Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: GgM1/iKaM2x3gY9mE9aIeIUpdzmF82pZS8x736MTOBg=
Subject key identifier: 91:3C:F6:DB:43:5E:F0:9F:A9:C6:D8:88:C0:7F:6A:BA:8B:89:82:1C
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 01A162D7724F3584BF8C86367BAA5320FBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 189C
Signing time: Thu 22 Oct 2026 09:00:48 +0000
Manifest this update: Thu 22 Oct 2026 09:00:48 +0000
Manifest next update: Fri 23 Oct 2026 09:00:48 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: Y9bQK1i4GaFN+4zuWhszV+7Oi4xhhcdCcZzW0hA5ZZQ=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:d7:72:4f:35:84:bf:8c:86:36:7b:aa:53:20:fb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Oct 22 09:00:48 2026 GMT
Not After : Oct 23 09:00:48 2026 GMT
Subject: CN=913cf6db435ef09fa9c6d888c07f6aba8b89821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:b4:5d:ff:8d:8e:0e:6d:5d:f0:2f:19:aa:
1c:90:76:ec:a6:c8:ca:f0:a8:cb:c1:36:85:0e:66:
c5:44:6b:2e:65:58:5e:cc:0a:2b:a5:89:d8:49:6b:
33:60:87:1d:22:9a:f9:76:aa:4a:df:f6:51:9e:74:
3d:85:0f:85:ae:42:04:9e:ad:91:7d:bb:cc:15:13:
07:e5:87:c0:b7:ae:ad:00:a6:f4:8b:fe:da:c5:d9:
b3:2d:34:73:93:97:b5:ee:13:6c:c5:3b:66:08:c8:
41:a5:79:a0:d0:c3:ab:ff:91:d1:76:af:df:b7:26:
6c:a2:a7:11:9d:35:c6:d6:e3:2d:e5:d8:23:f2:4a:
ec:2e:b7:7f:44:d8:b3:2c:29:27:82:c1:ce:a2:e1:
7d:ae:6f:93:dc:2a:f4:85:02:50:ea:88:58:8c:29:
19:96:6d:25:5c:53:8f:08:2c:2e:16:ba:f8:06:b7:
43:e3:5e:e2:62:06:a4:15:34:8e:38:e3:84:d6:60:
4f:c5:5d:2b:74:d0:e4:28:92:9b:ab:49:96:b3:48:
f7:93:86:45:7f:05:3d:c7:6e:b1:d2:00:3c:23:ee:
88:9b:74:cf:4e:ee:1c:b6:b2:92:89:a0:4b:13:3a:
e5:9c:d9:75:4e:ac:e4:78:01:a0:81:db:17:4a:39:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:F6:DB:43:5E:F0:9F:A9:C6:D8:88:C0:7F:6A:BA:8B:89:82:1C
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a0:c6:b5:51:dd:03:54:78:43:a7:d2:36:d3:12:8c:26:2e:
f5:7e:67:77:cb:e0:00:4f:a5:f4:cc:e7:dd:3a:30:8e:68:a1:
1b:24:f2:f5:de:ff:3a:1c:2a:e7:6a:27:bb:17:53:45:da:a0:
65:8a:bb:82:c3:44:ff:ce:77:35:04:50:f9:ac:22:a1:79:f9:
9f:76:72:25:a7:0a:54:28:16:85:de:11:3f:79:62:e8:cb:36:
16:94:e0:a6:0a:f4:51:a5:53:81:7d:27:79:ed:48:32:1f:ed:
ea:12:e6:12:ae:9c:4d:66:0d:db:65:ed:a8:07:9c:f2:f1:d4:
2d:f6:06:e8:92:d0:b2:fd:20:fd:91:c0:9c:44:7f:68:b8:41:
9a:94:79:ec:77:23:ae:45:64:47:6c:10:83:a3:14:96:d1:3d:
cb:5d:15:7b:1d:89:f8:48:eb:89:7f:66:ed:0e:0f:75:f6:9d:
ed:a2:d1:2f:30:bf:dd:0f:3d:8a:17:9c:ea:37:e1:5a:a5:ce:
ea:c0:59:81:26:e8:c4:91:4e:00:b0:fd:8d:63:40:02:90:41:
ec:c1:ea:5f:4e:9a:3c:3e:69:db:e5:98:54:1f:bc:2f:3e:2b:
13:0f:a2:3f:fc:8f:5f:13:16:52:d0:63:71:1a:62:34:02:9f:
d0:19:c2:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFi13JPNYS/jIY2e6pTIPvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjYxMDIyMDkwMDQ4WhcNMjYxMDIzMDkwMDQ4WjAzMTEwLwYDVQQD
Eyg5MTNjZjZkYjQzNWVmMDlmYTljNmQ4ODhjMDdmNmFiYThiODk4MjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd+0Xf+Njg5tXfAvGaockHbspsjK
8KjLwTaFDmbFRGsuZVhezAorpYnYSWszYIcdIpr5dqpK3/ZRnnQ9hQ+FrkIEnq2R
fbvMFRMH5YfAt66tAKb0i/7axdmzLTRzk5e17hNsxTtmCMhBpXmg0MOr/5HRdq/f
tyZsoqcRnTXG1uMt5dgj8krsLrd/RNizLCkngsHOouF9rm+T3Cr0hQJQ6ohYjCkZ
lm0lXFOPCCwuFrr4BrdD417iYgakFTSOOOOE1mBPxV0rdNDkKJKbq0mWs0j3k4ZF
fwU9x26x0gA8I+6Im3TPTu4ctrKSiaBLEzrlnNl1TqzkeAGggdsXSjk8QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE89ttDXvCfqcbYiMB/arqLiYIcMB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaDGtVHd
A1R4Q6fSNtMSjCYu9X5nd8vgAE+l9Mzn3TowjmihGyTy9d7/Ohwq52onuxdTRdqg
ZYq7gsNE/853NQRQ+awioXn5n3ZyJacKVCgWhd4RP3li6Ms2FpTgpgr0UaVTgX0n
ee1IMh/t6hLmEq6cTWYN22XtqAec8vHULfYG6JLQsv0g/ZHAnER/aLhBmpR57Hcj
rkVkR2wQg6MUltE9y10Vex2J+EjriX9m7Q4Pdfad7aLRLzC/3Q89ihec6jfhWqXO
6sBZgSboxJFOALD9jWNAApBB7MHqX06aPD5p2+WYVB+8Lz4rEw+iP/yPXxMWUtBj
cRpiNAKf0BnCNA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 16:20:23 2026 by rpki-client