Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
File: BSL3Drmq76srTsTh4CLsBrVEeqg.mft (raw, json)
Hash identifier: wCNtyv45CRAG9Zbrn9JZX7KpDx7RzG7GBlDpcI2Mogg=
Subject key identifier: 6A:A2:36:8B:1A:7B:DA:DF:77:22:FB:15:2E:BB:6E:02:03:11:5F:26
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A0CFDAF41DF5038383984D2201F1BE12CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
Manifest number: 93
Signing time: Wed 23 Sep 2026 20:00:28 +0000
Manifest this update: Wed 23 Sep 2026 20:00:28 +0000
Manifest next update: Thu 24 Sep 2026 20:00:28 +0000
Files and hashes: 1: 5X8wgdH5y24itbLU8yRzu5aEvw0.roa (hash: Y2Cskp+xn3/2TRNZa+iJKkWrN4s4Hf7dbVxygkD/yR8=)
2: BSL3Drmq76srTsTh4CLsBrVEeqg.crl (hash: bJtTcsqeZb5XqRUpEXfSSuIk2uush5Exu4JOzo57WO4=)
3: FdzJdbih8GYJJyfSWdIfdNOiPbQ.roa (hash: 8DYsIMJzu+yvu5ZWSknfuVne4QSGnTYYVURq3C3fqq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:f4:1d:f5:03:83:83:98:4d:22:01:f1:be:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Sep 23 20:00:28 2026 GMT
Not After : Sep 24 20:00:28 2026 GMT
Subject: CN=6aa2368b1a7bdadf7722fb152ebb6e0203115f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:e7:66:f3:d9:c8:72:92:92:d4:1f:9d:49:
28:cb:e9:a6:0a:87:bb:35:65:85:6a:7f:0a:d5:3e:
68:f4:86:fd:71:d9:11:53:ee:99:a4:3b:17:80:a2:
5c:3a:73:e1:d0:6c:19:50:cd:9c:bb:66:1c:9e:c1:
c2:80:a7:db:22:ad:34:0d:54:81:9d:74:4c:c3:71:
1f:72:13:74:1d:e2:86:53:77:db:07:c1:18:f3:6c:
35:1f:33:36:d8:7c:ff:1c:78:d8:a0:4d:e8:11:c5:
4e:bd:41:b4:8d:c3:67:11:a2:71:10:87:cb:d4:5e:
74:c5:73:82:81:33:a7:64:e5:38:f0:87:9f:6d:a5:
74:fb:64:cf:bb:bd:05:33:56:ec:ec:ec:29:90:bd:
df:2b:d6:d5:2e:d4:05:fe:de:6a:fb:a8:8d:bf:6e:
ca:7a:ae:d2:47:7f:46:2d:4c:ad:b9:44:88:39:49:
8a:15:40:57:d7:bb:4b:1f:10:10:64:85:a3:e8:f2:
65:e9:34:3d:b1:c4:c9:82:82:4e:c2:de:68:4c:18:
a1:db:e3:f8:fd:57:ab:64:38:e0:37:12:d0:df:0a:
6c:3c:bc:72:d1:7d:9f:80:89:71:d9:b9:01:16:22:
af:70:28:e5:c0:43:fd:bd:9f:bf:54:bc:29:2a:ec:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:36:8B:1A:7B:DA:DF:77:22:FB:15:2E:BB:6E:02:03:11:5F:26
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bb:ab:15:0f:ec:98:09:62:b3:2d:cd:96:2b:a1:4a:4c:5a:
a5:a9:ca:b2:79:6b:5d:ea:06:09:e2:bd:c8:2b:36:70:90:44:
4a:4b:1c:cf:a1:17:4d:8d:15:09:7e:36:6b:ce:49:8c:0b:55:
e9:03:01:9f:85:2f:97:38:09:d7:f2:7f:19:f7:e9:13:ca:ad:
d4:de:08:21:6c:c3:82:80:a8:07:0c:0b:fa:b8:4b:d6:8c:fb:
74:d9:b4:a8:4a:d3:af:2d:42:91:f8:c4:60:af:35:47:23:5a:
1a:ca:b9:6f:0c:41:41:da:44:32:80:c9:cb:db:21:7b:6e:d1:
aa:0b:43:44:c1:19:86:fa:c5:03:b7:6c:77:d9:8a:f9:5e:78:
24:44:b3:9e:f5:ba:56:f6:be:72:b2:32:ba:da:01:df:d0:61:
ba:b3:69:e7:d1:2e:72:e3:f8:7d:54:af:c7:56:16:e4:45:40:
8e:5e:3c:9a:5b:58:92:39:96:a1:71:38:23:a9:c3:4e:c9:d8:
5f:7d:9a:3b:5c:40:17:0d:e4:91:cc:4d:99:0b:d3:a7:96:fb:
b0:e1:04:12:47:b7:0f:b3:2c:8d:7e:32:38:35:60:7f:e7:33:
b6:c1:e2:1d:fe:60:a7:97:14:2d:71:f9:86:e4:ed:6f:ac:28:
29:07:42:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2vQd9QODg5hNIgHxvhLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjJmNzBlYjlhYWVmYWIyYjRlYzRlMWUwMjJlYzA2YjU0
NDdhYTgwHhcNMjYwOTIzMjAwMDI4WhcNMjYwOTI0MjAwMDI4WjAzMTEwLwYDVQQD
Eyg2YWEyMzY4YjFhN2JkYWRmNzcyMmZiMTUyZWJiNmUwMjAzMTE1ZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nfnZvPZyHKSktQfnUkoy+mmCoe7
NWWFan8K1T5o9Ib9cdkRU+6ZpDsXgKJcOnPh0GwZUM2cu2YcnsHCgKfbIq00DVSB
nXRMw3EfchN0HeKGU3fbB8EY82w1HzM22Hz/HHjYoE3oEcVOvUG0jcNnEaJxEIfL
1F50xXOCgTOnZOU48IefbaV0+2TPu70FM1bs7OwpkL3fK9bVLtQF/t5q+6iNv27K
eq7SR39GLUytuUSIOUmKFUBX17tLHxAQZIWj6PJl6TQ9scTJgoJOwt5oTBih2+P4
/VerZDjgNxLQ3wpsPLxy0X2fgIlx2bkBFiKvcCjlwEP9vZ+/VLwpKuzTmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqiNosae9rfdyL7FS67bgIDEV8mMB8GA1UdIwQY
MBaAFAUi9w65qu+rK07E4eAi7Aa1RHqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNMM0RybXE3NnNyVHNUaDRDTHNCclZFZXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zY2RiNjctMTFlOS00MDZhLThkMzIt
ZWJlYmVmYzk2Y2NiLzEvQlNMM0RybXE3NnNyVHNUaDRDTHNCclZFZXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zY2RiNjctMTFlOS00MDZhLThkMzItZWJlYmVmYzk2Y2Ni
LzEvQlNMM0RybXE3NnNyVHNUaDRDTHNCclZFZXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7urFQ/s
mAlisy3NliuhSkxapanKsnlrXeoGCeK9yCs2cJBESkscz6EXTY0VCX42a85JjAtV
6QMBn4UvlzgJ1/J/GffpE8qt1N4IIWzDgoCoBwwL+rhL1oz7dNm0qErTry1CkfjE
YK81RyNaGsq5bwxBQdpEMoDJy9she27RqgtDRMEZhvrFA7dsd9mK+V54JESznvW6
Vva+crIyutoB39BhurNp59EucuP4fVSvx1YW5EVAjl48mltYkjmWoXE4I6nDTsnY
X32aO1xAFw3kkcxNmQvTp5b7sOEEEke3D7MsjX4yODVgf+cztsHiHf5gp5cULXH5
huTtb6woKQdC1g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:19 2026 by rpki-client