Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
File: bckzC9OJcGPbv9IOXru-UcDV0VM.mft (raw, json)
Hash identifier: OdRbQJmGjCOjiUwEAhy2qF+6WIpxJr4bQH9FA0em1eY=
Subject key identifier: E6:DB:3C:83:65:1F:AA:DF:D7:32:AF:4B:E5:16:1D:C2:5A:8B:22:DD
Authority key identifier: 6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
Certificate issuer: /CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Certificate serial: 01A17DAA5C06E908132713B17FA45FAB2A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
Manifest number: 0178
Signing time: Tue 27 Oct 2026 14:01:18 +0000
Manifest this update: Tue 27 Oct 2026 14:01:18 +0000
Manifest next update: Wed 28 Oct 2026 14:01:18 +0000
Files and hashes: 1: bOqTY_nDXoESSF_447Tk5tX5AOI.roa (hash: sQ1q20oUgDBcHDCGZ4CXZ3dUrLutFstvaNLWfTrNEsw=)
2: bckzC9OJcGPbv9IOXru-UcDV0VM.crl (hash: M8IuUAspRxjZ+/7Q4O+WkrbsVU0y+vzFMDQF1Mrw9YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:5c:06:e9:08:13:27:13:b1:7f:a4:5f:ab:2a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Validity
Not Before: Oct 27 14:01:18 2026 GMT
Not After : Oct 28 14:01:18 2026 GMT
Subject: CN=e6db3c83651faadfd732af4be5161dc25a8b22dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:91:04:a4:da:30:9d:45:8c:31:48:19:c0:
25:1e:eb:bf:a1:7c:43:ac:7e:f6:a3:a8:3d:df:91:
4d:b0:a8:2e:a1:20:db:7d:44:be:07:4b:ac:36:e8:
48:7e:dc:6c:90:98:90:55:9e:08:e7:6b:80:2d:36:
9b:1e:4f:b5:47:e5:9f:d7:6e:a5:6b:b3:ef:b0:03:
9a:c6:91:c4:97:d1:78:81:f5:d2:b4:43:2c:5e:01:
42:5f:56:96:b4:e1:5e:42:53:50:71:49:39:d4:60:
31:d3:2a:7f:65:22:30:dc:2a:d5:a7:ca:d9:40:26:
49:bf:26:39:2d:7a:fc:bf:61:30:0d:22:01:a9:c3:
9d:d9:13:50:2d:20:2a:6d:dc:ae:33:5d:63:7d:bd:
2e:50:1c:42:f6:d2:59:4a:eb:d0:a9:cd:20:cd:18:
46:a5:38:cb:40:a3:15:03:47:e4:51:ab:ad:1f:97:
ee:1f:96:4a:47:bd:a1:b4:71:a3:b7:a6:1e:dd:e8:
6e:66:38:0b:6c:4d:d6:50:06:97:66:c2:1f:dc:01:
b7:5e:95:77:31:ed:a1:bd:f1:d1:6b:e6:3b:9e:f6:
19:19:7b:b0:77:0b:e4:4c:22:1f:c4:c6:92:ce:d6:
b3:0a:6a:24:e4:47:f9:10:ab:cd:3e:90:90:37:a1:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:3C:83:65:1F:AA:DF:D7:32:AF:4B:E5:16:1D:C2:5A:8B:22:DD
X509v3 Authority Key Identifier:
keyid:6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ea:f5:e1:6c:7c:3e:94:e5:37:f8:a5:a6:d3:6d:cb:3a:3d:
23:ef:d4:95:9e:70:f4:ff:c8:bf:57:bb:a5:3f:7c:36:54:3a:
b3:bd:3c:da:71:34:f7:a7:52:76:93:b4:90:67:a3:0d:3d:b5:
7e:63:02:c2:88:83:92:8c:25:95:7f:89:3f:b7:e1:47:6c:1f:
9e:fa:01:64:0a:41:a2:13:4c:d6:72:5e:a7:7f:7a:84:66:4b:
ee:70:f1:16:76:8b:7a:2e:70:72:cb:68:3f:50:0a:7d:ea:56:
08:d9:d9:61:86:91:77:cb:8d:28:21:07:24:81:85:5c:db:74:
b3:6b:76:f2:36:de:cc:ce:ea:ad:14:66:32:6d:f7:0b:3f:eb:
8c:b1:82:6e:7b:35:5f:17:10:00:38:63:f4:f5:03:91:e3:e2:
ef:28:9e:a3:f1:a2:a7:04:0e:0e:34:ac:84:b1:b2:1f:df:52:
c9:5d:d6:e8:e6:0d:17:16:86:08:2b:d7:5e:bf:4e:d9:1b:af:
f6:1b:9d:f4:5e:e8:98:e0:60:e5:6f:52:6c:b1:89:05:11:ef:
21:30:d0:cf:ec:ec:ab:23:99:87:94:98:61:73:99:56:86:ad:
b5:2d:cd:43:28:cf:36:af:7a:2d:42:6b:ff:10:cb:38:75:da:
aa:33:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:03 2026 by rpki-client