Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: mTWa6AcvUEPMSYIxMYmuEAFRpMAlvXg/iKY1rO7PbiU=
Subject key identifier: 40:84:4F:FC:17:40:47:13:48:44:40:17:19:F0:ED:0D:8E:D0:B5:20
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 019E2D7117406E62A6D11EA82C6239F746CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 21:00:46 +0000
Manifest this update: Fri 15 May 2026 21:00:46 +0000
Manifest next update: Sat 16 May 2026 21:00:46 +0000
Files and hashes: 1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: EbxS0ZOyXnQAYFplkI9lHEneXs1pM4GFxPuH7kF37M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 15:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:71:17:40:6e:62:a6:d1:1e:a8:2c:62:39:f7:46:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: May 15 21:00:46 2026 GMT
Not After : May 16 21:00:46 2026 GMT
Subject: CN=40844ffc174047134844401719f0ed0d8ed0b520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:8d:ea:1d:33:2c:32:72:8f:17:01:09:02:
ef:35:34:d8:a1:20:36:bc:6d:84:5a:65:ee:41:29:
fb:18:0a:04:44:42:e7:f0:6f:e8:82:58:0a:06:7e:
08:52:67:52:4b:41:26:f7:bf:2d:60:6b:51:3f:6a:
a3:3e:cd:75:c1:4c:57:3f:b5:f9:60:0c:b0:78:f2:
17:f4:be:3d:ea:11:ef:84:bc:82:83:af:22:b8:25:
73:e4:fa:fe:6f:88:94:fe:11:5e:5f:21:35:2e:a0:
6e:30:c6:b1:2e:ea:26:e1:99:e6:7e:a2:13:26:e8:
a1:9a:b5:83:d7:48:cc:30:66:f4:98:5e:b2:5f:64:
2a:5a:0f:0f:9f:11:89:ed:38:c2:86:1b:dc:39:fe:
79:94:5b:b3:82:c3:74:50:3e:d5:80:8b:e6:a0:ca:
6f:9b:be:ed:64:dd:b1:f3:86:74:63:21:b9:e4:d8:
68:56:cc:c3:95:62:b0:90:dd:7f:96:47:35:df:85:
3a:f5:d9:f9:9f:1d:de:45:bc:90:a0:dc:e1:2f:a4:
17:bc:a2:1d:6c:33:73:58:a5:dd:e0:a5:ba:65:f3:
ec:4a:a8:b5:59:1a:64:b9:f3:22:2c:45:ee:ac:42:
74:d3:a4:ae:f8:7b:47:ab:d5:94:30:74:00:2c:ec:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:4F:FC:17:40:47:13:48:44:40:17:19:F0:ED:0D:8E:D0:B5:20
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1b:e1:8b:e1:c6:59:98:9a:1b:e5:a6:ef:f1:c9:1d:15:79:
e7:1d:5b:15:9a:e5:3d:6c:40:94:b1:45:55:aa:dc:2e:cd:d6:
a2:bd:63:72:47:14:c0:7f:89:76:d4:1f:6a:0d:d1:30:86:4d:
24:af:c1:3e:93:c5:7e:67:41:7e:6b:bd:38:0e:54:4f:34:ad:
e6:70:5e:02:69:cd:2b:43:2e:37:a1:19:4b:3e:97:a5:9c:e7:
d4:d1:5d:8f:64:f3:26:6e:ab:54:4d:7a:6d:0c:5e:43:20:22:
69:d7:bc:a5:fa:ca:0d:2f:25:be:38:bf:4c:f9:ee:02:28:2b:
3e:1d:ac:f1:0a:d2:79:59:f9:3f:86:26:b2:57:86:51:f4:2b:
87:50:be:9c:fa:d2:cd:48:65:45:7b:0b:d9:e8:f4:29:b8:83:
e1:c3:f9:e3:ad:f1:83:6f:07:44:b5:fb:8d:0d:a7:83:f4:ff:
2e:7c:f8:bd:9c:6c:9f:3c:60:b6:ed:42:61:b1:82:86:a4:5e:
4e:93:14:b9:59:b7:8c:eb:b2:59:f6:30:36:69:07:ef:9d:06:
31:ca:20:0e:97:06:01:72:ec:a8:19:44:ae:b9:e9:a1:a3:31:
4c:3c:cd:63:bc:44:d4:66:10:9a:98:94:d2:1a:70:5f:3f:e7:
46:98:1e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4tcRdAbmKm0R6oLGI590bLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2
OTkwZjcwHhcNMjYwNTE1MjEwMDQ2WhcNMjYwNTE2MjEwMDQ2WjAzMTEwLwYDVQQD
Eyg0MDg0NGZmYzE3NDA0NzEzNDg0NDQwMTcxOWYwZWQwZDhlZDBiNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxSN6h0zLDJyjxcBCQLvNTTYoSA2
vG2EWmXuQSn7GAoERELn8G/oglgKBn4IUmdSS0Em978tYGtRP2qjPs11wUxXP7X5
YAywePIX9L496hHvhLyCg68iuCVz5Pr+b4iU/hFeXyE1LqBuMMaxLuom4ZnmfqIT
JuihmrWD10jMMGb0mF6yX2QqWg8PnxGJ7TjChhvcOf55lFuzgsN0UD7VgIvmoMpv
m77tZN2x84Z0YyG55NhoVszDlWKwkN1/lkc134U69dn5nx3eRbyQoNzhL6QXvKId
bDNzWKXd4KW6ZfPsSqi1WRpkufMiLEXurEJ006Su+HtHq9WUMHQALOxaSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECET/wXQEcTSERAFxnw7Q2O0LUgMB8GA1UdIwQY
MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt
MGZiZTdiZDc2ZmZiLzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi
LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRvhi+HG
WZiaG+Wm7/HJHRV55x1bFZrlPWxAlLFFVarcLs3Wor1jckcUwH+JdtQfag3RMIZN
JK/BPpPFfmdBfmu9OA5UTzSt5nBeAmnNK0MuN6EZSz6XpZzn1NFdj2TzJm6rVE16
bQxeQyAiade8pfrKDS8lvji/TPnuAigrPh2s8QrSeVn5P4YmsleGUfQrh1C+nPrS
zUhlRXsL2ej0KbiD4cP5463xg28HRLX7jQ2ng/T/Lnz4vZxsnzxgtu1CYbGChqRe
TpMUuVm3jOuyWfYwNmkH750GMcogDpcGAXLsqBlErrnpoaMxTDzNY7xE1GYQmpiU
0hpwXz/nRpgeYA==
-----END CERTIFICATE-----
Generated at Fri May 15 23:12:37 2026 by rpki-client