Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: SfokOh2K+Y+xVEgKGd0YlRf1YCa9ucP/9L6JW+ivhNg=
Subject key identifier: 19:1B:1D:DF:25:EC:5A:59:43:64:14:92:61:97:65:F4:31:2E:A9:0E
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 019D2703E168E055BC1858E76493F1313AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: _HzxSZR90lf9BYmEm2VupOU1Vas.roa (hash: Ugm9+I27Dta4vBt0cYoky3PGDm0q/WYMbNn8zxEdBlA=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: wlMV2eoS3MEaotkyvdh3bPX16Pfyx8yhglbH2hk6pSY=)
3: wgHQmaQij3F-nK5W4X8CVxaOPm0.roa (hash: sBWiBVt4sHrg4hhwrk19Ek9irYUlBrf3WzJ8I2XR+Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e1:68:e0:55:bc:18:58:e7:64:93:f1:31:3a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=191b1ddf25ec5a5943641492619765f4312ea90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:0b:6b:dc:68:f5:1a:c5:01:94:1a:c1:78:
4a:22:67:11:d5:da:94:dd:b7:0d:d7:a1:ed:7e:08:
c5:69:cf:01:4a:79:25:2d:03:89:be:b1:44:5f:40:
b9:2b:9e:0f:c6:ce:b6:c8:fb:13:a0:9e:88:f8:1f:
27:21:04:d1:20:a3:ca:a8:ee:e1:7e:7f:5a:26:c8:
6d:b5:1f:41:0b:1f:1a:f9:fa:06:3e:90:97:fe:36:
d9:60:10:3a:f1:a0:ef:a5:23:b4:7a:ea:bd:7d:1d:
6d:e8:d4:16:36:cd:e6:90:4c:33:8a:79:e3:87:48:
bc:ad:9c:5b:9c:0a:52:84:5c:59:8f:43:6f:c5:9f:
63:f9:82:92:c3:fb:09:17:ff:91:fa:38:ba:0b:18:
7c:90:a7:b1:9b:07:3f:5f:7d:5f:bc:8d:eb:67:90:
63:97:59:42:f1:f9:89:a6:69:e5:9c:d7:9e:6d:04:
1c:fd:ad:c8:49:29:a9:a3:64:5f:a3:a7:ab:56:e0:
13:03:63:c1:bc:b3:c6:f5:11:93:2a:33:27:89:f8:
f3:0f:5c:8e:7e:55:d3:83:2f:b8:6d:d0:c7:d4:01:
7b:f7:81:43:0a:94:5c:c4:63:5a:fe:b3:9c:aa:2f:
9c:31:6a:49:db:e3:67:35:ef:fa:47:79:dd:10:50:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:1D:DF:25:EC:5A:59:43:64:14:92:61:97:65:F4:31:2E:A9:0E
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a5:c5:d6:44:41:f4:00:33:e5:31:33:91:37:25:ae:ac:cb:
92:63:71:c5:24:3d:72:98:2d:91:be:c0:9c:7d:88:b0:c0:6b:
51:f8:a1:ea:1f:b6:a7:81:51:4f:2f:d9:de:0b:df:0b:2e:d5:
72:3e:ee:9c:94:40:3a:7b:cf:2a:02:77:f1:b2:91:ad:9a:60:
c9:71:9b:d3:4a:15:ec:0a:59:d3:f9:e7:83:65:c5:d9:97:ce:
2b:fe:af:d8:a9:5c:f1:fb:90:df:11:b5:be:9d:40:f4:8d:4b:
9f:41:e9:65:92:71:99:7d:df:b7:e8:78:77:91:d7:52:a2:09:
1f:02:50:4c:ae:02:a8:d8:7a:e3:a7:d6:aa:4b:01:54:db:d5:
97:00:01:ba:bf:3f:78:2b:10:94:70:aa:fb:c3:50:e6:40:5b:
3d:41:09:6d:38:11:55:db:cc:fa:63:98:24:28:69:1c:79:04:
89:55:a6:57:d3:73:cd:d7:99:60:6d:d3:a6:a1:cb:89:db:52:
e7:2e:0b:8f:2a:36:1e:65:b3:d4:50:03:55:b7:59:65:f5:95:
7b:69:17:ef:cf:5a:ad:9f:23:79:84:c0:72:26:0e:a1:52:44:
0f:1b:46:05:32:a4:ae:6b:83:c7:a8:aa:ea:26:f8:2a:72:6b:
8e:a5:fb:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+Fo4FW8GFjnZJPxMTrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx
NjEwMzEwHhcNMjYwMzI1MjIwMDU4WhcNMjYwMzI2MjIwMDU4WjAzMTEwLwYDVQQD
EygxOTFiMWRkZjI1ZWM1YTU5NDM2NDE0OTI2MTk3NjVmNDMxMmVhOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00wLa9xo9RrFAZQawXhKImcR1dqU
3bcN16HtfgjFac8BSnklLQOJvrFEX0C5K54Pxs62yPsToJ6I+B8nIQTRIKPKqO7h
fn9aJshttR9BCx8a+foGPpCX/jbZYBA68aDvpSO0euq9fR1t6NQWNs3mkEwzinnj
h0i8rZxbnApShFxZj0NvxZ9j+YKSw/sJF/+R+ji6Cxh8kKexmwc/X31fvI3rZ5Bj
l1lC8fmJpmnlnNeebQQc/a3ISSmpo2Rfo6erVuATA2PBvLPG9RGTKjMnifjzD1yO
flXTgy+4bdDH1AF794FDCpRcxGNa/rOcqi+cMWpJ2+NnNe/6R3ndEFBEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkbHd8l7FpZQ2QUkmGXZfQxLqkOMB8GA1UdIwQY
MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt
OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh
LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKXF1kRB
9AAz5TEzkTclrqzLkmNxxSQ9cpgtkb7AnH2IsMBrUfih6h+2p4FRTy/Z3gvfCy7V
cj7unJRAOnvPKgJ38bKRrZpgyXGb00oV7ApZ0/nng2XF2ZfOK/6v2Klc8fuQ3xG1
vp1A9I1Ln0HpZZJxmX3ft+h4d5HXUqIJHwJQTK4CqNh646fWqksBVNvVlwABur8/
eCsQlHCq+8NQ5kBbPUEJbTgRVdvM+mOYJChpHHkEiVWmV9NzzdeZYG3TpqHLidtS
5y4Ljyo2HmWz1FADVbdZZfWVe2kX789arZ8jeYTAciYOoVJEDxtGBTKkrmuDx6iq
6ib4KnJrjqX7Yw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:56 2026 by rpki-client