Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: DAIBcg7LHo/GuPUlCuREM8jZ9If4eCnGilPWVdQiFNg=
Subject key identifier: A7:4B:E0:1D:C5:99:13:51:D1:65:4F:B3:20:58:E9:AC:E4:27:56:40
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 01A0E81CC918FD727E262F94BD13CA04FFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 1A83
Signing time: Mon 28 Sep 2026 13:03:15 +0000
Manifest this update: Mon 28 Sep 2026 13:03:15 +0000
Manifest next update: Tue 29 Sep 2026 13:03:15 +0000
Files and hashes: 1: 8t3JN_7LDw-CGs7GhP5-c9YQT3Q.asa (hash: vle8JAoc+z41qSzbAnkjsok+oNKxAJh14QSzgoReOFc=)
2: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: fbQszyB4Vv8d2NDAExdXReWQAVsYCoSBNOzeyoJCxL8=)
3: HlyeT63d_hTRQoUdqffq7QL-QuQ.roa (hash: x2NNm6m6wU3oFBfBTa5MizhpP5bdnw5qPXYrszPxhbc=)
4: MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa (hash: 4wqf+3mVFGC07sq2JR8okYP1Xx2LwUoWzZSDpdV1+vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:c9:18:fd:72:7e:26:2f:94:bd:13:ca:04:ff:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Sep 28 13:03:15 2026 GMT
Not After : Sep 29 13:03:15 2026 GMT
Subject: CN=a74be01dc5991351d1654fb32058e9ace4275640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:e1:96:09:6d:71:c6:be:00:96:e0:92:50:
27:de:9e:44:45:53:2b:02:f1:54:5f:86:db:77:21:
a4:f3:67:60:0d:b8:52:0e:ad:3e:99:3f:e2:e4:e7:
5b:57:0c:86:f7:e2:00:63:88:fb:36:83:42:26:38:
75:01:1e:da:c1:04:ae:5f:8f:e1:b6:4a:6e:00:b1:
d9:e5:5c:d5:ea:d6:d4:0d:90:de:8e:68:cf:0c:92:
94:5a:32:4e:a5:17:13:a9:ce:6e:f1:85:b8:79:35:
3e:8b:9b:fd:7f:54:83:60:0a:ba:1e:78:ba:fb:dc:
18:6f:78:8a:58:22:d4:68:4a:9f:d6:91:12:33:e4:
c5:e6:e4:cd:6c:28:85:4b:88:1b:11:c2:49:3f:54:
6f:d6:40:60:cf:64:12:fd:d3:ba:a2:96:67:d0:c0:
07:4c:08:c1:b9:2c:66:1b:2a:76:c9:72:74:a8:fa:
18:b0:a3:72:40:86:43:00:07:42:68:6b:9a:5e:1b:
08:9a:e5:ed:15:91:e9:cc:c9:35:d7:84:c1:71:b2:
97:ee:27:d7:b5:6f:5c:65:3c:89:65:e5:a3:8e:ae:
17:42:3d:c5:40:b9:c7:50:b0:44:25:3f:b0:d2:8c:
e7:74:82:0d:f0:75:2e:29:cb:ad:a4:6a:2f:8d:a3:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4B:E0:1D:C5:99:13:51:D1:65:4F:B3:20:58:E9:AC:E4:27:56:40
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9c:28:b7:29:10:f6:e2:2b:de:90:95:51:d4:14:8f:25:77:
21:3b:03:3c:46:bd:86:e5:4e:df:ab:60:52:81:39:67:8f:7f:
57:61:61:92:6b:46:58:b8:e5:48:05:4b:3a:45:a4:e9:06:84:
2c:d9:f9:96:47:11:6e:fe:be:b2:42:dc:a6:05:fb:f2:35:ae:
05:06:98:c3:98:ca:07:53:0e:6b:19:cb:f6:e0:0f:89:30:c3:
27:64:9e:d2:0e:c6:9d:65:c7:19:bb:1d:04:9e:f2:b1:01:8a:
6a:3a:35:c1:a6:dd:39:fd:95:07:57:8d:ba:64:21:5c:b6:d1:
c3:8b:77:99:d6:f4:eb:be:c3:24:36:b6:62:40:9f:5f:ca:c1:
54:77:ad:04:27:f7:7e:38:a0:c5:2c:17:d4:75:21:92:2c:fc:
04:0d:eb:8d:93:52:14:6f:8f:a7:da:db:d0:6c:ae:75:97:df:
86:b7:f3:81:f3:f7:52:3e:f9:77:c6:40:ef:14:87:29:d6:b9:
7c:13:d8:d4:78:67:13:5a:5a:f9:45:53:ac:12:e1:a8:50:cc:
55:a7:12:25:ce:b8:d3:77:8c:2e:d0:cd:c3:a2:71:ac:79:26:
e1:53:01:cd:29:3e:9a:62:45:6f:26:fe:e4:1f:28:c3:28:07:
1a:b8:fc:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHMkY/XJ+Ji+UvRPKBP/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx
MWQwNTEwHhcNMjYwOTI4MTMwMzE1WhcNMjYwOTI5MTMwMzE1WjAzMTEwLwYDVQQD
EyhhNzRiZTAxZGM1OTkxMzUxZDE2NTRmYjMyMDU4ZTlhY2U0Mjc1NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8rhlgltcca+AJbgklAn3p5ERVMr
AvFUX4bbdyGk82dgDbhSDq0+mT/i5OdbVwyG9+IAY4j7NoNCJjh1AR7awQSuX4/h
tkpuALHZ5VzV6tbUDZDejmjPDJKUWjJOpRcTqc5u8YW4eTU+i5v9f1SDYAq6Hni6
+9wYb3iKWCLUaEqf1pESM+TF5uTNbCiFS4gbEcJJP1Rv1kBgz2QS/dO6opZn0MAH
TAjBuSxmGyp2yXJ0qPoYsKNyQIZDAAdCaGuaXhsImuXtFZHpzMk114TBcbKX7ifX
tW9cZTyJZeWjjq4XQj3FQLnHULBEJT+w0ozndIIN8HUuKcutpGovjaO4KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdL4B3FmRNR0WVPsyBY6azkJ1ZAMB8GA1UdIwQY
MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt
ZmI0NzQwZmRhMjUwLzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw
LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJwotykQ
9uIr3pCVUdQUjyV3ITsDPEa9huVO36tgUoE5Z49/V2FhkmtGWLjlSAVLOkWk6QaE
LNn5lkcRbv6+skLcpgX78jWuBQaYw5jKB1MOaxnL9uAPiTDDJ2Se0g7GnWXHGbsd
BJ7ysQGKajo1wabdOf2VB1eNumQhXLbRw4t3mdb0677DJDa2YkCfX8rBVHetBCf3
fjigxSwX1HUhkiz8BA3rjZNSFG+Pp9rb0GyudZffhrfzgfP3Uj75d8ZA7xSHKda5
fBPY1HhnE1pa+UVTrBLhqFDMVacSJc6403eMLtDNw6JxrHkm4VMBzSk+mmJFbyb+
5B8owygHGrj8Jw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:49:34 2026 by rpki-client