Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: ByeJ1SZvq0oVjsLemq6Q2BL0UefY5sROnE8etoq1DN4=
Subject key identifier: AD:CC:E2:36:E8:35:92:D0:EA:78:08:93:84:80:61:7E:B6:C4:4A:90
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 01A1DEDED02235AC651183B2D91F786049E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 06F6
Signing time: Sun 15 Nov 2026 11:01:46 +0000
Manifest this update: Sun 15 Nov 2026 11:01:46 +0000
Manifest next update: Mon 16 Nov 2026 11:01:46 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: D9M6PQxhSSDdB6LanZxCrJgRiYVVbpOOKMqHmpO7+L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:d0:22:35:ac:65:11:83:b2:d9:1f:78:60:49:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Nov 15 11:01:46 2026 GMT
Not After : Nov 16 11:01:46 2026 GMT
Subject: CN=adcce236e83592d0ea7808938480617eb6c44a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:58:47:8a:44:5a:41:49:3f:51:c4:ac:41:
af:7f:0d:55:f0:d0:d8:dc:fc:df:e4:9c:80:ce:44:
88:b7:63:24:a4:1c:25:ae:28:87:06:7b:e5:55:45:
8f:e0:83:0c:7f:89:a6:38:83:dd:41:48:48:36:9c:
fc:a6:fe:e0:22:93:4b:ba:80:37:3a:d7:f5:1f:f5:
ad:3b:72:cc:b8:11:b1:a7:6d:9d:7b:99:9a:40:a0:
d9:98:32:4f:6f:ce:92:98:f3:92:f7:3f:53:e2:5c:
b9:24:77:8a:40:4c:93:d5:08:5e:b9:8d:db:45:81:
fb:8d:20:e0:ca:40:96:c7:1b:85:a0:14:0f:a5:88:
b2:30:19:c8:c8:a5:85:e9:52:3c:5a:ac:be:0c:77:
46:9f:7c:98:0c:25:89:c2:7b:13:43:0f:e7:dc:c3:
cb:39:8d:a0:9a:89:3c:64:2f:a3:0c:cf:51:96:01:
a9:54:49:a4:a8:6c:4c:d1:53:b9:2f:e5:bf:23:30:
37:1e:2e:dd:f1:1d:81:f8:ca:3e:06:73:1f:c0:9b:
81:aa:b3:3c:e8:e8:aa:19:b9:e1:6d:99:80:11:1a:
a1:b6:e8:28:55:5a:a5:fb:00:9f:a7:69:75:5e:f2:
ce:b7:04:a1:36:91:2c:44:0d:c5:a5:9e:bc:c9:9c:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:E2:36:E8:35:92:D0:EA:78:08:93:84:80:61:7E:B6:C4:4A:90
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b0:7c:04:fe:20:eb:8f:fd:33:da:88:8e:61:ff:52:55:a9:
5f:1b:eb:69:64:32:7c:78:05:cb:ba:ad:b5:de:5f:c0:4d:b3:
a4:80:20:df:97:ab:a4:29:73:ef:31:a7:e0:ec:68:b2:f1:bf:
6f:94:39:a9:f6:c9:11:6c:e5:95:d1:84:e7:9c:69:01:53:9d:
b5:6d:ed:e5:57:df:1f:f5:0b:ed:3d:6c:8a:e7:24:a1:06:b5:
af:3c:ce:d9:f6:e1:3a:51:36:7f:b8:4d:52:81:19:6c:33:0c:
98:5b:3c:69:c0:94:3a:06:1c:30:99:f6:1f:e7:6a:b2:8c:3a:
70:96:75:d0:e9:63:a9:85:c7:68:bf:fe:40:5d:e9:4a:f6:2d:
46:8e:43:9d:13:65:0e:c7:2b:0a:5d:1e:29:dc:ef:e0:b3:d4:
4d:8c:76:60:d6:44:fb:f9:d5:c6:7b:96:83:7e:df:14:38:7a:
6d:8b:54:67:76:58:f1:df:24:10:12:46:9d:95:5a:00:8f:ef:
22:a5:f7:82:97:0a:32:38:20:b5:6d:7c:86:c4:72:ce:1d:42:
c1:7f:93:01:0c:be:b2:c8:70:7c:94:dd:7c:f7:7b:b7:dc:9e:
be:1a:84:2e:97:0d:3d:a3:e1:1b:79:62:88:91:f0:1d:4b:14:
82:59:5b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3tAiNaxlEYOy2R94YEnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDJjZWQzNTJmMDFmN2ViNWRjNzYxOWVkNzE0YzZiNmE1
Yzc5MWUwHhcNMjYxMTE1MTEwMTQ2WhcNMjYxMTE2MTEwMTQ2WjAzMTEwLwYDVQQD
EyhhZGNjZTIzNmU4MzU5MmQwZWE3ODA4OTM4NDgwNjE3ZWI2YzQ0YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+dYR4pEWkFJP1HErEGvfw1V8NDY
3Pzf5JyAzkSIt2MkpBwlriiHBnvlVUWP4IMMf4mmOIPdQUhINpz8pv7gIpNLuoA3
Otf1H/WtO3LMuBGxp22de5maQKDZmDJPb86SmPOS9z9T4ly5JHeKQEyT1QheuY3b
RYH7jSDgykCWxxuFoBQPpYiyMBnIyKWF6VI8Wqy+DHdGn3yYDCWJwnsTQw/n3MPL
OY2gmok8ZC+jDM9RlgGpVEmkqGxM0VO5L+W/IzA3Hi7d8R2B+Mo+BnMfwJuBqrM8
6OiqGbnhbZmAERqhtugoVVql+wCfp2l1XvLOtwShNpEsRA3FpZ68yZxHKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3M4jboNZLQ6ngIk4SAYX62xEqQMB8GA1UdIwQY
MBaAFG3SztNS8B9+tdx2Ge1xTGtqXHkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEt
OWRmNzI1MzBiNjY5LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEtOWRmNzI1MzBiNjY5
LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7B8BP4g
64/9M9qIjmH/UlWpXxvraWQyfHgFy7qttd5fwE2zpIAg35erpClz7zGn4OxosvG/
b5Q5qfbJEWzlldGE55xpAVOdtW3t5VffH/UL7T1siuckoQa1rzzO2fbhOlE2f7hN
UoEZbDMMmFs8acCUOgYcMJn2H+dqsow6cJZ10OljqYXHaL/+QF3pSvYtRo5DnRNl
DscrCl0eKdzv4LPUTYx2YNZE+/nVxnuWg37fFDh6bYtUZ3ZY8d8kEBJGnZVaAI/v
IqX3gpcKMjggtW18hsRyzh1CwX+TAQy+sshwfJTdfPd7t9yevhqELpcNPaPhG3li
iJHwHUsUgllbRA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:49:58 2026 by rpki-client