Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File: bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier: joI2YQcP1b6HJ5JXr9VRizED/mFN0JbdDngeTtRnrCQ=
Subject key identifier: 14:91:43:B7:8A:5A:E2:A9:0A:1B:8F:4F:35:1C:F5:36:50:72:0C:EC
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer: /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial: 01A0834171C1925916F5151A442F5E42F67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number: 02F2
Signing time: Tue 08 Sep 2026 23:01:39 +0000
Manifest this update: Tue 08 Sep 2026 23:01:39 +0000
Manifest next update: Wed 09 Sep 2026 23:01:39 +0000
Files and hashes: 1: IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (hash: MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=)
2: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: iorYnmug1h37QaCQpbLTxTb8+eSqjcMxMkROFEh/xK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 23:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:41:71:c1:92:59:16:f5:15:1a:44:2f:5e:42:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Validity
Not Before: Sep 8 23:01:39 2026 GMT
Not After : Sep 9 23:01:39 2026 GMT
Subject: CN=149143b78a5ae2a90a1b8f4f351cf53650720cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:8f:26:36:3a:83:df:b6:3e:a4:44:d7:9f:
81:25:4a:ca:2a:54:a3:bd:5a:f9:7d:56:72:e4:b0:
39:27:68:77:2b:b4:76:b4:99:0b:7f:2c:41:8a:11:
96:f1:95:b9:f1:6b:c2:5a:4a:b9:76:5e:f1:36:5c:
ba:8a:b9:6f:a1:29:79:77:8b:63:45:85:67:f1:72:
73:c7:e1:65:f8:7e:61:d6:04:40:ee:6a:a5:01:70:
7b:6f:ba:c7:91:7f:4c:13:4e:3c:99:62:1c:31:e6:
14:f1:fd:eb:fb:c5:77:55:ab:e9:a4:64:e2:aa:0d:
46:b3:f9:cd:c0:2e:48:35:dd:46:b4:1f:02:33:2d:
bf:07:33:3e:c6:99:62:b2:1f:91:e0:43:f6:aa:3c:
5e:01:6e:01:e0:be:14:ac:66:82:3f:45:e3:e6:1c:
0d:b0:83:f3:c5:5b:fc:09:1d:c7:de:d6:48:a2:43:
42:c6:83:80:40:b3:63:64:96:37:64:89:bd:aa:ab:
6c:41:cf:ca:d8:7b:82:4c:2c:1b:33:af:15:22:04:
80:e4:82:38:fe:7b:d9:be:f1:05:42:39:dd:9d:53:
8b:2b:ee:10:ad:cc:80:b5:1f:e3:f5:42:78:2e:44:
4a:07:9b:34:c0:d4:e3:67:4b:ca:ba:f6:1d:01:e1:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:43:B7:8A:5A:E2:A9:0A:1B:8F:4F:35:1C:F5:36:50:72:0C:EC
X509v3 Authority Key Identifier:
keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:33:39:b1:ef:e2:28:af:c6:a5:d2:f5:bd:c6:ec:1e:a7:05:
f6:fd:eb:66:47:46:70:49:7b:4d:03:48:89:68:42:1d:70:1a:
40:34:bb:04:7a:71:fa:6d:34:ef:4d:fe:94:4d:d4:c0:36:87:
78:ca:ad:54:23:01:9c:a3:8c:96:b6:08:73:69:66:8d:f7:ee:
a5:1a:a2:a1:87:f4:21:4e:ff:11:47:2c:71:8a:db:95:c0:54:
de:08:0d:f3:1a:cc:45:06:51:ea:b7:9a:50:d0:86:3f:6f:14:
3c:f1:f7:dd:9d:96:89:0c:19:1b:4a:8b:46:3c:a6:62:41:25:
5b:19:8c:61:e2:3c:7c:f3:8b:0e:d6:77:d3:6f:82:68:ef:61:
6c:15:72:a7:42:74:a8:44:4d:19:a1:1b:74:68:98:33:a0:6a:
14:e4:be:f6:cb:ba:93:15:62:fb:85:b0:84:7e:f2:b9:b7:39:
0d:25:5f:87:62:ce:be:c3:0a:56:1f:57:31:97:d6:ea:79:ae:
04:5e:9c:52:d6:da:b8:f2:39:40:7e:82:cf:a2:4d:bb:28:e0:
72:47:bb:82:61:9f:b6:12:3a:77:3e:25:91:56:6b:15:61:94:
eb:22:26:61:8f:ed:b8:90:1c:97:63:f6:c9:31:b5:3b:47:6c:
81:45:90:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCDQXHBklkW9RUaRC9eQvZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGM2ZTUxNGY0ZjYyZWFkYjNlMjcxMGVhYzljOWYyZjA2
NDVmNzgwHhcNMjYwOTA4MjMwMTM5WhcNMjYwOTA5MjMwMTM5WjAzMTEwLwYDVQQD
EygxNDkxNDNiNzhhNWFlMmE5MGExYjhmNGYzNTFjZjUzNjUwNzIwY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+OPJjY6g9+2PqRE15+BJUrKKlSj
vVr5fVZy5LA5J2h3K7R2tJkLfyxBihGW8ZW58WvCWkq5dl7xNly6irlvoSl5d4tj
RYVn8XJzx+Fl+H5h1gRA7mqlAXB7b7rHkX9ME048mWIcMeYU8f3r+8V3VavppGTi
qg1Gs/nNwC5INd1GtB8CMy2/BzM+xplish+R4EP2qjxeAW4B4L4UrGaCP0Xj5hwN
sIPzxVv8CR3H3tZIokNCxoOAQLNjZJY3ZIm9qqtsQc/K2HuCTCwbM68VIgSA5II4
/nvZvvEFQjndnVOLK+4QrcyAtR/j9UJ4LkRKB5s0wNTjZ0vKuvYdAeGobQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSRQ7eKWuKpChuPTzUc9TZQcgzsMB8GA1UdIwQY
MBaAFG3cblFPT2Lq2z4nEOrJyfLwZF94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2Mt
YjZiNzRhZDc1MjJhLzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2MtYjZiNzRhZDc1MjJh
LzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazM5se/i
KK/GpdL1vcbsHqcF9v3rZkdGcEl7TQNIiWhCHXAaQDS7BHpx+m00703+lE3UwDaH
eMqtVCMBnKOMlrYIc2lmjffupRqioYf0IU7/EUcscYrblcBU3ggN8xrMRQZR6rea
UNCGP28UPPH33Z2WiQwZG0qLRjymYkElWxmMYeI8fPOLDtZ302+CaO9hbBVyp0J0
qERNGaEbdGiYM6BqFOS+9su6kxVi+4WwhH7yubc5DSVfh2LOvsMKVh9XMZfW6nmu
BF6cUtbauPI5QH6Cz6JNuyjgcke7gmGfthI6dz4lkVZrFWGU6yImYY/tuJAcl2P2
yTG1O0dsgUWQDw==
-----END CERTIFICATE-----
Generated at Wed Sep 9 10:22:19 2026 by rpki-client