Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: 9PW/DRLpyq4EpCoHZsiYUdarMSpVKOBiNrF61KUZ0LA=
Subject key identifier: DE:A2:67:74:36:BA:C9:A4:93:79:6C:CF:E3:B4:4E:9D:D4:CA:03:BF
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019E7CD59FAF5AC2F561E88776F59268B0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0EE5
Signing time: Sun 31 May 2026 07:00:35 +0000
Manifest this update: Sun 31 May 2026 07:00:35 +0000
Manifest next update: Mon 01 Jun 2026 07:00:35 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: pAYr+zaS2puHPBINk212kbMXlz8LJ6iZEl3+onO/ds0=)
2: xByyab3Vrz3Ef2rAb6P2eDrMVOE.roa (hash: kIu292fLCuL6Bxl5IG18vmja0jYF3hwZuE7UgYdGv/Y=)
3: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:d5:9f:af:5a:c2:f5:61:e8:87:76:f5:92:68:b0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: May 31 07:00:35 2026 GMT
Not After : Jun 1 07:00:35 2026 GMT
Subject: CN=dea2677436bac9a493796ccfe3b44e9dd4ca03bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:16:e9:5f:a9:47:0b:2f:23:87:73:0e:b6:
8d:fa:77:c7:15:fd:25:23:27:db:06:fe:95:79:fc:
a1:7d:39:68:15:92:8b:cc:0b:12:7f:79:a3:d8:4f:
57:e6:27:aa:d0:58:57:31:c8:0c:7e:e6:be:e2:5f:
3f:f1:b8:b0:6f:46:5e:40:6e:4e:39:4b:50:11:4a:
ff:62:42:1a:44:13:ef:15:e4:bf:9c:6e:05:14:6d:
2c:9f:fc:08:24:de:65:13:ed:b5:17:3c:90:ff:63:
67:7a:45:b8:93:3b:59:fa:3b:f6:70:a8:5c:82:cc:
b8:50:b3:41:7b:f0:55:49:9f:b4:ee:8c:6c:39:bc:
0f:02:cc:0a:56:3f:34:e7:48:1e:75:a0:8a:13:00:
b5:00:88:16:92:5a:4c:da:75:cd:c1:6b:da:90:cf:
dd:a9:66:ef:ac:ef:f4:7d:7d:3b:ed:9f:61:74:e8:
a9:78:2d:db:33:60:b5:04:12:53:da:54:72:19:32:
bf:78:a8:7f:73:9f:12:1a:8e:4a:d9:90:40:0d:84:
7d:31:d0:fa:2c:c9:6c:71:c0:4b:ab:28:43:23:e6:
d6:bc:64:00:e6:69:94:a3:e1:0a:b7:ad:dd:e6:43:
07:41:40:98:ea:46:2b:b8:ee:da:52:6f:dc:1c:3b:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A2:67:74:36:BA:C9:A4:93:79:6C:CF:E3:B4:4E:9D:D4:CA:03:BF
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:27:2d:75:a2:a3:2f:a8:f1:a0:ca:09:de:49:26:b0:86:
91:c2:69:c4:de:25:c5:b5:ff:c0:7c:16:c9:25:db:af:41:83:
35:85:8a:ac:f7:3a:61:71:f3:42:43:bf:9d:05:7f:00:cd:82:
41:4f:39:d3:2e:fa:0f:1c:23:f5:17:70:62:85:f7:e8:7b:47:
b6:c5:b4:60:87:f9:ed:0b:9e:4e:ad:75:98:11:f3:fa:39:e5:
08:39:16:aa:d9:6e:89:16:60:0b:ec:7a:23:44:6c:b9:92:ea:
b8:ae:8b:31:a6:ef:0c:85:0e:13:f1:e5:53:a7:34:01:03:5a:
35:de:31:56:98:ac:fb:dc:5f:7a:58:7a:42:60:e7:42:2e:b9:
9e:9a:8d:cf:4f:bf:bc:bf:e5:f1:74:e2:99:f3:f5:c6:bb:72:
ad:7e:d5:24:27:18:11:03:6e:4e:b6:c5:91:00:e0:74:84:31:
44:09:06:18:9f:f3:31:3e:5c:3b:f2:97:ec:d2:26:b6:ba:01:
ea:9b:f8:97:91:c3:c5:34:18:4b:e0:76:d9:6b:e8:f2:12:02:
f3:1f:e5:2c:42:31:46:39:40:5a:b6:34:e2:56:b8:12:12:97:
91:16:7e:16:51:b9:cd:a9:2f:6d:1b:8e:86:42:a2:2c:70:72:
77:54:8a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ581Z+vWsL1YeiHdvWSaLDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx
NDRiYjYwHhcNMjYwNTMxMDcwMDM1WhcNMjYwNjAxMDcwMDM1WjAzMTEwLwYDVQQD
EyhkZWEyNjc3NDM2YmFjOWE0OTM3OTZjY2ZlM2I0NGU5ZGQ0Y2EwM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rgW6V+pRwsvI4dzDraN+nfHFf0l
IyfbBv6VefyhfTloFZKLzAsSf3mj2E9X5ieq0FhXMcgMfua+4l8/8biwb0ZeQG5O
OUtQEUr/YkIaRBPvFeS/nG4FFG0sn/wIJN5lE+21FzyQ/2NnekW4kztZ+jv2cKhc
gsy4ULNBe/BVSZ+07oxsObwPAswKVj8050gedaCKEwC1AIgWklpM2nXNwWvakM/d
qWbvrO/0fX077Z9hdOipeC3bM2C1BBJT2lRyGTK/eKh/c58SGo5K2ZBADYR9MdD6
LMlsccBLqyhDI+bWvGQA5mmUo+EKt63d5kMHQUCY6kYruO7aUm/cHDszTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6iZ3Q2usmkk3lsz+O0Tp3UygO/MB8GA1UdIwQY
MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt
MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz
LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzYnLXWi
oy+o8aDKCd5JJrCGkcJpxN4lxbX/wHwWySXbr0GDNYWKrPc6YXHzQkO/nQV/AM2C
QU850y76Dxwj9RdwYoX36HtHtsW0YIf57QueTq11mBHz+jnlCDkWqtluiRZgC+x6
I0RsuZLquK6LMabvDIUOE/HlU6c0AQNaNd4xVpis+9xfelh6QmDnQi65npqNz0+/
vL/l8XTimfP1xrtyrX7VJCcYEQNuTrbFkQDgdIQxRAkGGJ/zMT5cO/KX7NImtroB
6pv4l5HDxTQYS+B22Wvo8hIC8x/lLEIxRjlAWrY04la4EhKXkRZ+FlG5zakvbRuO
hkKiLHByd1SKqw==
-----END CERTIFICATE-----
Generated at Sun May 31 10:48:28 2026 by rpki-client