Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: Qtv8ryRiNeDg48CbQF7T66T6awpPz5WOm5c7ul0h71k=
Subject key identifier: 56:E5:CE:1D:60:E4:20:51:5F:10:05:26:38:F2:13:90:B1:EE:9D:53
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 01A039DEA08D83C0243890CBFF10F099C6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 061C
Signing time: Tue 25 Aug 2026 17:01:26 +0000
Manifest this update: Tue 25 Aug 2026 17:01:26 +0000
Manifest next update: Wed 26 Aug 2026 17:01:26 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: UZhE/a1Mlu4LRRrds+Wjhf1Vfs7Wf42ELi3FZ4ESxuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:de:a0:8d:83:c0:24:38:90:cb:ff:10:f0:99:c6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Aug 25 17:01:26 2026 GMT
Not After : Aug 26 17:01:26 2026 GMT
Subject: CN=56e5ce1d60e420515f10052638f21390b1ee9d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:03:58:e9:4b:8e:9b:61:0c:26:05:a0:3b:
2a:27:08:60:f1:09:6f:9c:4b:6f:55:7c:50:1d:10:
32:31:15:53:de:52:b9:8f:a0:1f:ad:9e:20:96:44:
4b:16:29:de:31:af:4f:b4:46:77:70:d4:65:5a:64:
a0:40:64:26:d2:57:df:6b:3a:cc:0f:8f:b5:9c:0e:
21:7f:d4:63:77:1f:71:9c:44:f1:7a:c8:9e:25:a6:
51:e2:76:9a:24:29:d2:2a:6b:1d:3c:c0:27:01:d8:
9d:fc:41:42:e0:0d:8d:80:1d:d3:2a:50:ed:05:7c:
36:8e:29:17:d6:16:66:67:d6:3a:0b:ef:5f:9b:bd:
15:7a:61:69:4c:f4:24:ae:b8:2e:8d:69:7a:5b:83:
d3:4e:06:61:ff:72:97:bf:c2:1e:9e:c3:b0:7d:87:
a7:83:20:2d:52:31:60:e6:3b:70:67:62:ec:35:91:
0d:7e:12:68:f1:7b:f7:f9:87:89:68:a3:cd:1c:3c:
5b:d6:e3:d8:5a:d4:12:88:b8:81:30:38:81:c2:66:
11:37:81:b4:93:f4:a0:6e:b9:f4:48:d3:1f:cc:8a:
fe:dd:bd:63:f6:39:b5:b7:f9:76:2d:80:ec:ba:4b:
c9:56:74:37:8f:2c:04:6a:5e:b2:a1:6e:e2:a6:28:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:CE:1D:60:E4:20:51:5F:10:05:26:38:F2:13:90:B1:EE:9D:53
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:59:3b:7d:0f:9d:f5:1d:ff:2f:3a:6d:7c:05:09:2a:4e:b6:
e3:f5:3b:2e:f3:ee:c8:9f:8f:83:61:6b:fa:d7:42:ce:39:bc:
f1:e5:46:a8:c6:7d:c0:7e:10:7f:eb:2a:86:72:8d:41:92:ba:
6e:84:1b:a5:9b:49:56:74:db:a9:7d:9f:6e:ea:57:cd:47:c6:
91:c9:f0:3e:69:60:bd:4f:ed:31:18:d5:6f:33:43:a0:44:ec:
96:52:05:b3:29:68:28:63:fd:61:87:ca:0c:80:b1:04:d1:16:
f2:73:b9:06:52:ad:89:2a:5c:d8:c6:52:dc:5c:8e:12:f9:65:
12:f8:10:da:ca:ed:9c:4b:40:05:59:3c:68:4d:ad:ec:e0:a2:
a0:3d:00:ba:18:91:9f:a0:8b:cf:79:1a:1d:12:7d:41:a5:ef:
d6:a5:43:58:a5:1a:8b:62:e9:48:20:12:2b:6e:af:b9:ff:bd:
ea:67:5d:ca:9d:da:cf:d3:3f:fa:f9:30:14:6c:c3:2e:0b:d5:
bc:10:2e:20:1a:43:02:2d:cc:5f:33:1d:02:90:49:f9:00:1a:
f5:0f:6c:18:73:2b:cd:13:47:a0:5e:54:55:e5:04:8b:50:c6:
dc:3e:a9:0f:14:a4:4a:03:11:96:a6:35:10:be:0e:49:69:10:
2e:4b:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:49:53 2026 by rpki-client