Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: jeYFA9tN2LgpKvMbIkHE6A2U79LP0HmjE9HOPHrS9fk=
Subject key identifier: A2:19:B9:6B:49:0C:E9:C7:87:95:71:5A:F5:D3:81:CF:0E:07:69:18
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 019D770E4DD9CE937B6B9504D7260D88A8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 04AE
Signing time: Fri 10 Apr 2026 11:01:59 +0000
Manifest this update: Fri 10 Apr 2026 11:01:59 +0000
Manifest next update: Sat 11 Apr 2026 11:01:59 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: VKvLGA3wqmhi2I9WKOJ86Ibg8rASaVrDZMriR4bMfDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:0e:4d:d9:ce:93:7b:6b:95:04:d7:26:0d:88:a8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Apr 10 11:01:59 2026 GMT
Not After : Apr 11 11:01:59 2026 GMT
Subject: CN=a219b96b490ce9c78795715af5d381cf0e076918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:0b:7b:ff:d7:92:78:86:53:92:a2:b2:bd:
21:20:94:a8:d0:62:5c:be:8d:d9:ec:a0:5b:4b:35:
83:d7:64:11:55:c2:61:21:0d:78:71:47:53:a8:83:
8d:b7:d3:ae:90:09:bc:12:5a:d3:e5:52:1c:79:a7:
19:69:c5:96:bf:b3:78:d6:5c:6e:22:c8:7d:fe:7b:
54:70:b1:2c:c5:c6:c8:83:97:cc:da:90:c2:06:b2:
c0:b6:c2:3c:dd:37:94:5f:92:fc:22:ff:b4:83:b1:
8c:6c:c1:75:6d:b9:be:bb:3c:8b:71:bc:df:43:84:
33:35:08:d9:0b:11:9c:c2:6a:85:cf:59:a3:58:ba:
41:39:86:4f:9f:cd:6e:37:b4:00:e6:0d:f9:e0:d3:
20:f6:27:6a:60:85:1e:6d:aa:0f:be:31:6c:b6:d3:
68:e6:c1:85:5b:d6:28:20:c7:1e:80:d0:b6:43:1d:
23:44:e0:ed:d2:3a:8e:01:52:94:0f:27:40:7b:a6:
10:8d:63:88:94:52:3c:11:25:1e:d0:eb:a6:1f:18:
b1:42:74:ab:76:64:56:88:72:33:4f:4a:97:03:29:
68:94:37:e4:6d:b4:c4:8f:ee:7a:00:b7:f5:a9:71:
4f:a6:b4:b9:f9:ee:d7:3d:6b:88:46:6b:47:4c:bd:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:B9:6B:49:0C:E9:C7:87:95:71:5A:F5:D3:81:CF:0E:07:69:18
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:50:9c:20:76:68:01:4a:77:eb:bd:16:aa:e3:a1:42:88:7b:
06:98:14:d1:4b:d8:06:3b:60:f9:c6:98:c0:1f:4b:30:d7:15:
07:13:7c:37:fd:d6:0d:a5:93:ab:44:ac:f9:80:cf:80:b6:3a:
5f:89:bc:e4:04:63:b3:f3:b0:30:4c:28:e2:83:89:b7:01:cb:
10:46:91:ba:00:88:1e:9f:28:7e:4a:1b:8e:d2:2f:fa:8c:75:
ca:27:4a:2e:bb:c1:9f:f7:fa:46:28:50:c1:eb:05:32:47:12:
a7:54:c5:0b:89:00:98:97:73:f3:64:72:16:a0:79:9c:fc:78:
0e:37:b5:fa:48:0a:14:1b:10:c6:bf:a2:0f:1e:0c:71:b8:21:
42:af:b8:e2:0c:ff:34:bc:02:cd:79:4d:df:3a:c4:2d:0a:4c:
d8:2a:2f:78:0d:13:8b:ed:aa:aa:f0:9b:17:4c:7b:fa:93:58:
6b:19:5e:e4:46:92:bb:58:b2:01:01:69:36:cf:5e:82:c5:9c:
fe:21:77:1a:91:c0:6b:b8:8e:00:22:17:98:02:29:24:83:12:
16:95:44:f9:a4:93:11:73:ac:a2:bf:eb:61:a4:0b:65:e4:e5:
eb:d8:68:14:51:8b:59:08:d3:40:46:07:cc:e0:39:c3:53:9c:
7d:21:f6:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ13Dk3ZzpN7a5UE1yYNiKjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDJjZWQzNTJmMDFmN2ViNWRjNzYxOWVkNzE0YzZiNmE1
Yzc5MWUwHhcNMjYwNDEwMTEwMTU5WhcNMjYwNDExMTEwMTU5WjAzMTEwLwYDVQQD
EyhhMjE5Yjk2YjQ5MGNlOWM3ODc5NTcxNWFmNWQzODFjZjBlMDc2OTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKMLe//XkniGU5Kisr0hIJSo0GJc
vo3Z7KBbSzWD12QRVcJhIQ14cUdTqIONt9OukAm8ElrT5VIceacZacWWv7N41lxu
Ish9/ntUcLEsxcbIg5fM2pDCBrLAtsI83TeUX5L8Iv+0g7GMbMF1bbm+uzyLcbzf
Q4QzNQjZCxGcwmqFz1mjWLpBOYZPn81uN7QA5g354NMg9idqYIUebaoPvjFsttNo
5sGFW9YoIMcegNC2Qx0jRODt0jqOAVKUDydAe6YQjWOIlFI8ESUe0OumHxixQnSr
dmRWiHIzT0qXAylolDfkbbTEj+56ALf1qXFPprS5+e7XPWuIRmtHTL09qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIZuWtJDOnHh5VxWvXTgc8OB2kYMB8GA1UdIwQY
MBaAFG3SztNS8B9+tdx2Ge1xTGtqXHkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEt
OWRmNzI1MzBiNjY5LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEtOWRmNzI1MzBiNjY5
LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFCcIHZo
AUp3670WquOhQoh7BpgU0UvYBjtg+caYwB9LMNcVBxN8N/3WDaWTq0Ss+YDPgLY6
X4m85ARjs/OwMEwo4oOJtwHLEEaRugCIHp8ofkobjtIv+ox1yidKLrvBn/f6RihQ
wesFMkcSp1TFC4kAmJdz82RyFqB5nPx4Dje1+kgKFBsQxr+iDx4McbghQq+44gz/
NLwCzXlN3zrELQpM2CoveA0Ti+2qqvCbF0x7+pNYaxle5EaSu1iyAQFpNs9egsWc
/iF3GpHAa7iOACIXmAIpJIMSFpVE+aSTEXOsor/rYaQLZeTl69hoFFGLWQjTQEYH
zOA5w1OcfSH2fw==
-----END CERTIFICATE-----
Generated at Fri Apr 10 15:28:32 2026 by rpki-client