Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: ZsTAoBwQQgSnQckk7XQh2mkOfZphtpcUpeUGmdXyhnk=
Subject key identifier: FF:72:8F:43:1A:A6:3A:34:FD:29:81:9C:90:41:29:35:03:86:7E:BD
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 019F8FEC7A8B4D7935E352F2A9D44D34F771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 05C4
Signing time: Thu 23 Jul 2026 17:01:07 +0000
Manifest this update: Thu 23 Jul 2026 17:01:07 +0000
Manifest next update: Fri 24 Jul 2026 17:01:07 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: 3l8KPMrYXLoWDAUh6rmBfTQli7G19nHQUzqWtAFXgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:7a:8b:4d:79:35:e3:52:f2:a9:d4:4d:34:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Jul 23 17:01:07 2026 GMT
Not After : Jul 24 17:01:07 2026 GMT
Subject: CN=ff728f431aa63a34fd29819c9041293503867ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:86:4d:da:9f:cf:ba:fa:75:99:8a:1d:37:
c6:7a:4a:8b:f0:df:52:4c:60:65:99:29:26:49:b4:
9f:99:c6:e8:5a:90:ac:85:e2:2a:6c:0e:de:d3:e7:
2d:2c:39:bc:82:82:82:64:2e:d8:63:17:24:f0:34:
38:17:c1:bd:b7:89:0e:77:66:93:06:d8:45:2c:28:
fc:46:f8:b5:dd:a2:9c:f6:18:19:6b:76:63:98:56:
7e:29:cd:ea:63:ac:26:7d:43:8b:79:b7:09:0b:08:
35:32:fd:44:4c:42:ad:8f:bc:cc:53:e2:2b:2d:20:
21:d3:28:74:39:95:e1:b5:2f:e2:46:20:d5:41:0d:
2d:b1:cc:0d:cf:92:45:44:89:20:75:5a:3f:a0:8d:
9b:38:ac:cf:b8:cf:6e:5e:b7:7b:73:36:d9:d4:39:
92:3d:72:fc:f8:d1:ce:47:61:54:41:2c:2a:d3:83:
e7:2c:27:30:df:21:2b:47:f0:01:78:99:aa:b6:b9:
81:e5:77:83:bc:47:91:28:70:2d:7c:ea:71:06:45:
03:29:5b:f9:d1:09:f6:2b:f4:21:3d:bf:d0:15:3b:
a9:5b:e4:71:5e:b6:9b:62:98:89:1d:f7:1d:4b:1f:
04:82:2d:ff:fb:7d:30:ad:30:ad:64:55:10:bd:2f:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:72:8F:43:1A:A6:3A:34:FD:29:81:9C:90:41:29:35:03:86:7E:BD
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:92:72:5b:ee:44:77:67:2e:85:be:80:e9:e8:50:9a:6a:ee:
27:c5:31:23:68:3f:30:3d:bb:7c:04:41:22:df:64:f0:08:e8:
bc:a9:d7:61:92:3c:a9:7c:5e:43:35:02:7e:62:e3:b8:08:02:
80:02:1f:f6:ce:d8:74:dc:21:14:9d:e6:a7:98:9d:58:8c:12:
9d:bf:35:e6:b9:31:9c:f4:0c:31:6d:56:1f:97:33:3f:5b:5b:
42:db:f6:f5:62:ec:8b:85:c0:75:d8:3f:09:fd:9a:98:92:74:
40:d8:b4:90:58:78:a2:5e:02:0e:1c:21:84:dc:3e:49:61:85:
0e:5a:16:bf:fa:92:b3:29:0d:ab:d3:40:22:8a:92:e7:89:be:
5b:78:cb:94:b9:4e:93:dd:ac:26:61:79:e2:a4:94:32:a2:56:
5d:61:03:6e:62:16:b7:18:5a:53:b2:48:7d:6b:84:c7:52:3b:
43:d6:69:23:18:9c:52:5f:82:25:87:60:b4:3b:29:99:b4:f6:
30:81:e7:83:9d:1c:93:c3:14:6e:8a:e9:90:b9:2e:93:ec:e8:
b8:07:2f:5a:e8:48:1c:c3:3e:a3:28:03:30:84:23:08:c9:0f:
2a:0b:bf:4f:cf:b1:56:31:86:4f:b2:d1:d4:f6:c3:b7:33:66:
9e:4a:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:13 2026 by rpki-client