Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
File: bQ1tLElBrnWMSVIKy3V38jKuRiY.mft (raw, json)
Hash identifier: v71WBYYBodcg1JIF+Nuns6tuUoJ9lZfkPurul91gGyg=
Subject key identifier: E5:51:0D:BF:79:48:AD:E0:9B:59:D0:89:FD:4A:D8:B5:0E:D7:71:00
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Certificate issuer: /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial: 019E1C46F63CF35862DC4D99FEDFF042943B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
Manifest number: 17
Signing time: Tue 12 May 2026 13:01:12 +0000
Manifest this update: Tue 12 May 2026 13:01:12 +0000
Manifest next update: Wed 13 May 2026 13:01:12 +0000
Files and hashes: 1: BBATvh4xeWeL839jiNfIKPcK8JA.roa (hash: VpG3w6G88UCXf4PVa4Xkm7ESG9W4N22rBINybDK9cYA=)
2: ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (hash: 5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=)
3: bQ1tLElBrnWMSVIKy3V38jKuRiY.crl (hash: UkW0ZGoARww0kMiVAXvFcMQhN94uxFlHhhswwt+LmMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:f6:3c:f3:58:62:dc:4d:99:fe:df:f0:42:94:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Validity
Not Before: May 12 13:01:12 2026 GMT
Not After : May 13 13:01:12 2026 GMT
Subject: CN=e5510dbf7948ade09b59d089fd4ad8b50ed77100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:d7:25:81:a2:02:96:b8:d5:b4:66:2e:33:
f0:87:a6:37:cf:4a:15:7c:42:62:de:08:55:c1:8e:
13:d2:26:89:85:85:a3:fe:e2:6e:33:2c:96:bd:89:
5c:ac:9d:6e:4c:46:2b:94:e3:71:92:8e:7e:45:34:
be:d1:08:ba:13:9f:cc:fd:d2:9f:0c:36:2e:0b:a4:
b3:5e:82:e7:99:22:0b:31:a6:a9:d3:32:2d:d6:dd:
ae:7c:6f:8d:ef:8e:79:a2:d4:fb:0d:25:a7:15:44:
1a:46:42:3b:32:4d:e1:f2:8d:fe:17:34:82:3c:87:
d5:15:4a:e4:c5:57:ad:ef:b0:e2:22:18:24:57:2c:
54:cb:b2:41:0a:45:c1:eb:88:3e:d4:59:c1:c0:22:
12:80:11:42:42:6a:93:3f:71:3c:80:64:09:92:51:
67:cd:b9:f3:e8:7f:f1:d7:33:46:82:94:4a:72:d9:
39:eb:d9:ba:47:5a:87:ea:2d:c5:ee:c7:3b:e8:07:
05:ef:a5:bf:ef:c1:f4:82:7f:a5:ff:6d:c2:78:ca:
70:df:22:ae:74:b1:91:20:41:f2:8a:d5:5b:69:95:
17:55:4c:93:06:36:af:b7:bb:13:d5:50:aa:2c:c1:
aa:02:2b:0d:f9:19:10:e5:35:e5:9c:93:3e:0d:a7:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:51:0D:BF:79:48:AD:E0:9B:59:D0:89:FD:4A:D8:B5:0E:D7:71:00
X509v3 Authority Key Identifier:
keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:e9:2e:ce:56:a9:a5:c3:dc:38:18:59:4a:ce:9e:01:5b:
d3:5b:cc:db:c3:9b:1c:e1:87:33:7f:2f:5a:90:b3:0c:7a:28:
c1:44:e0:02:45:a6:44:d7:8a:b0:b4:44:0e:80:ab:f0:01:8f:
9f:8e:91:8e:95:06:05:a6:84:71:6a:51:45:8b:4d:8c:91:9e:
66:8c:3b:2f:e6:bd:2f:27:38:6d:dd:20:31:40:8c:93:f0:c9:
30:f7:77:1d:a4:f0:fe:89:73:f6:d4:de:2d:6c:c6:b3:e1:66:
77:3a:3d:65:b0:16:99:79:12:a7:4e:c6:f4:04:5a:34:63:4e:
99:fc:e5:9c:1b:3a:a4:85:88:aa:d7:61:92:dd:6b:87:b1:06:
38:a3:83:2a:73:39:0d:bf:d0:8f:69:0a:b3:9b:8a:59:2e:ee:
39:70:74:aa:7b:34:2a:00:b8:e0:dc:9a:75:7b:81:a0:dc:f7:
0c:45:a4:9a:6e:f1:df:01:0d:c5:46:1c:47:25:ad:86:b5:ad:
ca:b8:cb:09:94:c8:01:cf:5e:59:5d:27:d9:55:d5:c6:ef:e4:
7b:45:fb:2a:c5:98:a8:32:76:bf:0d:87:50:21:a6:7c:03:3b:
02:e2:a3:47:01:d7:1a:93:48:64:f3:db:be:1a:5a:02:de:66:
94:00:a8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRvY881hi3E2Z/t/wQpQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGQ2ZDJjNDk0MWFlNzU4YzQ5NTIwYWNiNzU3N2YyMzJh
ZTQ2MjYwHhcNMjYwNTEyMTMwMTEyWhcNMjYwNTEzMTMwMTEyWjAzMTEwLwYDVQQD
EyhlNTUxMGRiZjc5NDhhZGUwOWI1OWQwODlmZDRhZDhiNTBlZDc3MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntLXJYGiApa41bRmLjPwh6Y3z0oV
fEJi3ghVwY4T0iaJhYWj/uJuMyyWvYlcrJ1uTEYrlONxko5+RTS+0Qi6E5/M/dKf
DDYuC6SzXoLnmSILMaap0zIt1t2ufG+N7455otT7DSWnFUQaRkI7Mk3h8o3+FzSC
PIfVFUrkxVet77DiIhgkVyxUy7JBCkXB64g+1FnBwCISgBFCQmqTP3E8gGQJklFn
zbnz6H/x1zNGgpRKctk569m6R1qH6i3F7sc76AcF76W/78H0gn+l/23CeMpw3yKu
dLGRIEHyitVbaZUXVUyTBjavt7sT1VCqLMGqAisN+RkQ5TXlnJM+DadE7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVRDb95SK3gm1nQif1K2LUO13EAMB8GA1UdIwQY
MBaAFG0NbSxJQa51jElSCst1d/IyrkYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlExdExFbEJybldNU1ZJS3kzVjM4akt1UmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mMzI3MWUtMmY1OS00M2UyLTgxZTct
YzZiMDI4ZmFkOTU2LzEvYlExdExFbEJybldNU1ZJS3kzVjM4akt1UmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mMzI3MWUtMmY1OS00M2UyLTgxZTctYzZiMDI4ZmFkOTU2
LzEvYlExdExFbEJybldNU1ZJS3kzVjM4akt1UmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTXpLs5W
qaXD3DgYWUrOngFb01vM28ObHOGHM38vWpCzDHoowUTgAkWmRNeKsLREDoCr8AGP
n46RjpUGBaaEcWpRRYtNjJGeZow7L+a9Lyc4bd0gMUCMk/DJMPd3HaTw/olz9tTe
LWzGs+Fmdzo9ZbAWmXkSp07G9ARaNGNOmfzlnBs6pIWIqtdhkt1rh7EGOKODKnM5
Db/Qj2kKs5uKWS7uOXB0qns0KgC44NyadXuBoNz3DEWkmm7x3wENxUYcRyWthrWt
yrjLCZTIAc9eWV0n2VXVxu/ke0X7KsWYqDJ2vw2HUCGmfAM7AuKjRwHXGpNIZPPb
vhpaAt5mlACo2A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:57 2026 by rpki-client