Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: Aj9NDo6OnNEcKcKVvyeBca7DmmQRvzRpnGMjtA0NH84=
Subject key identifier: DC:16:AA:E2:1D:C5:A0:29:20:92:B1:13:2A:4E:AB:59:A9:F0:9E:D4
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 01A13B92B4521D82D3773855C38E3EFEDB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 1AA4
Signing time: Wed 14 Oct 2026 18:00:32 +0000
Manifest this update: Wed 14 Oct 2026 18:00:32 +0000
Manifest next update: Thu 15 Oct 2026 18:00:32 +0000
Files and hashes: 1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: AC3GUWfFPhgo7jFS3epb9DkEOCE7gN5H8VHOK8bVSS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:92:b4:52:1d:82:d3:77:38:55:c3:8e:3e:fe:db:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Oct 14 18:00:32 2026 GMT
Not After : Oct 15 18:00:32 2026 GMT
Subject: CN=dc16aae21dc5a0292092b1132a4eab59a9f09ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:5a:1a:a7:49:27:3a:6f:e0:d4:60:60:69:
11:64:f6:ae:40:89:bf:7c:03:6b:d2:1c:39:c8:8a:
67:d9:eb:74:91:3e:c6:8a:cc:4b:b9:1a:af:de:e0:
54:14:98:6d:12:2b:15:15:b3:40:9e:5a:c4:da:f7:
83:7f:31:32:9b:e0:55:0e:df:7b:78:c2:9f:24:36:
c8:34:70:ba:c2:54:a7:39:77:92:d7:a4:8f:da:d4:
2d:05:5c:fa:bf:69:2f:61:5a:17:07:e8:49:ed:4d:
84:70:02:20:31:49:39:e6:64:9e:19:26:ff:f5:5a:
0b:6f:63:83:5e:0e:99:29:45:f2:b5:cd:17:06:bd:
77:67:39:8b:69:52:83:6a:70:2a:bb:44:7f:91:2a:
a4:9e:2c:10:6d:08:50:20:65:8f:c1:3b:b1:72:11:
be:39:8d:96:49:c2:6b:28:62:28:33:94:9a:ec:da:
a9:19:a1:69:fb:39:05:21:e6:b8:fc:31:3a:0a:f6:
41:f9:f3:26:4e:df:9a:3e:82:5e:8a:3b:9c:e2:f9:
32:68:df:b4:d3:eb:8c:5d:a2:d5:bf:18:ec:7a:11:
d8:ab:e0:9b:2e:ab:3b:cb:0d:2f:85:9b:db:17:85:
99:49:67:89:0e:ce:24:b9:cb:48:a6:28:22:0d:e6:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:AA:E2:1D:C5:A0:29:20:92:B1:13:2A:4E:AB:59:A9:F0:9E:D4
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a0:c2:f0:bc:44:62:2b:a4:45:d6:67:b0:ae:68:bd:73:1a:
a0:4d:02:05:f8:6c:a4:5f:d2:c1:e2:a0:d9:ac:5e:83:26:63:
01:e8:27:6f:01:0f:95:b6:cf:cf:dd:4e:fa:50:2e:87:5c:23:
37:0a:94:48:22:af:c5:35:5c:e7:45:19:38:b7:2e:4f:55:16:
99:04:29:ed:4c:8b:9a:c3:43:5c:2b:cd:cb:cd:4e:f1:c1:d0:
b3:cb:61:2a:a7:0b:bb:cf:44:86:3d:fc:98:a8:da:18:8c:0a:
f1:3e:34:7f:4a:c4:8c:4d:9c:1f:48:34:f3:09:ee:d8:30:91:
7b:1f:03:d6:82:8d:6e:92:a8:dd:25:23:a0:55:e8:73:43:66:
85:7d:da:7c:ed:f0:9b:13:4a:7a:17:ba:e0:ca:76:72:12:b1:
9d:46:d8:43:2a:03:b1:48:ac:0a:b6:7a:15:aa:7d:3c:d6:dd:
5f:90:24:96:11:5a:89:b3:e0:dd:71:5d:24:06:5f:1c:64:de:
5b:1e:4a:c7:d0:92:c5:44:9c:17:d2:de:cf:31:36:4a:72:a6:
a8:60:c0:95:43:c3:0f:b4:39:3d:b8:d5:52:f4:33:8f:15:0b:
4f:6d:29:57:0f:88:8a:e3:c9:be:6a:cd:b7:8b:eb:a6:2b:b4:
66:0d:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:11:46 2026 by rpki-client