Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
File: bckzC9OJcGPbv9IOXru-UcDV0VM.mft (raw, json)
Hash identifier: YQXVjokbNRRHG/lety57hQmuVXJ24JUQFVWsGo6gjKY=
Subject key identifier: 53:2E:2D:CB:A2:3D:FE:AA:D0:27:30:8F:2A:55:46:9E:19:76:0F:E4
Authority key identifier: 6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
Certificate issuer: /CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Certificate serial: 019FA0A91C59C566E6936206B146E97EAF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
Manifest number: 81
Signing time: Sun 26 Jul 2026 23:01:05 +0000
Manifest this update: Sun 26 Jul 2026 23:01:05 +0000
Manifest next update: Mon 27 Jul 2026 23:01:05 +0000
Files and hashes: 1: bOqTY_nDXoESSF_447Tk5tX5AOI.roa (hash: sQ1q20oUgDBcHDCGZ4CXZ3dUrLutFstvaNLWfTrNEsw=)
2: bckzC9OJcGPbv9IOXru-UcDV0VM.crl (hash: f6dpc3yarf8WyBWbJzHTqNFuDzQ+5STB8eS3wm0cKZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:1c:59:c5:66:e6:93:62:06:b1:46:e9:7e:af:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Validity
Not Before: Jul 26 23:01:05 2026 GMT
Not After : Jul 27 23:01:05 2026 GMT
Subject: CN=532e2dcba23dfeaad027308f2a55469e19760fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:e4:9c:60:61:e5:41:7b:5a:44:17:74:90:
f2:b3:8c:c9:40:76:d2:b0:d7:60:b3:c9:c4:fd:b0:
41:3a:dc:cb:9f:a2:93:2b:9d:a0:02:6e:48:7f:13:
7a:23:bc:a9:5d:1d:d5:a4:80:82:f8:2c:1b:fd:c3:
51:d0:6e:25:c1:c8:cc:16:cd:fc:ed:5a:a9:d6:e4:
5d:6a:1d:ca:27:21:ab:27:5b:ee:4b:ef:4b:56:b1:
28:05:c0:da:ed:eb:ae:b2:42:46:55:6e:ee:93:f7:
14:7f:35:a0:85:0f:c4:32:76:a9:a9:0f:86:87:5d:
46:dd:a6:f4:0c:c8:90:d4:96:0b:cd:ee:31:08:56:
68:60:d8:77:9c:fd:ad:42:59:6f:2f:cc:f2:e1:c8:
f7:7d:40:05:81:d3:36:d6:f3:2e:9f:47:a0:a3:d7:
a2:08:d7:8c:1b:9c:a1:fe:ee:88:70:6c:f7:30:a9:
59:14:14:cf:9c:93:72:0f:28:6e:72:b6:c4:25:a1:
27:a9:a9:e6:82:a2:93:e8:d0:ed:f8:12:aa:b6:44:
a4:fa:a6:d8:f9:09:52:80:b3:6a:a3:24:15:64:bc:
c0:d6:a4:0a:c3:91:cb:9f:28:b0:fc:79:5e:19:f0:
46:8c:51:be:a3:77:05:16:34:d9:96:cb:e4:46:51:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:2D:CB:A2:3D:FE:AA:D0:27:30:8F:2A:55:46:9E:19:76:0F:E4
X509v3 Authority Key Identifier:
keyid:6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0b:48:46:a8:81:c0:ab:f4:db:05:f4:41:f2:33:f5:c7:85:
fb:53:22:b2:05:38:48:84:b1:ee:8c:ca:2e:db:3e:d5:73:e1:
0a:76:5e:26:0c:01:05:93:d7:50:81:48:e0:46:83:18:58:3c:
de:be:9f:d1:cf:82:dc:68:f0:ae:cd:f6:90:da:ee:a4:46:ab:
7a:51:5d:39:2e:68:9b:17:fa:58:f5:6b:11:4d:d2:52:ab:d7:
10:74:3f:c4:ad:77:ba:85:a8:72:71:4b:87:76:59:83:69:42:
15:79:d0:8b:12:2a:63:ef:15:e7:0c:c5:7a:59:64:fd:6a:d3:
0d:a0:ca:99:4d:65:68:34:12:f4:98:18:83:a1:46:16:81:dc:
c7:9a:dd:b1:fb:b2:e0:34:d5:99:2f:9f:c5:2d:02:6b:cf:6f:
b4:5a:75:d8:8a:ba:d9:cf:8f:eb:d9:3e:45:02:be:ae:f3:92:
af:0c:d4:7a:9a:b8:15:da:ab:23:3a:59:8f:0d:2c:7d:3b:ea:
fa:2f:db:04:69:1b:d3:69:b6:87:5f:e9:66:26:dc:59:57:a5:
c9:f9:5b:52:6e:55:40:d8:ca:fe:10:06:b7:f4:0d:e7:c1:b8:
2c:23:aa:d3:00:dc:cc:83:2c:5e:16:e0:51:34:d4:0b:65:3b:
cd:2d:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:07 2026 by rpki-client