Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: Rjda8jOK8LCGhiJYbh70Dg9ae+C4/OXM16R9uupVdjY=
Subject key identifier: F4:32:28:09:CB:D0:9E:DC:D4:C5:9E:1B:50:B4:1E:69:35:5C:AB:B5
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 019D39413E903F1CF630DF4746DF8125899C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 048E
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: OTj5VMGCK0SdiLqPlTXXyjinOM+zBpBfTY0LMZ6VZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3e:90:3f:1c:f6:30:df:47:46:df:81:25:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=f4322809cbd09edcd4c59e1b50b41e69355cabb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:bc:8f:56:8e:a9:fc:70:92:20:2c:7a:13:
d9:13:c9:28:08:31:45:3c:3e:f9:c9:2a:80:6e:da:
4a:61:f0:2e:75:dc:5a:48:5f:43:82:5c:f9:23:2e:
57:4b:4b:a8:7d:9e:c5:3c:4e:3f:6c:8d:68:1e:9f:
9d:bd:e7:e7:06:de:e2:1e:d8:97:59:b0:28:0f:8f:
7a:98:68:c6:cb:9c:74:36:93:a8:20:a7:d9:7a:4c:
4f:ad:6b:cb:f5:6e:30:1d:fd:e8:55:ec:8d:a1:fd:
d3:9e:46:bc:81:e5:4f:6d:70:c0:6a:04:f8:2c:e1:
73:6c:2d:97:4c:84:38:d8:a7:23:69:dd:56:0f:02:
c2:ee:12:ec:13:ab:6a:63:6e:5e:6c:d2:12:4a:8c:
c8:d9:46:7e:a1:2f:94:c4:52:3f:bd:e7:34:c6:3c:
7a:17:f6:a0:0c:00:a8:d4:47:df:5f:0f:07:ac:4a:
67:ce:eb:06:f3:84:5c:4b:71:eb:d4:44:27:ad:1d:
87:72:d1:29:59:74:66:47:b6:bc:c9:7d:4a:72:e8:
a9:87:fb:ee:d5:b0:0d:31:74:ba:95:d3:da:15:ab:
f8:0d:a8:fc:a4:2b:f2:40:35:09:72:85:f8:bc:14:
6c:f2:5c:9b:27:04:1b:e4:3a:02:c0:49:41:26:d4:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:28:09:CB:D0:9E:DC:D4:C5:9E:1B:50:B4:1E:69:35:5C:AB:B5
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:06:8f:3c:fe:ed:02:58:af:58:1f:17:00:af:33:02:8c:
1c:e3:9a:89:cd:e0:a3:13:5e:c7:ea:d1:18:9b:ba:ef:cb:5e:
9c:06:4e:87:96:69:ba:86:21:14:21:14:d1:63:fd:fa:d3:3b:
1a:78:b6:e1:a6:7b:2e:60:8c:74:0b:f4:bf:7b:18:a4:3e:44:
b0:33:ed:78:33:0a:07:53:92:40:d6:de:06:bc:84:ee:5b:4a:
97:12:d8:31:88:2f:48:98:e4:b9:0c:07:bd:9f:c8:4a:14:f4:
35:1a:f3:c3:5e:85:7e:f5:75:2c:9e:e9:e2:1c:cc:f6:c9:54:
83:44:f8:a5:87:58:00:a2:76:94:18:be:e6:bf:c0:1e:3f:97:
b0:08:1d:2a:36:c5:eb:e2:65:8c:2d:e5:7a:db:ec:1b:2d:68:
59:e3:08:10:44:cc:f2:e8:0a:c6:7a:0b:de:3c:81:08:91:a2:
c9:e9:39:3c:eb:8d:18:d6:ec:fe:1c:bc:dc:43:8a:de:9f:a3:
4b:27:4d:8c:b1:b4:3e:58:d2:7e:f1:a9:45:54:c8:92:f6:d4:
3b:ba:2c:1e:87:f5:a7:d1:fa:dd:0f:49:4c:3e:35:d9:ec:a4:
1e:fb:f0:31:1f:7e:f7:bf:0d:49:73:bb:45:46:dc:bd:63:1e:
34:0f:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:22 2026 by rpki-client