Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: xJQ637ZQz5B9GNo6Fe4OLseMoHAX4JQRvk83m48Mv4A=
Subject key identifier: BA:A2:02:8D:93:44:EF:2C:44:43:7F:0B:C9:3E:33:38:4E:CD:35:A8
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 019F1265BE9074710A9E22EEAB4B163FFA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 0583
Signing time: Mon 29 Jun 2026 08:01:25 +0000
Manifest this update: Mon 29 Jun 2026 08:01:25 +0000
Manifest next update: Tue 30 Jun 2026 08:01:25 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: JWrEAegDOIsHDGr2U+R9HC67w167k/Fa5sdLJkkgzJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:be:90:74:71:0a:9e:22:ee:ab:4b:16:3f:fa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Jun 29 08:01:25 2026 GMT
Not After : Jun 30 08:01:25 2026 GMT
Subject: CN=baa2028d9344ef2c44437f0bc93e33384ecd35a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:81:58:62:ae:b7:c3:fc:b6:69:dc:ae:7f:
aa:d8:f6:ba:6c:a8:8c:ab:f1:dd:83:54:1a:6b:57:
07:42:25:9d:6c:68:ae:31:fe:60:96:ae:b3:dd:d5:
49:1d:97:29:45:06:8d:25:5d:5c:cd:85:b2:b5:7a:
73:a5:9e:3b:96:fc:57:86:50:aa:fd:62:5d:ed:99:
d9:98:df:9d:82:65:0e:73:35:88:54:f8:04:23:29:
1d:1d:55:20:14:c4:f9:3f:47:4f:29:f6:55:a9:ff:
2b:51:13:26:c6:d6:d8:a9:5b:a1:a3:cb:99:1e:67:
c8:37:68:06:c7:cd:70:1d:c5:ba:2e:23:45:b7:29:
8a:d1:33:1b:87:9f:5a:be:83:1d:53:1b:f6:b6:d1:
f0:d3:8b:9a:e0:11:da:33:83:1c:84:46:6a:e0:05:
0a:1b:c1:48:e6:f6:37:5e:6f:da:d6:fe:06:a4:33:
eb:96:5f:49:0d:c5:07:33:11:4d:eb:7c:ae:1b:3f:
c4:19:87:ed:3b:04:4b:9f:13:e6:a0:e5:1a:2a:8f:
66:df:7a:a0:c3:6a:44:60:72:28:77:48:f6:89:ca:
92:33:41:d2:36:db:9e:88:68:bc:4b:c9:18:dd:2e:
96:64:3d:0c:30:dd:2a:90:df:77:44:6e:dc:cd:96:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:02:8D:93:44:EF:2C:44:43:7F:0B:C9:3E:33:38:4E:CD:35:A8
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cd:fc:86:6c:43:c4:4d:17:aa:27:3b:67:a4:f7:9a:e8:b8:
2b:12:76:a9:e3:81:ca:ed:20:3e:de:07:46:b6:56:ab:e8:ba:
d8:ff:3a:6a:77:7f:99:48:77:05:40:7d:8a:6f:ac:c0:c9:18:
67:f2:c2:43:46:19:f6:df:20:9d:69:82:3b:4a:7d:d2:4f:0b:
f0:9f:8c:dc:02:b7:ef:da:5b:9b:dc:19:26:fc:6b:e1:5a:24:
bc:e7:ed:72:3d:95:43:eb:c2:f3:3e:e3:57:91:99:7d:8b:35:
f0:01:72:ce:a2:05:02:25:a4:61:82:d1:bc:94:d8:ae:49:05:
ee:ed:3c:2e:ac:82:71:68:a2:46:26:b5:9b:e0:92:e7:1f:d3:
37:5b:8a:f0:98:a1:02:07:7e:7d:f8:5c:37:a9:1d:32:0b:e7:
ed:1b:ef:69:3e:b3:01:d3:f4:bf:10:7e:65:95:e9:2f:97:0c:
1d:76:ac:50:ea:f3:f9:a2:64:f6:ac:f6:cc:43:27:96:14:61:
90:4b:0c:59:c9:21:c1:d2:64:14:b8:a8:aa:86:76:b5:73:f4:
cc:c5:55:7c:dc:72:5c:89:f6:ed:b9:21:b6:a3:8f:c0:ae:df:
f5:42:52:be:22:b0:01:b7:04:2d:bb:f8:55:66:72:77:1e:e9:
f2:3b:d9:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZb6QdHEKniLuq0sWP/oQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDJjZWQzNTJmMDFmN2ViNWRjNzYxOWVkNzE0YzZiNmE1
Yzc5MWUwHhcNMjYwNjI5MDgwMTI1WhcNMjYwNjMwMDgwMTI1WjAzMTEwLwYDVQQD
EyhiYWEyMDI4ZDkzNDRlZjJjNDQ0MzdmMGJjOTNlMzMzODRlY2QzNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKiBWGKut8P8tmncrn+q2Pa6bKiM
q/Hdg1Qaa1cHQiWdbGiuMf5glq6z3dVJHZcpRQaNJV1czYWytXpzpZ47lvxXhlCq
/WJd7ZnZmN+dgmUOczWIVPgEIykdHVUgFMT5P0dPKfZVqf8rURMmxtbYqVuho8uZ
HmfIN2gGx81wHcW6LiNFtymK0TMbh59avoMdUxv2ttHw04ua4BHaM4MchEZq4AUK
G8FI5vY3Xm/a1v4GpDPrll9JDcUHMxFN63yuGz/EGYftOwRLnxPmoOUaKo9m33qg
w2pEYHIod0j2icqSM0HSNtueiGi8S8kY3S6WZD0MMN0qkN93RG7czZYM4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqiAo2TRO8sREN/C8k+MzhOzTWoMB8GA1UdIwQY
MBaAFG3SztNS8B9+tdx2Ge1xTGtqXHkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEt
OWRmNzI1MzBiNjY5LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEtOWRmNzI1MzBiNjY5
LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK838hmxD
xE0Xqic7Z6T3mui4KxJ2qeOByu0gPt4HRrZWq+i62P86and/mUh3BUB9im+swMkY
Z/LCQ0YZ9t8gnWmCO0p90k8L8J+M3AK379pbm9wZJvxr4VokvOftcj2VQ+vC8z7j
V5GZfYs18AFyzqIFAiWkYYLRvJTYrkkF7u08LqyCcWiiRia1m+CS5x/TN1uK8Jih
Agd+ffhcN6kdMgvn7RvvaT6zAdP0vxB+ZZXpL5cMHXasUOrz+aJk9qz2zEMnlhRh
kEsMWckhwdJkFLioqoZ2tXP0zMVVfNxyXIn27bkhtqOPwK7f9UJSviKwAbcELbv4
VWZydx7p8jvZqg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:56 2026 by rpki-client