Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: XIbxjyXF1WNJdUqlujWgQfw+HVj8Nkah89pmJlrg6JA=
Subject key identifier: CD:F7:69:E1:6E:B3:DB:40:4C:81:A4:99:45:3E:96:F2:9C:5F:13:45
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 01A0CBFE7BF0C7627EC4F802A2A44AD2F6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0B6A
Signing time: Wed 23 Sep 2026 02:00:47 +0000
Manifest this update: Wed 23 Sep 2026 02:00:47 +0000
Manifest next update: Thu 24 Sep 2026 02:00:47 +0000
Files and hashes: 1: MtkMFeCwdMHY3TrtSqt90faUdo0.roa (hash: l0UeOKu9JpK0NnRYAC+4ynQckxHuoZ5fWDKY6dAiR4g=)
2: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: pAQ+WQdTP3Oi0dp0qXwPxFGGA21geYP6lbZU8FUNDxc=)
3: kS6P0-FBRVMuVdEEV02vD8TDiUc.asa (hash: Xqodnxc0/+vizlkl7MttnkM6knf6ZdTRjpzArx0o9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:7b:f0:c7:62:7e:c4:f8:02:a2:a4:4a:d2:f6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Sep 23 02:00:47 2026 GMT
Not After : Sep 24 02:00:47 2026 GMT
Subject: CN=cdf769e16eb3db404c81a499453e96f29c5f1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:17:39:b2:37:0d:d9:f3:c1:a4:ac:fb:98:
43:4b:af:e4:e2:0a:d0:10:57:ba:1b:1b:9d:76:c4:
3e:1e:82:17:cb:8c:21:07:57:45:ce:53:6c:33:b8:
04:f0:66:70:f0:b7:63:9d:54:9d:c0:42:07:5e:ec:
95:7e:a5:b2:53:04:95:44:91:3d:14:26:22:42:18:
7b:49:47:f7:a2:ee:55:6f:71:0c:2c:5a:20:7a:63:
39:fb:a1:ac:44:fe:34:b3:9e:39:b2:19:02:86:b4:
cb:fc:50:26:42:39:99:05:f9:61:ad:a8:11:41:1d:
cd:38:6f:0a:8e:b1:86:f6:cf:f3:b0:6a:3c:58:d8:
e2:f6:6d:d0:7a:b5:1c:a3:26:89:14:78:91:fe:ce:
46:6f:bf:0f:ba:38:5f:e9:05:31:8c:a0:c8:88:66:
de:08:71:7c:1f:21:cc:f1:6f:d0:d4:42:89:ae:2a:
e0:25:8e:fc:23:c4:d6:fa:d5:cc:5a:b4:f0:5f:d4:
7e:cc:25:9e:7e:f8:fe:6c:9e:59:ac:55:19:47:88:
d1:4a:8b:b5:ee:a1:14:8a:4d:fc:97:9e:ac:49:36:
46:df:96:af:ed:08:80:01:db:83:5e:6a:10:f2:aa:
b5:15:1e:e5:e4:2c:2f:74:6b:e7:9f:84:6f:aa:85:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:69:E1:6E:B3:DB:40:4C:81:A4:99:45:3E:96:F2:9C:5F:13:45
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cc:ef:37:4b:96:15:13:64:9c:2d:a7:51:d2:bb:4f:5a:72:
2a:28:9c:3f:cb:c6:4c:3c:bd:d9:a6:3d:99:b0:c5:a5:f0:cd:
9d:b6:de:e1:e3:cb:2f:70:2c:57:53:d6:e7:98:c5:13:2e:24:
24:a7:20:b2:3e:07:bd:a2:a6:30:db:14:a3:3d:b5:2f:c0:d5:
bf:97:41:dd:2a:3e:e9:e1:7d:49:8a:3b:98:76:a0:01:4d:31:
6b:07:a4:ea:1c:0c:0c:da:93:22:24:7c:ab:65:d2:72:76:48:
48:07:6c:4d:e0:c2:2c:db:b0:14:01:c5:7f:2d:ae:da:67:48:
c6:64:10:9e:0a:c9:f0:31:a8:69:59:0e:ca:fb:54:c3:45:6c:
ec:02:0d:4f:a4:07:ae:f7:40:a9:26:df:dc:2c:26:16:97:6f:
fe:42:61:cc:e5:38:10:a6:ef:ec:4a:f0:d6:d0:97:70:80:ef:
5a:02:82:72:f4:f4:05:16:92:32:43:37:6c:e3:f2:b3:3f:bd:
77:74:fb:ae:f3:53:3f:25:3a:01:c3:10:0b:31:fb:48:3b:65:
d2:41:6e:58:5a:a9:f3:33:d2:40:cf:59:2b:96:81:33:64:f8:
81:e5:85:f3:9c:7d:22:2d:31:f5:cf:01:1d:a4:d2:2a:27:e5:
5a:81:f9:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/nvwx2J+xPgCoqRK0vbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzY5YzNkNzAzMGNlYzE5ZjhmYjY2ZTU0M2JkZTY1NTk1
NzA4YTIwHhcNMjYwOTIzMDIwMDQ3WhcNMjYwOTI0MDIwMDQ3WjAzMTEwLwYDVQQD
EyhjZGY3NjllMTZlYjNkYjQwNGM4MWE0OTk0NTNlOTZmMjljNWYxMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TQXObI3DdnzwaSs+5hDS6/k4grQ
EFe6GxuddsQ+HoIXy4whB1dFzlNsM7gE8GZw8LdjnVSdwEIHXuyVfqWyUwSVRJE9
FCYiQhh7SUf3ou5Vb3EMLFogemM5+6GsRP40s545shkChrTL/FAmQjmZBflhragR
QR3NOG8KjrGG9s/zsGo8WNji9m3QerUcoyaJFHiR/s5Gb78Pujhf6QUxjKDIiGbe
CHF8HyHM8W/Q1EKJrirgJY78I8TW+tXMWrTwX9R+zCWefvj+bJ5ZrFUZR4jRSou1
7qEUik38l56sSTZG35av7QiAAduDXmoQ8qq1FR7l5CwvdGvnn4RvqoWkzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM33aeFus9tATIGkmUU+lvKcXxNFMB8GA1UdIwQY
MBaAFGzGnD1wMM7Bn4+2blQ73mVZVwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEt
MWFlYjZhNGU0NWFkLzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEtMWFlYjZhNGU0NWFk
LzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWczvN0uW
FRNknC2nUdK7T1pyKiicP8vGTDy92aY9mbDFpfDNnbbe4ePLL3AsV1PW55jFEy4k
JKcgsj4HvaKmMNsUoz21L8DVv5dB3So+6eF9SYo7mHagAU0xawek6hwMDNqTIiR8
q2XScnZISAdsTeDCLNuwFAHFfy2u2mdIxmQQngrJ8DGoaVkOyvtUw0Vs7AINT6QH
rvdAqSbf3CwmFpdv/kJhzOU4EKbv7Erw1tCXcIDvWgKCcvT0BRaSMkM3bOPysz+9
d3T7rvNTPyU6AcMQCzH7SDtl0kFuWFqp8zPSQM9ZK5aBM2T4geWF85x9Ii0x9c8B
HaTSKiflWoH5Rw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:39:19 2026 by rpki-client