
Manifest this update: Thu 26 Mar 2026 01:01:07 +0000
Manifest next update: Fri 27 Mar 2026 01:01:07 +0000
Files and hashes: 1: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (hash: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: HtDuAhEEi7uGHqeloaZhJmf+xtYRpfRUiAnAO3WJn+w=)
3: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (hash: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cc:e5:b3:35:6e:27:de:39:0d:86:20:63:6b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Mar 26 01:01:07 2026 GMT
Not After : Mar 27 01:01:07 2026 GMT
Subject: CN=b67185b5477a95d2efc3e7fb1e32a68c624bd908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:1b:12:45:43:a6:78:0b:20:e7:e8:f7:d5:
10:36:28:17:7c:5c:d8:1b:9c:f9:25:0a:e4:36:a9:
e5:6a:65:ce:06:f0:ad:6b:f2:40:0d:8f:32:4a:cf:
f0:24:e0:ab:6e:13:bd:14:26:5d:54:8e:fa:46:25:
3a:de:0e:7f:93:7e:0b:90:09:cd:c1:42:12:9d:c9:
de:ba:7e:a1:01:7f:87:5a:67:e0:a2:e7:43:b9:9b:
37:2d:1e:58:ba:5b:f0:c2:14:9d:d6:37:76:5a:51:
40:56:fc:c4:78:ff:7d:9b:ce:1d:77:fd:a9:97:30:
2a:56:f2:47:0a:69:59:9c:9e:ec:ba:81:61:ff:ee:
f6:d8:b4:c1:79:21:c9:79:41:97:a4:b5:ee:72:aa:
b1:63:19:d0:3b:45:70:d6:05:9d:64:5a:1f:3d:68:
b0:37:76:08:6b:88:03:8b:4b:32:e0:b1:80:01:60:
03:13:ee:47:46:f6:bf:ec:cc:47:fa:42:8c:f3:66:
19:18:48:07:aa:4f:97:49:c5:e4:8e:f8:89:4b:fc:
83:bf:b4:54:78:0f:ce:35:56:d6:b5:89:9b:68:08:
e3:5e:69:95:1e:b8:89:ae:0d:9c:5d:5d:bd:0d:a5:
a7:59:d9:55:c3:aa:ff:c8:7e:a5:a5:b9:00:88:e5:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:85:B5:47:7A:95:D2:EF:C3:E7:FB:1E:32:A6:8C:62:4B:D9:08
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:0e:48:0c:32:f9:d3:d2:59:28:5c:1e:4e:6d:cf:b5:52:
1f:c6:4d:2b:c1:44:7c:67:6b:c1:63:8b:63:4d:df:19:05:26:
8e:fc:ab:c3:66:f1:3a:c1:7a:c1:10:65:f2:a2:d5:9d:a7:37:
28:a2:c8:00:ee:b2:2e:ae:12:c5:42:1e:8d:62:44:a1:af:90:
ef:cc:0f:ff:2f:aa:70:38:9c:ba:c9:d3:89:19:65:78:c2:b4:
11:2c:3a:f6:d7:04:7e:3d:04:31:fc:cd:c5:28:09:3e:6f:ef:
8c:50:88:70:fc:2e:c0:45:70:34:22:1f:a5:be:c7:af:b5:ab:
e2:e1:9e:37:43:80:3c:97:df:f5:64:64:87:3f:e3:08:54:ff:
ac:c4:cc:5f:7e:fe:f2:1f:d2:10:e4:cc:c3:da:75:13:0a:ec:
a1:e9:0e:2a:5d:af:a1:ec:22:b0:d2:fd:d1:4f:cb:dc:1b:2e:
02:2f:bf:d3:a6:8d:58:3b:17:52:fe:3c:00:8d:a1:15:2f:35:
2b:43:68:17:52:1d:bc:fc:da:26:23:ce:cc:eb:e9:57:44:e8:
b9:4f:e5:e6:f0:4f:3f:3a:b8:ac:6d:3d:5c:fb:a5:75:52:e1:
65:c5:ac:80:09:7a:e8:eb:fb:6c:19:7c:bc:3d:44:cc:18:4a:
68:0a:dd:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMzlszVuJ945DYYgY2vxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl
ZDE4ODcwHhcNMjYwMzI2MDEwMTA3WhcNMjYwMzI3MDEwMTA3WjAzMTEwLwYDVQQD
EyhiNjcxODViNTQ3N2E5NWQyZWZjM2U3ZmIxZTMyYTY4YzYyNGJkOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDgbEkVDpngLIOfo99UQNigXfFzY
G5z5JQrkNqnlamXOBvCta/JADY8ySs/wJOCrbhO9FCZdVI76RiU63g5/k34LkAnN
wUISncneun6hAX+HWmfgoudDuZs3LR5YulvwwhSd1jd2WlFAVvzEeP99m84dd/2p
lzAqVvJHCmlZnJ7suoFh/+722LTBeSHJeUGXpLXucqqxYxnQO0Vw1gWdZFofPWiw
N3YIa4gDi0sy4LGAAWADE+5HRva/7MxH+kKM82YZGEgHqk+XScXkjviJS/yDv7RU
eA/ONVbWtYmbaAjjXmmVHriJrg2cXV29DaWnWdlVw6r/yH6lpbkAiOWIOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZxhbVHepXS78Pn+x4ypoxiS9kIMB8GA1UdIwQY
MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt
MGQxZDE3NGM0MzUxLzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx
LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKUOSAwy
+dPSWShcHk5tz7VSH8ZNK8FEfGdrwWOLY03fGQUmjvyrw2bxOsF6wRBl8qLVnac3
KKLIAO6yLq4SxUIejWJEoa+Q78wP/y+qcDicusnTiRlleMK0ESw69tcEfj0EMfzN
xSgJPm/vjFCIcPwuwEVwNCIfpb7Hr7Wr4uGeN0OAPJff9WRkhz/jCFT/rMTMX37+
8h/SEOTMw9p1EwrsoekOKl2voewisNL90U/L3BsuAi+/06aNWDsXUv48AI2hFS81
K0NoF1IdvPzaJiPOzOvpV0TouU/l5vBPPzq4rG09XPuldVLhZcWsgAl66Ov7bBl8
vD1EzBhKaArd9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:34 2026 by rpki-client