Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: qcn0RIxWegT0l063jmXnPWbKLVGF5J1T5+HDNpIqlHk=
Subject key identifier: C1:7B:61:97:37:77:79:8A:7E:82:67:90:AB:EA:8E:C0:B9:01:80:6D
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 01A0CB22442CF2806C3849ADE631AD35EBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 22:00:15 +0000
Manifest this update: Tue 22 Sep 2026 22:00:15 +0000
Manifest next update: Wed 23 Sep 2026 22:00:15 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: G6mIqtWYs5VU29506MPVBQUfo2ulb5jall3enUWMQEk=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:44:2c:f2:80:6c:38:49:ad:e6:31:ad:35:eb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Sep 22 22:00:15 2026 GMT
Not After : Sep 23 22:00:15 2026 GMT
Subject: CN=c17b61973777798a7e826790abea8ec0b901806d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:77:fd:e6:5b:3b:ca:49:d1:a2:74:ff:65:
d6:fe:e8:1d:82:d5:b4:7b:7a:a4:af:78:3f:24:3c:
3e:26:72:2f:70:54:8e:73:90:c0:a8:6e:8e:b8:85:
e0:67:51:19:f2:c5:cd:6e:64:25:85:e6:f2:e8:60:
bd:3e:b2:c3:53:d3:6c:c4:38:bb:17:ad:a3:19:be:
7e:cd:c8:9e:8c:68:0c:ec:04:a6:4a:8a:24:58:2b:
b6:2f:f7:91:b8:6c:41:60:71:13:1e:c1:28:da:36:
2f:d2:92:90:71:04:77:a3:86:fb:ab:41:f2:6a:ba:
09:19:c9:c3:18:50:38:45:1a:67:5a:fb:96:3b:1d:
cb:2d:54:7d:d8:05:ee:b3:d8:3b:16:95:52:ff:66:
5a:4e:3e:57:0b:9c:4f:cc:ec:53:f0:ca:b1:9b:d2:
3d:6f:7c:c4:88:24:d7:e1:81:58:b7:30:bc:ca:55:
85:a3:94:3d:e5:8a:37:73:19:c3:0e:90:f0:88:2e:
ab:7c:ce:37:11:52:96:18:6b:b3:5b:cc:ff:48:9f:
67:77:51:21:00:00:c0:b5:bc:83:ec:13:22:6d:68:
63:e2:5f:17:a0:ac:d3:10:e4:4d:8c:d3:7c:d1:09:
5c:5b:fa:df:6b:69:cb:26:c3:2a:ad:17:1c:f2:84:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:61:97:37:77:79:8A:7E:82:67:90:AB:EA:8E:C0:B9:01:80:6D
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3c:34:29:af:f8:1d:72:10:e5:27:6f:23:1d:a2:90:ec:29:
d0:16:e3:61:1a:e3:1f:8d:ab:3e:41:b3:55:a8:1a:f9:cf:89:
33:ff:32:d1:b9:b8:1c:f2:65:6b:7b:cd:d6:dc:a2:43:5d:88:
09:17:b9:3e:8b:a1:6f:43:a4:af:4f:47:64:02:b9:5d:81:ef:
5d:3e:18:a2:bf:2b:8e:77:8b:b1:85:ec:76:90:bd:d2:cd:fe:
b8:90:4c:7f:a6:b5:f7:7c:28:bb:3b:9d:7e:fe:27:4f:ca:13:
08:a4:b2:b6:e3:0f:a9:7e:15:c3:98:85:14:f8:30:f9:10:f9:
9c:bb:8b:d3:79:02:28:78:65:a6:8d:49:6c:92:37:3f:f6:a3:
c9:1a:f4:3a:50:cf:65:d4:3f:6c:74:46:f4:ae:31:69:d1:c8:
0b:4b:ee:5a:f9:fc:4b:07:2c:25:d0:7c:79:41:9f:9c:3d:16:
ae:35:ad:46:8c:1f:2f:9b:f3:cd:f5:6d:d4:26:a3:c4:f4:50:
1e:35:6d:e0:4c:ee:4f:74:fc:13:b9:f3:b6:17:11:55:76:2b:
52:43:94:02:ef:fc:e8:f1:63:bb:0b:4d:9d:85:ee:17:42:86:
65:32:b8:5e:42:2e:4a:93:d5:5a:ca:b0:38:03:3e:3f:00:24:
fd:cc:26:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIkQs8oBsOEmt5jGtNeuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5
MGVjZjQwHhcNMjYwOTIyMjIwMDE1WhcNMjYwOTIzMjIwMDE1WjAzMTEwLwYDVQQD
EyhjMTdiNjE5NzM3Nzc3OThhN2U4MjY3OTBhYmVhOGVjMGI5MDE4MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyat3/eZbO8pJ0aJ0/2XW/ugdgtW0
e3qkr3g/JDw+JnIvcFSOc5DAqG6OuIXgZ1EZ8sXNbmQlheby6GC9PrLDU9NsxDi7
F62jGb5+zciejGgM7ASmSookWCu2L/eRuGxBYHETHsEo2jYv0pKQcQR3o4b7q0Hy
aroJGcnDGFA4RRpnWvuWOx3LLVR92AXus9g7FpVS/2ZaTj5XC5xPzOxT8Mqxm9I9
b3zEiCTX4YFYtzC8ylWFo5Q95Yo3cxnDDpDwiC6rfM43EVKWGGuzW8z/SJ9nd1Eh
AADAtbyD7BMibWhj4l8XoKzTEORNjNN80QlcW/rfa2nLJsMqrRcc8oQZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF7YZc3d3mKfoJnkKvqjsC5AYBtMB8GA1UdIwQY
MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt
YzZkYzU4MTM3ZDA3LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3
LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTw0Ka/4
HXIQ5SdvIx2ikOwp0BbjYRrjH42rPkGzVaga+c+JM/8y0bm4HPJla3vN1tyiQ12I
CRe5Pouhb0Okr09HZAK5XYHvXT4Yor8rjneLsYXsdpC90s3+uJBMf6a193wouzud
fv4nT8oTCKSytuMPqX4Vw5iFFPgw+RD5nLuL03kCKHhlpo1JbJI3P/ajyRr0OlDP
ZdQ/bHRG9K4xadHIC0vuWvn8SwcsJdB8eUGfnD0WrjWtRowfL5vzzfVt1CajxPRQ
HjVt4EzuT3T8E7nzthcRVXYrUkOUAu/86PFjuwtNnYXuF0KGZTK4XkIuSpPVWsqw
OAM+PwAk/cwmHA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:34:07 2026 by rpki-client