Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: R/CeUc6GKZ3C0HGr3ZYynlDvbre0ZCT7Y4dcwmFo6WI=
Subject key identifier: BF:56:F2:D7:19:84:B7:BB:3B:CA:C4:BE:39:D4:7D:97:9B:3B:F0:D2
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 01A0D4940EADE2ADD8059D9A04897779D690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: 0160
Signing time: Thu 24 Sep 2026 18:01:07 +0000
Manifest this update: Thu 24 Sep 2026 18:01:07 +0000
Manifest next update: Fri 25 Sep 2026 18:01:07 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: e3HE9rdqIDRZvfIQ63Ut+eS5wYYQoiCQ6FNXE2arcLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:0e:ad:e2:ad:d8:05:9d:9a:04:89:77:79:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Sep 24 18:01:07 2026 GMT
Not After : Sep 25 18:01:07 2026 GMT
Subject: CN=bf56f2d71984b7bb3bcac4be39d47d979b3bf0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:d1:83:92:4a:ed:c4:1a:84:b1:33:48:0b:
a7:44:41:78:24:a9:97:e7:b2:ae:42:1f:c6:e0:7a:
fa:f9:fd:f4:7c:72:5c:18:f5:91:72:b4:1b:bc:e5:
1e:bd:9a:07:cb:72:1f:34:6c:d4:e2:0d:bb:01:ad:
b2:43:04:ec:18:e9:1a:5d:c5:c9:66:d4:b8:15:65:
a0:2c:34:33:16:a1:71:ee:97:29:99:f2:3f:5b:d3:
07:28:a4:9c:96:e8:da:74:c5:a0:ba:07:f7:a6:68:
dc:b9:8e:5a:b5:f3:d5:ca:1a:6f:da:a6:57:2a:19:
65:a3:a9:e5:ad:91:24:c0:b5:7e:c1:99:69:d3:12:
9d:2b:dd:63:5f:b6:3f:00:a3:e4:cd:71:9b:87:af:
72:78:68:47:85:3b:6c:03:8a:fa:9b:21:87:ea:c6:
f0:4e:84:da:0c:19:07:5e:04:92:ac:33:b2:08:d0:
18:72:f9:ff:e9:bd:05:ed:7f:17:06:35:9d:e9:54:
5b:a1:8e:09:43:2b:70:f8:65:37:14:fa:6b:81:1a:
a7:86:fc:59:2b:28:53:6d:89:01:a0:a2:2d:53:83:
30:36:5c:9f:7e:1b:13:67:92:ee:4a:9d:e1:55:37:
93:18:1c:65:0a:3a:94:01:a9:ce:50:40:95:b2:10:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:F2:D7:19:84:B7:BB:3B:CA:C4:BE:39:D4:7D:97:9B:3B:F0:D2
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1f:b8:aa:1f:7a:cb:55:0f:08:88:e4:80:7f:ec:01:cf:a9:
8e:a9:fb:7d:52:7a:ff:99:fb:3a:43:63:65:b9:6d:32:cc:50:
74:6f:cc:74:18:b2:72:40:f1:40:70:ae:7c:d5:2e:8f:a5:de:
c3:3b:34:ef:a3:91:21:88:b6:33:9e:ad:18:a7:75:a8:7b:21:
0d:8a:2e:44:14:13:54:77:25:0b:02:33:a9:04:5d:02:a3:81:
8c:14:71:c8:57:cd:35:98:6c:3f:7d:4b:26:27:3b:2d:f9:80:
d6:8f:5a:78:47:1e:2b:28:67:7f:7e:bb:72:29:82:da:34:39:
03:90:8d:18:a0:ca:57:bf:e8:ad:ee:48:e0:d0:65:83:d3:03:
91:e2:86:6c:51:e1:e4:18:d0:a7:f7:a4:2a:76:7d:85:04:ca:
64:a5:0b:61:4a:36:62:90:0c:a8:68:57:50:6f:7d:6d:9b:01:
f1:24:fb:e1:89:00:4b:bd:f6:50:b7:b0:61:09:11:a9:54:b6:
e8:ea:90:05:e4:81:c7:0a:c8:92:99:47:56:14:42:b2:14:eb:
a6:96:54:53:ea:5d:19:41:9a:f4:50:19:b5:be:89:17:34:31:
8d:2e:9f:fb:4b:9b:49:76:51:31:8e:05:25:cd:af:29:82:61:
93:5f:58:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlA6t4q3YBZ2aBIl3edaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzA5MjMyMWQ3N2I2ZTVkY2I3Y2E1MDVkNzQzYTIzODAw
OGQ0ZjIwHhcNMjYwOTI0MTgwMTA3WhcNMjYwOTI1MTgwMTA3WjAzMTEwLwYDVQQD
EyhiZjU2ZjJkNzE5ODRiN2JiM2JjYWM0YmUzOWQ0N2Q5NzliM2JmMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEPRg5JK7cQahLEzSAunREF4JKmX
57KuQh/G4Hr6+f30fHJcGPWRcrQbvOUevZoHy3IfNGzU4g27Aa2yQwTsGOkaXcXJ
ZtS4FWWgLDQzFqFx7pcpmfI/W9MHKKSclujadMWgugf3pmjcuY5atfPVyhpv2qZX
Khllo6nlrZEkwLV+wZlp0xKdK91jX7Y/AKPkzXGbh69yeGhHhTtsA4r6myGH6sbw
ToTaDBkHXgSSrDOyCNAYcvn/6b0F7X8XBjWd6VRboY4JQytw+GU3FPprgRqnhvxZ
KyhTbYkBoKItU4MwNlyffhsTZ5LuSp3hVTeTGBxlCjqUAanOUECVshAhmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9W8tcZhLe7O8rEvjnUfZebO/DSMB8GA1UdIwQY
MBaAFG1wkjIdd7bl3LfKUF10OiOACNTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhDU01oMTN0dVhjdDhwUVhYUTZJNEFJMVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYmYxM2UtZTI1Yi00OTdhLWJlNTUt
Mzg0N2Y0ZjI0ZWE3LzEvYlhDU01oMTN0dVhjdDhwUVhYUTZJNEFJMVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mYmYxM2UtZTI1Yi00OTdhLWJlNTUtMzg0N2Y0ZjI0ZWE3
LzEvYlhDU01oMTN0dVhjdDhwUVhYUTZJNEFJMVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWR+4qh96
y1UPCIjkgH/sAc+pjqn7fVJ6/5n7OkNjZbltMsxQdG/MdBiyckDxQHCufNUuj6Xe
wzs076ORIYi2M56tGKd1qHshDYouRBQTVHclCwIzqQRdAqOBjBRxyFfNNZhsP31L
Jic7LfmA1o9aeEceKyhnf367cimC2jQ5A5CNGKDKV7/ore5I4NBlg9MDkeKGbFHh
5BjQp/ekKnZ9hQTKZKULYUo2YpAMqGhXUG99bZsB8ST74YkAS732ULewYQkRqVS2
6OqQBeSBxwrIkplHVhRCshTrppZUU+pdGUGa9FAZtb6JFzQxjS6f+0ubSXZRMY4F
Jc2vKYJhk19YGw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:20:11 2026 by rpki-client