Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: yVQlTb0jih37dDGyhABFzsEolavyO/svA5d8w+7h5fM=
Subject key identifier: B8:FA:5B:E8:54:2C:58:7C:BC:7B:D5:EB:61:4B:64:0B:C9:3B:44:99
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019E1E3562ADD93F24EA0FFBAA4D53FA1172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0EB4
Signing time: Tue 12 May 2026 22:01:15 +0000
Manifest this update: Tue 12 May 2026 22:01:15 +0000
Manifest next update: Wed 13 May 2026 22:01:15 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: JRHUF3jXa5qX0Zev+thO49OQaCk+ylzyO+lDODtU/UE=)
2: xByyab3Vrz3Ef2rAb6P2eDrMVOE.roa (hash: kIu292fLCuL6Bxl5IG18vmja0jYF3hwZuE7UgYdGv/Y=)
3: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:62:ad:d9:3f:24:ea:0f:fb:aa:4d:53:fa:11:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: May 12 22:01:15 2026 GMT
Not After : May 13 22:01:15 2026 GMT
Subject: CN=b8fa5be8542c587cbc7bd5eb614b640bc93b4499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:36:4e:c3:82:b4:2f:b5:33:c3:b7:0c:46:
a8:20:5a:5f:9b:8b:ff:b5:a0:28:c2:c0:48:bd:3f:
37:46:ac:91:47:f8:17:c6:2e:9b:88:49:2f:0c:fa:
f6:ff:e2:50:d8:9f:1e:d6:83:36:be:97:9d:06:60:
bd:21:5d:c8:e1:12:c1:2a:35:00:41:6e:d4:0c:d4:
72:fb:a2:c5:63:31:3b:45:dd:a6:9f:de:2e:af:b3:
09:b6:0c:59:31:46:98:21:ae:6e:71:f4:58:8c:13:
0d:0e:0d:92:6c:8e:cc:b9:ec:fe:ac:c2:53:c7:48:
1e:58:77:cd:cb:24:1c:d9:db:b7:16:68:de:9c:1c:
61:0a:e5:d8:1e:7f:0a:e4:cb:9e:b9:78:48:98:9a:
fe:30:e8:ea:50:20:8a:0a:2d:4f:52:a0:a8:a5:5f:
ef:e5:e0:f6:90:23:af:73:c5:0c:42:04:7f:a6:2f:
53:7a:a3:46:9e:c7:51:e6:ed:2e:35:66:67:dc:6e:
fc:b8:6d:03:8f:8e:7d:4a:37:62:e2:94:3c:62:48:
0d:2f:6a:f4:33:0e:92:30:bc:0a:2c:bc:0f:9d:59:
57:ef:2d:cf:9b:1d:d2:8e:b6:a2:74:3c:ff:cd:5e:
be:74:8c:fa:61:bb:2d:e0:d2:91:52:34:5a:d3:73:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:5B:E8:54:2C:58:7C:BC:7B:D5:EB:61:4B:64:0B:C9:3B:44:99
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:36:1d:8e:66:d1:d4:8e:5c:73:0a:bf:09:bb:00:98:eb:dc:
33:d7:06:b1:37:cb:fd:24:bb:6e:8b:7b:95:cd:50:28:ad:a4:
82:ce:ea:91:a5:26:aa:f7:6c:c4:27:74:0b:e6:63:0c:02:e7:
4c:72:7c:cd:1e:53:9f:da:3b:d4:c9:0d:a1:19:47:e3:37:aa:
9e:a7:58:0b:50:ce:22:08:2e:cb:fc:d0:db:9c:06:ed:cb:d9:
a6:de:de:b1:dd:6e:b6:7a:c7:01:1e:87:df:b2:0c:c1:b6:70:
00:26:a5:f0:a1:1d:70:f2:74:48:7a:dc:3a:50:bf:2f:c7:a2:
79:c4:85:93:97:1e:2e:bd:f7:d3:55:d4:88:f3:21:f5:8b:ec:
58:2e:ac:a9:0f:dc:de:3a:b5:05:c3:8b:13:02:14:1c:82:d9:
d0:e5:20:c1:e6:c3:68:96:58:48:82:02:89:5e:98:93:20:c6:
03:1d:ac:07:96:9c:70:b2:5b:e0:4d:af:b1:9d:98:1c:54:81:
de:07:a1:0b:b3:73:b1:22:75:06:1f:8a:fa:77:50:63:e0:39:
0c:72:5d:77:f0:43:2d:0a:ea:ee:0f:fe:b0:59:4c:2e:04:9b:
44:22:33:a5:45:b6:fc:dc:2b:c2:ed:7d:ed:05:5b:a9:09:5d:
1d:7d:26:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNWKt2T8k6g/7qk1T+hFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx
NDRiYjYwHhcNMjYwNTEyMjIwMTE1WhcNMjYwNTEzMjIwMTE1WjAzMTEwLwYDVQQD
EyhiOGZhNWJlODU0MmM1ODdjYmM3YmQ1ZWI2MTRiNjQwYmM5M2I0NDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sc2TsOCtC+1M8O3DEaoIFpfm4v/
taAowsBIvT83RqyRR/gXxi6biEkvDPr2/+JQ2J8e1oM2vpedBmC9IV3I4RLBKjUA
QW7UDNRy+6LFYzE7Rd2mn94ur7MJtgxZMUaYIa5ucfRYjBMNDg2SbI7Muez+rMJT
x0geWHfNyyQc2du3FmjenBxhCuXYHn8K5MueuXhImJr+MOjqUCCKCi1PUqCopV/v
5eD2kCOvc8UMQgR/pi9TeqNGnsdR5u0uNWZn3G78uG0Dj459Sjdi4pQ8YkgNL2r0
Mw6SMLwKLLwPnVlX7y3Pmx3SjraidDz/zV6+dIz6Ybst4NKRUjRa03OJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj6W+hULFh8vHvV62FLZAvJO0SZMB8GA1UdIwQY
MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt
MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz
LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTYdjmbR
1I5ccwq/CbsAmOvcM9cGsTfL/SS7bot7lc1QKK2kgs7qkaUmqvdsxCd0C+ZjDALn
THJ8zR5Tn9o71MkNoRlH4zeqnqdYC1DOIgguy/zQ25wG7cvZpt7esd1utnrHAR6H
37IMwbZwACal8KEdcPJ0SHrcOlC/L8eiecSFk5ceLr3301XUiPMh9YvsWC6sqQ/c
3jq1BcOLEwIUHILZ0OUgwebDaJZYSIICiV6YkyDGAx2sB5accLJb4E2vsZ2YHFSB
3gehC7NzsSJ1Bh+K+ndQY+A5DHJdd/BDLQrq7g/+sFlMLgSbRCIzpUW2/Nwrwu19
7QVbqQldHX0m+Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:34:44 2026 by rpki-client