Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: Hu0opu8ecLWkb5sxfpyjMQJ6NolTppMSyIbK4UqRU1M=
Subject key identifier: 79:47:3A:58:93:45:A1:38:3B:60:69:16:22:8B:3D:B7:4C:83:6D:87
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01A031ED9E99175BCFAAC3A6FD4F278C265C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 1221
Signing time: Mon 24 Aug 2026 04:00:51 +0000
Manifest this update: Mon 24 Aug 2026 04:00:51 +0000
Manifest next update: Tue 25 Aug 2026 04:00:51 +0000
Files and hashes: 1: 0fPiuwb4X2weC-gKDNJaEbSPHqw.roa (hash: S57h9JaZkZt0GA+n+fixlPL0kJI1rFB4fls5bIvI/yg=)
2: 9CV2ccBp-wqUL_fP6QBnKryYIpM.roa (hash: EVfvSX2FaZ2DaE0/qfbpH/rDdeen/hkG4N8QfWHeB08=)
3: JKGW4gg3OI-zymSfSwtWhhEO1-c.roa (hash: Hj2gZmYvtr1JqmPfTXMpYrbuy1yiPpWa6zihMnTrs60=)
4: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=)
5: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: 5eWAa1ATA0X6RWUtTpEWPOzubW9opBCiqKR28Pu65UA=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: vZOfCIg9L8SEJQT_PB29EUcqp1o.roa (hash: D6jkKtX92Ek141r9wDvoefr0ADP2trBgJ4ZfnvX2MDA=)
9: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:31:ed:9e:99:17:5b:cf:aa:c3:a6:fd:4f:27:8c:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Aug 24 04:00:51 2026 GMT
Not After : Aug 25 04:00:51 2026 GMT
Subject: CN=79473a589345a1383b606916228b3db74c836d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:e0:2a:0d:b0:e6:d4:83:2d:5e:c1:dc:19:
81:1e:28:11:85:d9:21:1d:1e:74:ff:91:cf:cc:8a:
94:20:f5:1c:00:e1:65:23:e6:b2:e1:1c:9b:bd:4d:
20:88:15:50:a7:73:97:5b:57:8c:13:c8:16:da:de:
7d:0f:d9:19:da:9d:f2:44:f9:3b:67:88:9f:c0:4e:
d1:45:83:b9:7f:79:2a:4a:a5:e8:6f:80:34:92:a1:
89:b7:af:b5:ab:68:a6:74:68:05:00:97:54:08:b2:
42:13:24:18:42:e7:50:ac:6c:27:bc:7b:6e:36:41:
f5:b4:5b:3e:99:f6:8e:da:82:33:8b:42:fb:94:8c:
60:37:fe:0b:99:ef:c2:69:6c:7a:04:53:e8:89:a5:
f3:e3:2d:39:3d:67:15:f6:b2:e5:41:87:a5:fe:dc:
98:c3:d9:d0:20:a6:b1:2d:fe:cc:af:b0:30:67:95:
9b:42:a4:4a:37:3b:0c:b0:7a:99:73:7d:cc:50:40:
27:ed:3b:92:84:27:45:ff:fe:58:fd:36:9e:58:84:
1e:04:cb:9c:14:f1:f0:04:76:54:d1:38:3e:9c:dc:
fe:5f:02:b0:ed:28:fb:a5:a8:8d:8e:e6:14:39:e0:
0c:42:bb:81:b3:2c:a0:fc:f3:59:38:92:04:22:01:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:3A:58:93:45:A1:38:3B:60:69:16:22:8B:3D:B7:4C:83:6D:87
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:61:b0:38:e9:ce:e4:43:68:c6:8e:6d:36:3b:72:d1:6b:20:
0a:41:74:3f:94:99:f7:4a:18:7d:4b:0e:ec:da:aa:09:2e:52:
26:81:44:9b:78:48:eb:4c:60:c1:b5:7a:8c:73:b6:ba:bc:2a:
84:4b:b2:ee:59:30:2a:d5:0c:20:07:78:58:4e:37:e1:19:a5:
b1:7d:27:6d:3e:77:88:b8:75:cd:4e:90:b9:e3:64:6b:93:9f:
4f:95:b4:79:66:46:f3:6f:99:9a:03:5c:be:54:01:14:9a:59:
7f:94:2f:b2:9c:fe:6e:4e:68:c8:70:eb:57:40:84:f0:e2:9d:
4d:49:73:17:6a:26:da:69:20:09:fb:64:0f:47:bb:7e:ab:c5:
15:4a:71:ae:b0:0f:eb:68:5d:a1:f8:3b:0f:f5:9a:7f:69:89:
19:d3:38:73:3e:07:aa:9b:07:cf:92:19:46:f2:56:a6:16:8c:
68:de:50:9f:3f:72:5a:a9:b9:a9:18:1f:1a:35:2d:da:dc:98:
f3:b0:e3:bf:23:0a:54:a1:46:42:41:54:a0:32:9e:f2:cd:7c:
39:cf:11:72:32:e6:11:00:05:82:2c:69:e6:5e:11:a0:bf:16:
02:62:e2:48:3b:24:49:e4:50:21:61:7f:52:89:d1:54:c1:c7:
ba:6c:84:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAx7Z6ZF1vPqsOm/U8njCZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2
ZGVmMjAwHhcNMjYwODI0MDQwMDUxWhcNMjYwODI1MDQwMDUxWjAzMTEwLwYDVQQD
Eyg3OTQ3M2E1ODkzNDVhMTM4M2I2MDY5MTYyMjhiM2RiNzRjODM2ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB/gKg2w5tSDLV7B3BmBHigRhdkh
HR50/5HPzIqUIPUcAOFlI+ay4RybvU0giBVQp3OXW1eME8gW2t59D9kZ2p3yRPk7
Z4ifwE7RRYO5f3kqSqXob4A0kqGJt6+1q2imdGgFAJdUCLJCEyQYQudQrGwnvHtu
NkH1tFs+mfaO2oIzi0L7lIxgN/4Lme/CaWx6BFPoiaXz4y05PWcV9rLlQYel/tyY
w9nQIKaxLf7Mr7AwZ5WbQqRKNzsMsHqZc33MUEAn7TuShCdF//5Y/TaeWIQeBMuc
FPHwBHZU0Tg+nNz+XwKw7Sj7paiNjuYUOeAMQruBsyyg/PNZOJIEIgE9VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlHOliTRaE4O2BpFiKLPbdMg22HMB8GA1UdIwQY
MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt
MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1
LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2GwOOnO
5ENoxo5tNjty0WsgCkF0P5SZ90oYfUsO7NqqCS5SJoFEm3hI60xgwbV6jHO2urwq
hEuy7lkwKtUMIAd4WE434RmlsX0nbT53iLh1zU6QueNka5OfT5W0eWZG82+ZmgNc
vlQBFJpZf5Qvspz+bk5oyHDrV0CE8OKdTUlzF2om2mkgCftkD0e7fqvFFUpxrrAP
62hdofg7D/Waf2mJGdM4cz4HqpsHz5IZRvJWphaMaN5Qnz9yWqm5qRgfGjUt2tyY
87DjvyMKVKFGQkFUoDKe8s18Oc8RcjLmEQAFgixp5l4RoL8WAmLiSDskSeRQIWF/
UonRVMHHumyEzQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:23:19 2026 by rpki-client