Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: /gKXOQS1fJkR4/WsFKpTHhRJ5KGsof6F1BAkpSuA3hc=
Subject key identifier: B2:2E:96:64:77:17:F5:E5:A2:E5:CA:3D:1B:10:25:B3:B2:1E:80:EA
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 01A0E92D783D72297826311FB4A046E9BAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 185D
Signing time: Mon 28 Sep 2026 18:01:06 +0000
Manifest this update: Mon 28 Sep 2026 18:01:06 +0000
Manifest next update: Tue 29 Sep 2026 18:01:06 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: 4HIKnU85JBSoXD3IrJewDeFct7W1XYDJc1yCxD8iUmw=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:78:3d:72:29:78:26:31:1f:b4:a0:46:e9:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Sep 28 18:01:06 2026 GMT
Not After : Sep 29 18:01:06 2026 GMT
Subject: CN=b22e96647717f5e5a2e5ca3d1b1025b3b21e80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:07:14:f8:b5:d8:86:f4:79:de:a4:48:09:
51:e7:7f:db:db:47:e5:b8:4f:39:c9:dc:c6:c8:8b:
79:4a:45:0b:64:72:ed:c6:83:5e:99:64:28:0f:4c:
dd:12:bb:84:ec:0a:be:56:b3:ef:34:e5:e2:13:0c:
f1:f8:38:fc:80:0b:34:f0:42:f4:af:6e:05:bd:f3:
66:e6:72:8e:a5:eb:1e:e6:75:28:c9:dd:f4:59:ff:
07:69:8f:5d:7c:ee:4a:9e:bd:9d:e2:9b:7c:e6:97:
01:78:ee:de:0a:e0:66:6a:70:6e:21:87:30:24:cf:
ff:ff:a1:93:09:ee:1a:91:61:a7:3c:fd:cd:e3:d4:
f1:54:6b:c6:34:8e:f4:4a:56:f0:e4:bd:dc:a9:49:
22:ec:b7:8b:60:7d:8c:d3:60:2c:a3:60:3c:b5:d9:
b1:2a:f5:41:ac:87:11:ff:30:88:2d:b0:30:09:3c:
10:6c:2a:7f:49:00:ab:31:b6:0e:da:87:7b:c2:6a:
1f:ba:87:df:8c:00:3a:c2:74:1a:26:2c:8a:31:85:
70:5f:9f:71:5a:bf:e1:3b:0e:98:4e:95:17:3f:30:
f9:4a:7a:db:72:34:e7:c6:56:fa:19:ef:43:01:8e:
b9:96:e9:ff:9a:3a:b4:8b:9a:2b:3e:ca:f2:ec:37:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:96:64:77:17:F5:E5:A2:E5:CA:3D:1B:10:25:B3:B2:1E:80:EA
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:74:d9:c9:49:4d:3f:e5:7b:b5:1c:cb:b9:00:c5:68:83:
cd:33:f2:ae:cc:41:1b:ff:1d:46:91:b1:08:26:b4:c6:af:64:
a6:66:b9:b5:61:ff:c7:2a:80:8b:83:49:cc:dc:54:37:35:97:
96:7d:d2:f6:51:fe:b3:17:33:bd:e7:64:15:16:18:98:3b:22:
c5:d0:cb:9b:7c:a1:db:f8:ba:dc:03:20:91:68:0f:74:2c:5d:
b5:37:d8:41:7a:1d:d9:79:32:2f:2e:35:2d:3a:f2:da:d9:7b:
ec:76:ee:2d:e8:78:c8:bd:ab:8a:45:b1:8b:be:26:69:33:3d:
da:c0:df:21:d7:fa:05:10:d0:cf:6b:d8:7e:08:50:98:b2:94:
64:07:c3:ed:3d:dc:93:4d:75:b3:96:6d:da:d9:d7:b5:15:d7:
e9:49:92:f2:78:da:1d:b7:3d:0e:9b:58:20:b9:07:76:b2:7d:
fd:2e:02:5e:ea:20:04:e9:7a:fc:38:47:a4:97:68:88:71:6c:
1c:6b:ba:28:32:2b:7f:f0:97:57:7d:1c:b9:05:8a:80:ae:02:
ac:3d:e3:23:c4:a0:3b:04:f5:8b:df:81:d1:b8:03:7b:76:7f:
43:7f:8a:1a:42:24:7e:2a:79:22:fd:67:7d:ba:8c:f3:b9:af:
9e:1c:a1:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpLXg9cil4JjEftKBG6brSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjYwOTI4MTgwMTA2WhcNMjYwOTI5MTgwMTA2WjAzMTEwLwYDVQQD
EyhiMjJlOTY2NDc3MTdmNWU1YTJlNWNhM2QxYjEwMjViM2IyMWU4MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAsHFPi12Ib0ed6kSAlR53/b20fl
uE85ydzGyIt5SkULZHLtxoNemWQoD0zdEruE7Aq+VrPvNOXiEwzx+Dj8gAs08EL0
r24FvfNm5nKOpese5nUoyd30Wf8HaY9dfO5Knr2d4pt85pcBeO7eCuBmanBuIYcw
JM///6GTCe4akWGnPP3N49TxVGvGNI70Slbw5L3cqUki7LeLYH2M02Aso2A8tdmx
KvVBrIcR/zCILbAwCTwQbCp/SQCrMbYO2od7wmofuoffjAA6wnQaJiyKMYVwX59x
Wr/hOw6YTpUXPzD5SnrbcjTnxlb6Ge9DAY65lun/mjq0i5orPsry7DeJqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIulmR3F/XlouXKPRsQJbOyHoDqMB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxd02clJ
TT/le7Ucy7kAxWiDzTPyrsxBG/8dRpGxCCa0xq9kpma5tWH/xyqAi4NJzNxUNzWX
ln3S9lH+sxczvedkFRYYmDsixdDLm3yh2/i63AMgkWgPdCxdtTfYQXod2XkyLy41
LTry2tl77HbuLeh4yL2rikWxi74maTM92sDfIdf6BRDQz2vYfghQmLKUZAfD7T3c
k011s5Zt2tnXtRXX6UmS8njaHbc9DptYILkHdrJ9/S4CXuogBOl6/DhHpJdoiHFs
HGu6KDIrf/CXV30cuQWKgK4CrD3jI8SgOwT1i9+B0bgDe3Z/Q3+KGkIkfip5Iv1n
fbqM87mvnhyhUw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:49:04 2026 by rpki-client