Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: XGrE3GRofqkxppH2Ob4NTvar7TxyBoNFpVvdRXyw5MQ=
Subject key identifier: 6B:F2:A9:66:F3:33:1B:E4:67:EE:80:77:BA:49:26:46:A5:DF:82:EB
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 019F190D2F8AC448C22E20D7E67CC136757D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 17C1
Signing time: Tue 30 Jun 2026 15:02:02 +0000
Manifest this update: Tue 30 Jun 2026 15:02:02 +0000
Manifest next update: Wed 01 Jul 2026 15:02:02 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: kFkSzlejsY3IX7zoUU6fAO4ZBmZFFZnfQK39kiqx20s=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:2f:8a:c4:48:c2:2e:20:d7:e6:7c:c1:36:75:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Jun 30 15:02:02 2026 GMT
Not After : Jul 1 15:02:02 2026 GMT
Subject: CN=6bf2a966f3331be467ee8077ba492646a5df82eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:74:83:2a:67:c9:de:30:32:f9:88:e8:6e:
2a:0c:15:7e:c9:ae:80:17:ed:4f:b8:9d:5c:2b:69:
a5:ea:6f:e3:06:e5:be:db:7c:19:48:7f:02:13:86:
df:12:72:14:c5:86:2e:b3:5d:90:4b:0e:80:d8:e9:
eb:76:e4:43:b8:d3:2d:43:37:10:f4:33:2b:5d:46:
ca:fa:56:70:ed:b0:95:d7:f4:fe:70:8f:24:4b:ee:
6f:6a:07:91:11:da:93:cc:dd:3a:bd:65:49:f5:c5:
4e:f8:c2:75:0d:d9:67:8a:53:0c:49:f8:e7:88:ef:
d8:cb:f2:6f:07:c7:ab:1a:af:9d:ea:6d:3b:4e:81:
63:b2:e7:0b:c0:17:18:00:ef:43:f6:48:74:cc:5f:
4c:bf:92:a5:2b:03:0e:f7:4b:34:30:9b:42:12:6d:
74:9d:ae:94:b3:d2:2a:0d:78:95:3f:55:f8:e6:49:
70:30:c0:e4:c1:0f:49:cf:b4:4e:e9:a0:2f:86:77:
22:f2:6b:46:72:f2:08:b8:05:24:48:08:10:e1:9e:
48:2f:2e:5e:0b:92:ff:b5:57:9d:e5:d0:da:33:6e:
f8:2e:38:e6:25:4d:43:3f:1e:a3:cc:bf:06:d7:90:
7b:0c:6d:ae:f3:c3:5e:ab:45:3b:ea:06:de:75:32:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:A9:66:F3:33:1B:E4:67:EE:80:77:BA:49:26:46:A5:DF:82:EB
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:68:69:0a:23:01:7d:16:5b:59:05:36:25:7f:66:92:73:f1:
68:0d:54:f9:2d:4b:48:08:6f:92:c8:b1:5d:c8:34:ae:c1:14:
fb:af:0a:01:07:cc:06:86:0b:b7:38:1d:8f:d2:86:20:67:05:
46:73:13:cc:5d:f5:27:a9:e7:fd:f6:70:47:f4:1a:17:e4:d1:
cf:88:92:a4:8f:45:f1:a7:58:69:37:b6:38:9e:be:9b:84:2f:
6d:49:13:db:8a:85:ed:bf:8b:a7:be:ed:8d:76:47:79:be:3f:
62:f7:79:03:d3:4f:56:34:4b:1f:44:bc:3a:92:8a:b6:ea:5f:
b0:7a:63:4d:17:ea:b5:a3:1d:70:9c:6d:cd:8c:62:d2:ac:fb:
ce:d1:da:5d:25:eb:97:c9:65:62:4d:69:14:36:c3:8b:16:59:
5b:ea:20:9b:0c:12:a6:af:ee:5b:11:66:af:fe:8f:ec:1c:2a:
ca:9e:17:94:8b:b1:60:30:c0:30:72:fd:3e:f5:f1:ff:c6:9c:
0e:b8:5a:b7:a4:e1:87:f5:20:11:fe:3e:85:42:8d:10:56:9c:
ed:19:21:38:56:31:85:53:e1:e3:27:f3:3a:28:fa:19:7f:53:
a3:d7:4b:49:de:b7:c0:a3:51:53:f2:6f:7c:4e:4c:aa:e1:ce:
80:ca:a1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDS+KxEjCLiDX5nzBNnV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0M2E5YzM1ZDllMWEyZjRkMzRhNzU0ZmEyNmQyMDM2NTc4
NDcyMTgwHhcNMjYwNjMwMTUwMjAyWhcNMjYwNzAxMTUwMjAyWjAzMTEwLwYDVQQD
Eyg2YmYyYTk2NmYzMzMxYmU0NjdlZTgwNzdiYTQ5MjY0NmE1ZGY4MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFx0gypnyd4wMvmI6G4qDBV+ya6A
F+1PuJ1cK2ml6m/jBuW+23wZSH8CE4bfEnIUxYYus12QSw6A2OnrduRDuNMtQzcQ
9DMrXUbK+lZw7bCV1/T+cI8kS+5vageREdqTzN06vWVJ9cVO+MJ1DdlnilMMSfjn
iO/Yy/JvB8erGq+d6m07ToFjsucLwBcYAO9D9kh0zF9Mv5KlKwMO90s0MJtCEm10
na6Us9IqDXiVP1X45klwMMDkwQ9Jz7RO6aAvhnci8mtGcvIIuAUkSAgQ4Z5ILy5e
C5L/tVed5dDaM274LjjmJU1DPx6jzL8G15B7DG2u88Neq0U76gbedTKwkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvyqWbzMxvkZ+6Ad7pJJkal34LrMB8GA1UdIwQY
MBaAFAQ6nDXZ4aL000p1T6JtIDZXhHIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEt
ODVjYmQyMDY4ZThmLzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEtODVjYmQyMDY4ZThm
LzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWhpCiMB
fRZbWQU2JX9mknPxaA1U+S1LSAhvksixXcg0rsEU+68KAQfMBoYLtzgdj9KGIGcF
RnMTzF31J6nn/fZwR/QaF+TRz4iSpI9F8adYaTe2OJ6+m4QvbUkT24qF7b+Lp77t
jXZHeb4/Yvd5A9NPVjRLH0S8OpKKtupfsHpjTRfqtaMdcJxtzYxi0qz7ztHaXSXr
l8llYk1pFDbDixZZW+ogmwwSpq/uWxFmr/6P7Bwqyp4XlIuxYDDAMHL9PvXx/8ac
Drhat6Thh/UgEf4+hUKNEFac7RkhOFYxhVPh4yfzOij6GX9To9dLSd63wKNRU/Jv
fE5MquHOgMqhAw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:51 2026 by rpki-client