Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: hnY7hXcl/CRIYG1HivyU66wkz2aIKbXaOsWsOF2frqs=
Subject key identifier: 49:0D:7D:B3:2A:7E:3F:C9:3F:A5:A4:CB:52:9F:B3:FC:98:63:6E:2C
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 019E2024152F168A6865F973AADF0A5AD243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 07:01:36 +0000
Manifest this update: Wed 13 May 2026 07:01:36 +0000
Manifest next update: Thu 14 May 2026 07:01:36 +0000
Files and hashes: 1: _HzxSZR90lf9BYmEm2VupOU1Vas.roa (hash: Ugm9+I27Dta4vBt0cYoky3PGDm0q/WYMbNn8zxEdBlA=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: LoprvOfpCXbUopAmN1DMVjLUjsLMQs2IXkIa+41H2iE=)
3: wgHQmaQij3F-nK5W4X8CVxaOPm0.roa (hash: sBWiBVt4sHrg4hhwrk19Ek9irYUlBrf3WzJ8I2XR+Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:15:2f:16:8a:68:65:f9:73:aa:df:0a:5a:d2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: May 13 07:01:36 2026 GMT
Not After : May 14 07:01:36 2026 GMT
Subject: CN=490d7db32a7e3fc93fa5a4cb529fb3fc98636e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:ed:99:29:49:ae:60:09:27:20:f2:67:16:
d5:c1:ee:48:c1:aa:ee:67:90:be:93:24:ed:3b:d0:
4e:61:80:f2:8d:94:f9:4a:b3:fd:a9:1d:1a:40:0c:
6d:34:9c:61:cb:e5:50:dd:14:3d:de:b5:20:7e:64:
5d:61:86:26:37:3b:e3:26:b4:d3:49:76:f1:4d:a8:
06:99:eb:55:bd:0c:15:af:fc:d0:bf:e0:aa:5b:25:
bf:ea:ff:f0:9e:85:0d:b1:21:34:8d:e3:81:16:bc:
cb:82:1a:d9:03:36:18:22:65:cc:96:97:5e:3d:bb:
17:f2:d4:73:a7:1a:a6:ca:ee:41:99:3e:56:dc:45:
62:70:22:3a:ac:e2:39:01:be:37:59:7f:46:9e:87:
97:e3:40:5d:0a:99:0c:3a:61:ee:81:e3:88:0b:62:
e8:55:40:88:4d:b5:6c:fd:fa:95:d2:f1:15:08:3f:
c7:0d:23:08:e3:46:8b:50:10:d2:a0:3f:7d:5d:f2:
b7:e8:c6:b2:40:fd:66:dd:9e:ab:64:a1:11:27:ad:
01:08:27:ac:a0:dc:a0:bc:83:c3:b7:3e:98:d6:22:
12:95:82:bc:49:bc:b3:15:d8:7a:c2:1b:3f:07:25:
d3:73:d5:58:20:19:38:64:c2:05:a4:a1:ef:9c:c7:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:7D:B3:2A:7E:3F:C9:3F:A5:A4:CB:52:9F:B3:FC:98:63:6E:2C
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:c5:14:7a:11:ed:00:c9:46:ce:06:37:63:4b:57:2e:be:
b7:c7:62:31:0c:1b:05:68:b0:58:60:62:78:5a:e4:92:d6:5b:
22:15:bf:65:4d:b9:09:c3:3d:49:75:e8:0b:37:45:97:73:6c:
10:42:c6:a7:a1:7f:c5:ec:26:ce:43:26:0f:bb:47:9a:55:fe:
9a:85:b4:b5:1d:ee:7a:06:4b:72:b8:1f:d3:b4:90:dc:29:5f:
b3:cb:71:d1:08:e3:65:c8:64:0c:be:dc:ab:f2:b0:eb:77:16:
ed:46:56:7c:2f:4a:b5:92:95:4b:0f:60:a9:b1:36:c9:d3:a6:
c2:41:62:62:8a:4f:7a:e2:13:d1:7b:13:3f:0f:67:0a:67:35:
65:f9:a4:4e:8f:77:48:5d:83:cd:f6:85:be:47:0b:f3:01:1e:
d3:30:6f:37:1f:92:76:c2:25:c8:a8:22:14:bc:53:a6:5f:57:
50:4b:f3:46:5d:21:31:26:5b:e9:29:d6:5c:14:cb:63:16:23:
c4:e2:f4:e3:69:94:d0:02:50:ac:97:cb:a3:39:e7:d9:95:af:
b7:83:70:b6:a9:4c:a0:34:65:52:4e:4c:be:96:b1:2e:56:94:
87:4c:46:1c:58:96:51:03:33:15:c4:7a:aa:c8:c9:c7:4e:d5:
cc:52:06:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJBUvFopoZflzqt8KWtJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx
NjEwMzEwHhcNMjYwNTEzMDcwMTM2WhcNMjYwNTE0MDcwMTM2WjAzMTEwLwYDVQQD
Eyg0OTBkN2RiMzJhN2UzZmM5M2ZhNWE0Y2I1MjlmYjNmYzk4NjM2ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/3tmSlJrmAJJyDyZxbVwe5Iwaru
Z5C+kyTtO9BOYYDyjZT5SrP9qR0aQAxtNJxhy+VQ3RQ93rUgfmRdYYYmNzvjJrTT
SXbxTagGmetVvQwVr/zQv+CqWyW/6v/wnoUNsSE0jeOBFrzLghrZAzYYImXMlpde
PbsX8tRzpxqmyu5BmT5W3EVicCI6rOI5Ab43WX9GnoeX40BdCpkMOmHugeOIC2Lo
VUCITbVs/fqV0vEVCD/HDSMI40aLUBDSoD99XfK36MayQP1m3Z6rZKERJ60BCCes
oNygvIPDtz6Y1iISlYK8SbyzFdh6whs/ByXTc9VYIBk4ZMIFpKHvnMehhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkNfbMqfj/JP6Wky1Kfs/yYY24sMB8GA1UdIwQY
MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt
OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh
LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVS7FFHoR
7QDJRs4GN2NLVy6+t8diMQwbBWiwWGBieFrkktZbIhW/ZU25CcM9SXXoCzdFl3Ns
EELGp6F/xewmzkMmD7tHmlX+moW0tR3uegZLcrgf07SQ3Clfs8tx0QjjZchkDL7c
q/Kw63cW7UZWfC9KtZKVSw9gqbE2ydOmwkFiYopPeuIT0XsTPw9nCmc1ZfmkTo93
SF2DzfaFvkcL8wEe0zBvNx+SdsIlyKgiFLxTpl9XUEvzRl0hMSZb6SnWXBTLYxYj
xOL042mU0AJQrJfLoznn2ZWvt4NwtqlMoDRlUk5MvpaxLlaUh0xGHFiWUQMzFcR6
qsjJx07VzFIGwQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:01:23 2026 by rpki-client