Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: Rzz0Wm7DxHs9gzgLi2ljyMcoDzQQsT2O6zWB+k6z1EI=
Subject key identifier: 88:5E:D3:2F:BE:4C:99:D7:40:1D:74:08:58:BA:F6:0B:C7:78:69:B5
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 019E28B96D5C69101D926CA7C36DDE15065F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 050A
Signing time: Thu 14 May 2026 23:01:41 +0000
Manifest this update: Thu 14 May 2026 23:01:41 +0000
Manifest next update: Fri 15 May 2026 23:01:41 +0000
Files and hashes: 1: IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (hash: FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=)
2: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=)
3: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: UBB4M/BHjG0o0ML6AvVu5wZ2XGDIJJvPzFOUOkzujnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:6d:5c:69:10:1d:92:6c:a7:c3:6d:de:15:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: May 14 23:01:41 2026 GMT
Not After : May 15 23:01:41 2026 GMT
Subject: CN=885ed32fbe4c99d7401d740858baf60bc77869b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:fc:df:3d:9e:fd:ed:ef:8f:27:1a:77:61:
4c:33:b6:05:ad:99:b5:2a:df:c7:cb:99:8c:25:a6:
84:4b:09:ae:7d:e0:cd:83:66:33:12:df:85:de:b5:
8d:9f:4f:7c:02:bb:c3:45:7c:a3:76:be:2a:d2:db:
eb:8f:c7:d5:93:d8:f8:74:12:24:a7:6c:b0:1e:86:
90:24:31:bd:5d:e6:9d:66:36:c2:fd:a1:37:39:0f:
66:fc:2a:6f:80:e3:5f:d4:1f:c2:1b:f1:e2:a5:bd:
12:44:58:87:6e:3d:ba:4f:1d:6a:13:68:b0:3f:f9:
e5:24:4c:60:1a:02:06:d2:fa:c7:bc:30:b1:c5:f4:
eb:f2:6a:b9:69:f6:97:c7:d1:66:74:07:8f:15:9b:
ea:80:5d:d8:eb:81:a1:89:ab:b0:45:12:54:a1:5a:
99:51:fc:97:84:1e:1a:76:5a:b1:24:38:54:24:c3:
a9:ae:e1:39:7f:05:a6:4a:57:c5:7a:b6:26:42:f9:
a5:55:c7:ad:89:4b:47:d8:e2:79:08:8b:8c:b2:f9:
1d:7f:76:9a:d8:d1:9a:2f:5b:cb:ec:50:68:44:48:
93:00:f7:ea:f5:3c:73:68:89:0e:0c:7c:8c:c8:8b:
41:d5:d3:63:e3:20:ec:b2:ae:82:bd:f4:68:01:ec:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5E:D3:2F:BE:4C:99:D7:40:1D:74:08:58:BA:F6:0B:C7:78:69:B5
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2a:88:84:c6:24:fe:2e:5a:c7:65:39:14:a0:d8:68:19:56:
54:5e:87:cf:03:f7:b8:a7:15:4b:18:b4:f1:51:ed:4b:68:64:
37:05:1b:7e:7b:aa:9e:df:9b:5e:31:e7:a3:44:5e:5a:eb:94:
fc:52:49:13:6b:a9:d6:f1:7d:c5:b2:7d:56:58:4b:a1:22:dc:
7e:7a:33:46:fe:09:44:a8:17:40:0d:3d:83:13:0e:b7:a3:5b:
c5:5a:90:ad:20:5d:f5:07:22:1a:cf:07:04:fe:c1:c3:84:59:
8c:82:40:85:f2:ed:03:2d:64:5b:48:e7:5f:11:ab:4d:3b:d9:
cc:c2:8f:83:04:ea:24:ff:2c:92:ec:fd:c8:29:db:c4:a2:64:
c4:c8:8f:8b:ab:38:b5:10:dc:21:55:1a:f2:56:4f:53:cd:3e:
d4:5c:c5:71:9d:86:1c:b6:02:21:4e:20:48:40:71:e1:19:51:
de:23:2e:05:00:65:74:99:b6:25:0c:85:56:b5:c1:b7:96:c9:
89:2a:91:e1:66:38:42:46:16:1b:d1:b4:34:e2:7a:77:a8:ec:
8e:25:d4:90:ec:46:8d:d1:19:79:66:ee:63:ba:b5:4d:70:70:
8d:79:0e:73:de:20:e0:57:40:11:b9:32:1b:9b:51:83:87:0b:
9c:6d:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:27 2026 by rpki-client