Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: JpKl9gP3SWcnX+bMdQq3Mwravj02z6z61NigbtxM/0c=
Subject key identifier: C6:44:9F:00:65:AA:38:F9:4D:8B:AC:5C:47:F3:80:71:14:28:57:F3
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019D2696845010F5C66C30EC13FBA157CA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 1644
Signing time: Wed 25 Mar 2026 20:01:31 +0000
Manifest this update: Wed 25 Mar 2026 20:01:31 +0000
Manifest next update: Thu 26 Mar 2026 20:01:31 +0000
Files and hashes: 1: 1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (hash: T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=)
2: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (hash: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4=)
3: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (hash: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw=)
4: WwPaGaQpisjEnRGrMLRHcOFL-Fs.roa (hash: 5IoEhSgKYc9VUWIcxC0NxkfJGhGKKPJuUdqSQvnAiQA=)
5: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: 0xFQE24j1mTDBHieLCFd2+2hxug1JIm2RTJ2dngRUMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:84:50:10:f5:c6:6c:30:ec:13:fb:a1:57:ca:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Mar 25 20:01:31 2026 GMT
Not After : Mar 26 20:01:31 2026 GMT
Subject: CN=c6449f0065aa38f94d8bac5c47f38071142857f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f2:b6:6d:72:bc:d3:f6:c7:c4:1f:71:87:03:
26:99:ca:7f:c9:cd:47:2f:eb:e3:87:3d:ad:17:46:
56:1a:28:d3:60:46:73:ba:c6:86:e4:cf:db:5d:a0:
56:b1:51:3a:85:94:69:4c:6c:99:d2:ef:66:6b:d4:
a9:eb:4e:b4:52:ad:7c:4e:30:18:23:fa:3c:eb:39:
0c:4a:40:71:a2:89:36:10:f4:f0:41:c0:1d:64:7f:
c9:af:78:86:a8:16:de:ac:5b:f8:dc:df:f6:bc:c7:
7a:a9:87:0e:01:40:6f:fe:da:6d:74:55:25:dd:c3:
bd:d9:27:cf:7d:db:39:21:0d:3c:01:55:c2:1d:df:
ab:43:75:fb:5f:28:f7:6e:36:47:56:8a:e0:e8:ea:
b2:17:6e:84:95:80:c9:5c:0f:86:36:92:20:d6:22:
b9:58:98:36:33:e6:c4:b3:c7:b6:35:10:9e:bc:31:
83:27:dc:e1:b1:b6:ef:81:0a:02:71:4f:f0:04:64:
43:10:ee:d6:a5:7c:79:85:53:2b:47:63:5e:20:e3:
ef:cd:70:3b:46:96:85:18:e7:8c:43:f0:4f:0c:26:
f5:23:88:00:33:28:6b:b3:a1:18:51:e9:02:c9:42:
f0:e0:b5:52:b4:4e:68:d2:0f:98:5c:29:94:54:5d:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:9F:00:65:AA:38:F9:4D:8B:AC:5C:47:F3:80:71:14:28:57:F3
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:28:e6:5f:95:98:05:56:93:d2:fd:d4:cf:05:a8:03:d3:
39:45:f4:9d:b0:3d:fc:a1:b9:30:4f:63:48:3c:b1:b3:67:d3:
cf:b4:a3:c1:70:b5:b5:d2:29:33:50:2a:72:06:6e:58:82:82:
48:b5:d9:5d:9a:98:6b:20:b4:94:f1:2d:e1:e7:94:b0:8b:53:
41:da:04:43:e8:63:75:16:72:e3:41:f8:7b:ff:0a:e4:6b:5e:
78:9d:a5:24:29:45:dc:f3:b5:e5:4f:7e:49:97:38:69:3b:de:
7d:a2:eb:ab:b8:6d:04:90:67:d7:c9:17:ca:6f:37:67:b6:84:
0d:30:6d:54:b2:98:6a:85:c6:65:30:b0:15:a0:71:0e:42:a0:
5c:a2:86:7c:d1:72:57:6b:27:9b:3e:44:54:4f:32:ce:5e:0b:
95:33:9f:96:66:fa:28:24:08:69:e9:ae:cd:39:7f:81:23:fc:
40:ba:14:89:7e:2d:f5:00:35:4e:9d:c6:62:1a:95:4d:4a:da:
36:cb:4d:63:5f:2b:28:ec:9d:03:01:c2:d0:64:8e:8f:53:ef:
f4:13:a9:ba:3d:73:52:f3:95:c2:77:c1:ed:7e:b3:4d:7b:dd:
42:74:1d:e1:4a:93:73:58:0b:a0:a9:d8:41:d7:f9:a1:b8:d3:
13:73:5e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mloRQEPXGbDDsE/uhV8okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh
ZWYxZmYwHhcNMjYwMzI1MjAwMTMxWhcNMjYwMzI2MjAwMTMxWjAzMTEwLwYDVQQD
EyhjNjQ0OWYwMDY1YWEzOGY5NGQ4YmFjNWM0N2YzODA3MTE0Mjg1N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfK2bXK80/bHxB9xhwMmmcp/yc1H
L+vjhz2tF0ZWGijTYEZzusaG5M/bXaBWsVE6hZRpTGyZ0u9ma9Sp6060Uq18TjAY
I/o86zkMSkBxook2EPTwQcAdZH/Jr3iGqBberFv43N/2vMd6qYcOAUBv/tptdFUl
3cO92SfPfds5IQ08AVXCHd+rQ3X7Xyj3bjZHVorg6OqyF26ElYDJXA+GNpIg1iK5
WJg2M+bEs8e2NRCevDGDJ9zhsbbvgQoCcU/wBGRDEO7WpXx5hVMrR2NeIOPvzXA7
RpaFGOeMQ/BPDCb1I4gAMyhrs6EYUekCyULw4LVStE5o0g+YXCmUVF3iJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZEnwBlqjj5TYusXEfzgHEUKFfzMB8GA1UdIwQY
MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt
M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh
LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJco5l+V
mAVWk9L91M8FqAPTOUX0nbA9/KG5ME9jSDyxs2fTz7SjwXC1tdIpM1AqcgZuWIKC
SLXZXZqYayC0lPEt4eeUsItTQdoEQ+hjdRZy40H4e/8K5GteeJ2lJClF3PO15U9+
SZc4aTvefaLrq7htBJBn18kXym83Z7aEDTBtVLKYaoXGZTCwFaBxDkKgXKKGfNFy
V2snmz5EVE8yzl4LlTOflmb6KCQIaemuzTl/gSP8QLoUiX4t9QA1Tp3GYhqVTUra
NstNY18rKOydAwHC0GSOj1Pv9BOpuj1zUvOVwnfB7X6zTXvdQnQd4UqTc1gLoKnY
Qdf5objTE3Ne9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:50 2026 by rpki-client