Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
File: bW-CVvrIKqy2grohaoMDO1FFalI.mft (raw, json)
Hash identifier: XJRLHSH9sGVmsIxcnpX6MvLc8P83KMr0Kvv2kJ0Zs5Y=
Subject key identifier: BE:92:25:8E:39:15:FD:FC:48:B5:0E:98:FB:6B:33:E6:AB:D7:30:1A
Authority key identifier: 6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52
Certificate issuer: /CN=6d6f8256fac82aacb682ba216a83033b51456a52
Certificate serial: 019D382E4559A95151EFAB5BCA014895C36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
Manifest number: DC
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: YLdG9gSP6tOA5nRVAr6Czesuu7c.roa (hash: Esw0AP/etP1/+NNzQ2J+2kPKUVRATKNpi71gEgTw88k=)
2: bW-CVvrIKqy2grohaoMDO1FFalI.crl (hash: hTAdJukq0L7jVOBQtrmrEEYzk31xJuADXcvlLjeG1/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:45:59:a9:51:51:ef:ab:5b:ca:01:48:95:c3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6f8256fac82aacb682ba216a83033b51456a52
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=be92258e3915fdfc48b50e98fb6b33e6abd7301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:1e:14:16:89:2b:1c:42:fb:bb:31:6e:4c:
3e:76:bf:d6:96:f3:ba:99:ca:c9:df:33:f4:eb:a5:
26:be:db:18:ad:b9:e2:71:f3:85:69:f4:56:7d:4c:
1a:b6:99:98:b2:0b:b4:8c:2a:c3:4e:a9:4f:20:16:
01:a2:f2:73:94:fb:e9:08:ee:37:cc:17:52:fb:71:
3e:f1:9b:62:45:30:17:8a:ac:43:68:f2:2b:1c:93:
3d:3f:5c:b7:06:f9:2f:c7:0d:4c:84:5e:db:ee:31:
c2:23:9b:90:0f:96:63:4e:55:c3:2c:d0:67:1c:7b:
1c:10:4c:72:8d:ad:2e:d2:ed:61:52:7f:30:29:85:
8d:26:d5:6c:9e:f3:3e:6f:bc:36:f1:7f:37:02:33:
f7:ab:b1:49:24:1c:af:46:5d:4b:f1:ad:8a:21:7e:
f2:7d:e1:f1:81:1d:6e:ec:a4:5d:20:a3:cd:0f:7b:
52:4f:f7:d6:78:33:1f:f5:6f:0a:55:fe:56:e6:f9:
02:e0:be:be:9f:79:17:be:65:06:49:29:3f:f5:4a:
88:09:2c:e4:c1:68:fb:8e:7f:09:6b:4b:54:99:fe:
a5:eb:d6:9a:d2:21:f7:5f:39:69:4e:53:25:76:9a:
90:d1:05:a6:19:75:cb:84:ae:d9:21:ac:5d:5a:46:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:92:25:8E:39:15:FD:FC:48:B5:0E:98:FB:6B:33:E6:AB:D7:30:1A
X509v3 Authority Key Identifier:
keyid:6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4f:a9:71:90:e0:11:46:50:20:1c:02:c9:3f:d1:cc:d2:30:
58:f4:c2:63:37:25:bb:41:96:25:8e:2e:20:95:31:0a:5a:5e:
ff:34:98:ad:c9:78:60:41:f4:93:d3:4b:c9:ff:e4:cd:61:26:
8a:c7:92:0a:53:b2:f1:f2:6f:87:33:89:b2:a1:92:9d:3e:b5:
da:d6:8b:4e:cb:dd:63:5b:0b:af:0f:b6:09:88:7a:f7:9c:c6:
b3:b2:a2:6d:c4:3f:a2:c8:bf:3d:93:ac:cb:98:fa:e4:ca:93:
ce:1e:88:c1:05:a4:c8:93:7f:2f:50:3d:46:26:b4:5f:f8:81:
f8:89:e9:c8:12:fe:69:b7:ad:95:df:5e:ac:a5:bb:77:06:a7:
bc:20:57:a4:31:ce:98:2b:29:7b:b6:58:3f:96:d1:3a:59:af:
8d:73:be:6a:ff:a0:27:c3:78:03:46:3f:b0:74:6d:23:71:af:
c1:06:96:7a:b8:63:75:78:d6:fb:05:1b:ac:72:8a:5c:fd:05:
9d:da:21:fe:96:03:9e:09:7c:a9:53:75:39:7e:a1:77:bc:7a:
b8:cd:f7:53:3f:3b:fd:e3:b3:4c:db:6d:b0:52:4c:a5:9d:1c:
56:8c:fb:7c:96:7a:b2:46:ab:ee:b4:72:97:fb:65:bf:72:bc:
80:0f:3a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkVZqVFR76tbygFIlcNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNmY4MjU2ZmFjODJhYWNiNjgyYmEyMTZhODMwMzNiNTE0
NTZhNTIwHhcNMjYwMzI5MDYwMDQ5WhcNMjYwMzMwMDYwMDQ5WjAzMTEwLwYDVQQD
EyhiZTkyMjU4ZTM5MTVmZGZjNDhiNTBlOThmYjZiMzNlNmFiZDczMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcUeFBaJKxxC+7sxbkw+dr/WlvO6
mcrJ3zP066UmvtsYrbnicfOFafRWfUwatpmYsgu0jCrDTqlPIBYBovJzlPvpCO43
zBdS+3E+8ZtiRTAXiqxDaPIrHJM9P1y3Bvkvxw1MhF7b7jHCI5uQD5ZjTlXDLNBn
HHscEExyja0u0u1hUn8wKYWNJtVsnvM+b7w28X83AjP3q7FJJByvRl1L8a2KIX7y
feHxgR1u7KRdIKPND3tST/fWeDMf9W8KVf5W5vkC4L6+n3kXvmUGSSk/9UqICSzk
wWj7jn8Ja0tUmf6l69aa0iH3XzlpTlMldpqQ0QWmGXXLhK7ZIaxdWkaqTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6SJY45Ff38SLUOmPtrM+ar1zAaMB8GA1UdIwQY
MBaAFG1vglb6yCqstoK6IWqDAztRRWpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlctQ1Z2cklLcXkyZ3JvaGFvTURPMUZGYWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YzBmYjktODlkOS00NGIyLWE3MzAt
M2VmYTVlZGYzNzUyLzEvYlctQ1Z2cklLcXkyZ3JvaGFvTURPMUZGYWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy85YzBmYjktODlkOS00NGIyLWE3MzAtM2VmYTVlZGYzNzUy
LzEvYlctQ1Z2cklLcXkyZ3JvaGFvTURPMUZGYWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU+pcZDg
EUZQIBwCyT/RzNIwWPTCYzclu0GWJY4uIJUxClpe/zSYrcl4YEH0k9NLyf/kzWEm
iseSClOy8fJvhzOJsqGSnT612taLTsvdY1sLrw+2CYh695zGs7KibcQ/osi/PZOs
y5j65MqTzh6IwQWkyJN/L1A9Ria0X/iB+InpyBL+abetld9erKW7dwanvCBXpDHO
mCspe7ZYP5bROlmvjXO+av+gJ8N4A0Y/sHRtI3GvwQaWerhjdXjW+wUbrHKKXP0F
ndoh/pYDngl8qVN1OX6hd7x6uM33Uz87/eOzTNttsFJMpZ0cVoz7fJZ6skar7rRy
l/tlv3K8gA86ug==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:51 2026 by rpki-client