Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: veotZqlzpALBitVTDRj9R7abhLJIOD+1FH3AGQ+GxeE=
Subject key identifier: E7:4A:C4:79:A6:45:CA:7F:5C:C1:D1:BA:3B:78:65:A0:E4:D3:1D:F0
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 01A0F6E95E3B0F9328ADD37BA712C7CC3C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 11F6
Signing time: Thu 01 Oct 2026 10:01:24 +0000
Manifest this update: Thu 01 Oct 2026 10:01:24 +0000
Manifest next update: Fri 02 Oct 2026 10:01:24 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: htgnzL1lYdfHhUF+RmNoYEwrsawAakwvSCtYtnCJrhc=)
2: lhVeZQZpdP80NLJweMv-J52SRu4.roa (hash: q+SU74pcp0OTQ2H8mBUZ7+Emk1UFPbb7YvdPcrQdj3c=)
3: n4p4Mur7zC67idLkqIFmYpyaEtw.asa (hash: q6UH7P12DerpRTJVoYFJ5OMt2xjLtEuqir8vpJLrJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:5e:3b:0f:93:28:ad:d3:7b:a7:12:c7:cc:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Oct 1 10:01:24 2026 GMT
Not After : Oct 2 10:01:24 2026 GMT
Subject: CN=e74ac479a645ca7f5cc1d1ba3b7865a0e4d31df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:b7:13:d3:2a:fe:00:f6:5a:32:5e:b9:9f:
e0:3e:51:5a:a0:b4:1c:82:4c:43:fe:13:d8:36:30:
95:cd:9f:ff:fd:be:b5:d3:01:9c:34:9e:26:94:de:
bf:e7:06:3d:88:fc:18:0d:0f:f2:d8:1d:eb:cd:7a:
61:3b:c7:ab:fd:f8:e7:be:8e:ce:92:d5:a7:9c:b7:
ed:1b:93:1d:ac:51:9a:5e:d3:ac:01:ec:47:22:58:
b0:aa:c9:66:f8:68:fc:58:4e:48:99:1c:64:41:a6:
b5:6d:97:ce:38:6d:67:97:05:b2:33:64:c1:43:0e:
21:41:9f:98:c0:12:27:5c:00:9a:62:4e:a5:64:4e:
0a:c4:64:95:f8:e4:ba:e9:4b:11:1f:c4:b2:f4:66:
af:2f:ba:58:01:af:50:56:33:25:3d:bc:4c:fc:02:
e8:d3:5c:d8:b2:d1:31:d4:96:fd:3c:c9:8a:83:5d:
8e:4f:5a:ff:a7:00:ec:09:b2:14:9e:85:12:d7:46:
89:52:f7:30:77:d8:b5:82:c5:68:d3:ff:db:22:a8:
7a:75:bf:eb:99:40:ae:62:93:b7:7d:8f:0c:c0:e6:
f8:a6:f8:9d:ec:f5:bb:92:ad:ab:22:05:80:b4:ae:
4e:9c:75:64:17:6d:ac:38:4a:42:00:b7:33:17:ba:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:C4:79:A6:45:CA:7F:5C:C1:D1:BA:3B:78:65:A0:E4:D3:1D:F0
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:6c:97:54:5f:4b:16:71:3a:62:0a:53:ef:e0:e6:28:27:
66:b6:89:c1:3e:5c:17:9b:07:79:4e:71:e7:53:70:25:bc:5f:
f4:a8:ef:64:d0:2f:f3:90:b5:2d:fd:f2:50:04:d1:df:c5:3d:
7b:f3:12:06:92:30:63:9a:2d:4c:94:e7:32:84:d7:9e:9e:c1:
11:4c:cc:2b:cc:59:89:a8:4f:68:7d:6f:fd:15:f0:bd:74:e0:
02:48:e1:e2:19:4a:44:95:78:6d:65:a4:02:f9:a2:d4:75:ba:
cd:0e:90:06:02:f9:60:f7:c1:ef:23:bc:29:dc:f8:da:f0:3a:
38:b1:3f:8e:1a:f4:11:80:d2:ca:d3:dc:5d:52:1d:b1:98:36:
d4:c0:20:68:76:29:17:a5:79:42:ca:da:1a:fc:59:9e:e5:fd:
77:8c:01:9d:1e:70:6e:99:bf:35:ad:22:49:bd:9e:25:74:44:
55:be:e6:71:f3:5c:f2:31:f8:3b:39:50:98:84:b9:d6:33:f3:
a4:14:8c:c6:d3:7d:41:86:40:07:6c:36:36:c5:65:82:57:b1:
b6:7c:ba:43:c1:b1:c3:92:44:6e:6d:80:b6:4a:00:5b:fc:4f:
d6:1e:32:e2:6d:ab:b5:20:b7:77:e9:75:39:57:63:ea:07:ca:
6f:63:94:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26V47D5MordN7pxLHzDwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZGM2OTRmMGMzMjU1ZDVkNTU3M2YxMzI4ZTUzNjU0Y2Zi
MjJjNGQwHhcNMjYxMDAxMTAwMTI0WhcNMjYxMDAyMTAwMTI0WjAzMTEwLwYDVQQD
EyhlNzRhYzQ3OWE2NDVjYTdmNWNjMWQxYmEzYjc4NjVhMGU0ZDMxZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nu3E9Mq/gD2WjJeuZ/gPlFaoLQc
gkxD/hPYNjCVzZ///b610wGcNJ4mlN6/5wY9iPwYDQ/y2B3rzXphO8er/fjnvo7O
ktWnnLftG5MdrFGaXtOsAexHIliwqslm+Gj8WE5ImRxkQaa1bZfOOG1nlwWyM2TB
Qw4hQZ+YwBInXACaYk6lZE4KxGSV+OS66UsRH8Sy9GavL7pYAa9QVjMlPbxM/ALo
01zYstEx1Jb9PMmKg12OT1r/pwDsCbIUnoUS10aJUvcwd9i1gsVo0//bIqh6db/r
mUCuYpO3fY8MwOb4pvid7PW7kq2rIgWAtK5OnHVkF22sOEpCALczF7pjrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdKxHmmRcp/XMHRujt4ZaDk0x3wMB8GA1UdIwQY
MBaAFGzcaU8MMlXV1Vc/EyjlNlTPsixNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEt
NTM2ZTFmMGM0ZmY5LzEvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEtNTM2ZTFmMGM0ZmY5
LzEvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhVsl1Rf
SxZxOmIKU+/g5ignZraJwT5cF5sHeU5x51NwJbxf9KjvZNAv85C1Lf3yUATR38U9
e/MSBpIwY5otTJTnMoTXnp7BEUzMK8xZiahPaH1v/RXwvXTgAkjh4hlKRJV4bWWk
Avmi1HW6zQ6QBgL5YPfB7yO8Kdz42vA6OLE/jhr0EYDSytPcXVIdsZg21MAgaHYp
F6V5QsraGvxZnuX9d4wBnR5wbpm/Na0iSb2eJXREVb7mcfNc8jH4OzlQmIS51jPz
pBSMxtN9QYZAB2w2NsVlglextny6Q8Gxw5JEbm2AtkoAW/xP1h4y4m2rtSC3d+l1
OVdj6gfKb2OU9w==
-----END CERTIFICATE-----
Generated at Thu Oct 1 16:56:31 2026 by rpki-client