Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: EOaKNdIyus/gnezHQLi/q/D/ylZouMyAtq/hjpMCqYM=
Subject key identifier: 5C:9F:DC:56:FF:63:82:EB:FF:0D:57:BF:E6:60:D5:58:30:FE:3F:C2
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 01A13F7030B141396D5493043D324FAB4AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 12:01:19 +0000
Manifest this update: Thu 15 Oct 2026 12:01:19 +0000
Manifest next update: Fri 16 Oct 2026 12:01:19 +0000
Files and hashes: 1: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (hash: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY=)
2: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: DAIVJUQVcl9iWJqklj3MaFkC7TbfnLl5mQQvoYPkfWk=)
3: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (hash: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:30:b1:41:39:6d:54:93:04:3d:32:4f:ab:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Oct 15 12:01:19 2026 GMT
Not After : Oct 16 12:01:19 2026 GMT
Subject: CN=5c9fdc56ff6382ebff0d57bfe660d55830fe3fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:8a:64:fa:5a:c7:bf:c5:2e:0d:43:4d:7b:
0d:95:15:cf:1f:b4:b3:56:da:de:57:1e:3e:93:19:
66:d5:90:f9:11:e7:b3:bb:ba:5d:57:58:ac:20:41:
04:59:04:96:76:da:3b:fc:4a:7d:99:9f:5d:a5:cc:
13:12:05:9b:1a:18:1a:b3:67:c3:ce:70:48:0d:22:
e2:c5:be:d8:12:d6:d7:48:a9:d9:45:64:f6:62:11:
fa:80:3e:39:47:8a:d1:bc:9d:1a:ec:30:ea:06:b9:
18:c0:52:fd:e3:3d:6a:b6:0e:47:ed:9e:55:a9:fd:
15:b4:47:a4:6a:8d:a5:33:94:74:55:23:4b:05:2b:
18:ec:a7:dd:81:87:c9:c7:46:d2:22:85:91:5f:7a:
b3:fd:79:ff:a5:64:12:30:4b:46:2f:2e:bb:b2:7a:
a0:a1:d4:38:95:cd:3d:94:d6:03:ef:ce:7d:53:4c:
97:c0:c1:f7:66:3f:e2:82:ca:ef:20:20:7a:3f:62:
50:9d:bb:a2:03:0e:c8:51:a5:bc:3d:d3:ac:b2:da:
e7:9f:dc:34:d7:e2:ea:f2:60:0c:9b:3b:ba:e7:fd:
9b:41:12:7e:3f:28:04:fe:73:06:e1:b0:50:9e:e0:
b9:50:6e:b5:b4:bd:7d:69:fd:75:19:39:b3:fe:d6:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:DC:56:FF:63:82:EB:FF:0D:57:BF:E6:60:D5:58:30:FE:3F:C2
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b2:d5:e0:cc:41:a5:70:bf:59:ab:eb:d8:a5:02:25:59:c1:
37:50:e6:db:1f:b3:13:3a:11:24:eb:61:37:93:9e:a2:28:33:
d8:f8:d3:32:67:f0:04:9c:ff:d7:c0:32:95:dc:4b:8b:be:2e:
86:c1:34:fb:10:41:96:fa:69:da:6b:34:ca:2d:33:ab:1b:0e:
b6:42:73:a7:63:2e:bc:a5:dd:fd:4a:3b:f3:4a:21:42:25:a8:
ee:00:34:5e:d3:10:60:c6:7e:16:49:d1:3a:f0:4e:76:29:b2:
d9:0c:90:93:83:40:d8:95:5a:d4:64:9b:80:55:05:ad:d0:5c:
ad:c6:73:2e:db:7f:6c:0c:e1:6b:87:f6:b0:88:62:8e:e4:5d:
af:65:fa:35:d1:2c:1c:36:0a:00:4f:4c:be:0b:8d:83:b7:4f:
ec:fb:3a:e3:f0:a2:c5:d7:4a:29:6f:66:e2:06:db:f2:4b:fa:
97:c5:ae:e4:b1:47:af:ec:4d:6b:a1:45:e9:ac:10:6b:0f:62:
cb:13:88:84:58:43:a5:e3:ed:af:d2:88:65:67:65:4d:04:4d:
40:83:7f:17:79:9b:69:fc:81:65:33:5c:3b:08:23:35:ca:b5:
8d:94:a4:fe:d2:53:42:11:86:0f:03:e8:63:a8:7a:cb:c2:98:
80:9b:0d:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cDCxQTltVJMEPTJPq0q5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzY5MmYyYTFkMWJjNzZmZjdmOWQyOTA5MWJlZGEwOGI3
YmM5NmMwHhcNMjYxMDE1MTIwMTE5WhcNMjYxMDE2MTIwMTE5WjAzMTEwLwYDVQQD
Eyg1YzlmZGM1NmZmNjM4MmViZmYwZDU3YmZlNjYwZDU1ODMwZmUzZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcCKZPpax7/FLg1DTXsNlRXPH7Sz
VtreVx4+kxlm1ZD5Eeezu7pdV1isIEEEWQSWdto7/Ep9mZ9dpcwTEgWbGhgas2fD
znBIDSLixb7YEtbXSKnZRWT2YhH6gD45R4rRvJ0a7DDqBrkYwFL94z1qtg5H7Z5V
qf0VtEekao2lM5R0VSNLBSsY7KfdgYfJx0bSIoWRX3qz/Xn/pWQSMEtGLy67snqg
odQ4lc09lNYD7859U0yXwMH3Zj/igsrvICB6P2JQnbuiAw7IUaW8PdOsstrnn9w0
1+Lq8mAMmzu65/2bQRJ+PygE/nMG4bBQnuC5UG61tL19af11GTmz/tYkxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyf3Fb/Y4Lr/w1Xv+Zg1Vgw/j/CMB8GA1UdIwQY
MBaAFAQ2kvKh0bx2/3+dKQkb7aCLe8lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUt
MjU1ZjBjNTFiYmUwLzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUtMjU1ZjBjNTFiYmUw
LzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbLV4MxB
pXC/Wavr2KUCJVnBN1Dm2x+zEzoRJOthN5Oeoigz2PjTMmfwBJz/18AyldxLi74u
hsE0+xBBlvpp2ms0yi0zqxsOtkJzp2MuvKXd/Uo780ohQiWo7gA0XtMQYMZ+FknR
OvBOdimy2QyQk4NA2JVa1GSbgFUFrdBcrcZzLtt/bAzha4f2sIhijuRdr2X6NdEs
HDYKAE9MvguNg7dP7Ps64/CixddKKW9m4gbb8kv6l8Wu5LFHr+xNa6FF6awQaw9i
yxOIhFhDpePtr9KIZWdlTQRNQIN/F3mbafyBZTNcOwgjNcq1jZSk/tJTQhGGDwPo
Y6h6y8KYgJsNmQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:56 2026 by rpki-client