Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: UW/1FMZh86Z+FWDWXaNFnrvHWo3TOeO47bEjwSaMi28=
Subject key identifier: 70:92:6C:19:C3:5D:8B:B7:81:D4:CC:5B:50:03:10:EF:84:05:E3:30
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 01A10E4C8DBF4F42D5D1B6FEBCB0D6FC6C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 0C9B
Signing time: Mon 05 Oct 2026 23:01:00 +0000
Manifest this update: Mon 05 Oct 2026 23:01:00 +0000
Manifest next update: Tue 06 Oct 2026 23:01:00 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: oDn15iXEwSIhT5TkpiY56WRfBbSmleEYjnSH9bHFdAo=)
2: QfmQSbGn-rduzrFqyr6Sbemoe_M.roa (hash: osfrqMp9JnWBuxKfciaGluVi+EkA7SyhrK0LWIgUKOM=)
3: UPMg7rWjV3hDDE0mnmogG2n2blk.roa (hash: JwH0lLPwflRE6ZZP7SZUGCLHGbBuaoFOuDPOldCNPLk=)
4: V1ivFQWDP77i8oEcG_p8QyZQJAM.roa (hash: dOMZrRoKiVBS9GiMZZVqHJQh/9Gux0X1bI6FS/AevuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:8d:bf:4f:42:d5:d1:b6:fe:bc:b0:d6:fc:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Oct 5 23:01:00 2026 GMT
Not After : Oct 6 23:01:00 2026 GMT
Subject: CN=70926c19c35d8bb781d4cc5b500310ef8405e330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:7b:97:f6:e2:f3:cf:a6:3e:83:c8:9d:17:
59:7e:3d:37:83:58:5f:ed:cd:1b:86:07:d2:cf:4c:
48:37:5f:5c:b6:a4:52:20:49:ba:93:1a:ed:e7:6f:
eb:7c:b6:d6:b9:01:71:8b:fd:43:20:80:9c:cb:0c:
3e:b8:03:6e:39:7b:19:2f:6f:fa:3e:4d:3f:4b:87:
76:95:ed:b8:29:97:ba:84:1a:de:e4:5a:00:f7:eb:
63:fd:9c:10:8a:bc:cf:55:62:d4:23:27:32:a3:36:
63:40:03:d0:82:19:92:d0:23:35:65:9a:64:2d:68:
2d:d6:4f:7b:b7:ed:c5:a6:6b:06:4a:89:2d:65:7b:
0b:4b:f5:cf:c4:48:d4:a2:fb:64:6f:a8:3d:80:99:
13:40:4c:a6:35:5b:6a:95:98:e0:99:a8:5c:f2:70:
d5:fc:da:ce:6a:4b:b7:6a:22:bf:4d:19:a7:fd:2c:
bc:de:92:b0:a2:98:e8:c9:c2:28:42:07:f0:f6:4c:
22:fd:6b:75:12:d2:94:b2:2a:86:a3:bc:7b:0a:a2:
0a:fc:62:57:18:55:af:e5:ff:37:44:c7:fc:c7:e3:
13:e6:5b:57:f0:84:b7:85:85:bc:3b:7d:91:4f:3e:
48:51:7c:f4:db:88:a9:63:d1:9c:4d:f3:bc:71:71:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:92:6C:19:C3:5D:8B:B7:81:D4:CC:5B:50:03:10:EF:84:05:E3:30
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e7:1d:b1:58:5e:02:b7:3a:b5:bb:33:07:8e:94:41:17:1e:
00:bc:8e:50:1a:41:7e:20:b4:11:a8:b4:14:38:34:57:45:48:
7a:cc:d1:68:84:40:05:62:a7:c7:59:1f:01:34:55:c9:83:8e:
94:aa:50:7c:b7:5b:58:40:c1:32:e2:0f:e0:73:ae:32:e7:4d:
6c:2a:d0:f7:1d:d9:da:5c:09:d6:dc:4e:66:c0:13:ec:37:16:
d1:e7:fa:42:bc:1b:b6:c1:b8:0d:4a:fb:7b:fd:bf:6d:14:f0:
da:f2:bf:ad:9a:83:22:0f:c3:d8:98:47:5b:b4:ac:b4:dd:c4:
41:1d:ce:06:65:8e:2e:26:16:99:83:11:01:5b:0c:f0:50:9a:
45:5b:54:17:ad:0f:b8:34:b7:f5:e0:6a:c0:d7:34:fb:48:86:
b0:8d:a7:29:f0:38:28:2d:c2:b3:00:ea:e0:74:ea:3f:5d:db:
68:a2:13:79:30:c5:98:7c:a3:e2:4e:7b:97:f7:26:9c:9b:f4:
0e:43:75:b7:30:6c:91:1d:d7:c9:ea:44:f6:06:88:cb:5f:07:
df:57:65:de:0a:a3:bb:fc:b9:3b:9f:a5:72:90:e8:fa:b0:a0:
53:cc:d4:05:33:57:5c:b1:47:d7:3d:bb:1d:d7:0b:c7:34:26:
b7:db:38:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOTI2/T0LV0bb+vLDW/GycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx
Nzg3ZTEwHhcNMjYxMDA1MjMwMTAwWhcNMjYxMDA2MjMwMTAwWjAzMTEwLwYDVQQD
Eyg3MDkyNmMxOWMzNWQ4YmI3ODFkNGNjNWI1MDAzMTBlZjg0MDVlMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEJ7l/bi88+mPoPInRdZfj03g1hf
7c0bhgfSz0xIN19ctqRSIEm6kxrt52/rfLbWuQFxi/1DIICcyww+uANuOXsZL2/6
Pk0/S4d2le24KZe6hBre5FoA9+tj/ZwQirzPVWLUIycyozZjQAPQghmS0CM1ZZpk
LWgt1k97t+3FpmsGSoktZXsLS/XPxEjUovtkb6g9gJkTQEymNVtqlZjgmahc8nDV
/NrOaku3aiK/TRmn/Sy83pKwopjoycIoQgfw9kwi/Wt1EtKUsiqGo7x7CqIK/GJX
GFWv5f83RMf8x+MT5ltX8IS3hYW8O32RTz5IUXz024ipY9GcTfO8cXH31QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCSbBnDXYu3gdTMW1ADEO+EBeMwMB8GA1UdIwQY
MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt
YzVjZjRiM2IxY2E2LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2
LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASecdsVhe
Arc6tbszB46UQRceALyOUBpBfiC0Eai0FDg0V0VIeszRaIRABWKnx1kfATRVyYOO
lKpQfLdbWEDBMuIP4HOuMudNbCrQ9x3Z2lwJ1txOZsAT7DcW0ef6QrwbtsG4DUr7
e/2/bRTw2vK/rZqDIg/D2JhHW7SstN3EQR3OBmWOLiYWmYMRAVsM8FCaRVtUF60P
uDS39eBqwNc0+0iGsI2nKfA4KC3CswDq4HTqP13baKITeTDFmHyj4k57l/cmnJv0
DkN1tzBskR3XyepE9gaIy18H31dl3gqju/y5O5+lcpDo+rCgU8zUBTNXXLFH1z27
HdcLxzQmt9s4XQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:23:44 2026 by rpki-client