Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: CszKQpbDi2FfIUGx9/VODPAfIdocQZFKpxaA0WzaP+Y=
Subject key identifier: 9E:2E:95:DC:1E:9B:84:94:47:A1:92:84:A5:97:03:A0:ED:6B:8D:77
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019D382ECEAE735ACDC6F19AC8E60EFA9883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 0CF3
Signing time: Sun 29 Mar 2026 06:01:24 +0000
Manifest this update: Sun 29 Mar 2026 06:01:24 +0000
Manifest next update: Mon 30 Mar 2026 06:01:24 +0000
Files and hashes: 1: Ur12tMXP6krqdgPYJeyWQySwWuA.roa (hash: WAu5x/fHLD+hAA2/qHGeg9Ko8e7jyGO8J9Ruzc1IZ60=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: 7VWQsf3LA1X5bqWlfRaCPcuaOrACiX4CHbJx2gIlets=)
3: o43yV46tUCettjH0kRv7oqNolP8.roa (hash: RBU44rx424a90gKy+6zTDM6bwGFn0Mmg9XsrebbEcho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ce:ae:73:5a:cd:c6:f1:9a:c8:e6:0e:fa:98:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Mar 29 06:01:24 2026 GMT
Not After : Mar 30 06:01:24 2026 GMT
Subject: CN=9e2e95dc1e9b849447a19284a59703a0ed6b8d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:43:92:24:96:af:20:2e:b2:bd:7e:d8:48:
3c:ef:53:8f:b0:cc:e4:67:b0:5a:61:f8:e2:44:30:
07:1b:38:42:61:10:35:bb:1a:27:f6:16:32:92:86:
23:0e:e8:72:20:0b:1f:cb:52:fd:98:9e:36:f4:62:
88:19:c5:bc:e3:fc:03:c1:72:2b:37:7d:51:1f:12:
e3:66:8b:a8:ce:47:ac:71:d5:8b:99:f9:a3:1a:67:
f1:c3:7a:66:cd:90:35:2a:9b:a6:26:7f:17:ac:22:
c1:d6:65:3f:22:6f:98:ac:95:bb:d3:1f:7c:b1:41:
6f:6d:e7:70:a0:6e:aa:e3:02:c9:39:de:3d:e0:7c:
cf:6d:6d:4a:77:7a:2b:d6:67:c0:5f:7f:54:7c:db:
30:4b:1f:40:fb:91:4c:ab:bf:62:4f:a9:64:36:c7:
82:f0:84:d3:41:52:b7:51:f2:fb:44:8f:3d:b0:d5:
5a:7b:fc:c4:b2:06:e1:01:25:b1:14:0b:20:74:f6:
1e:2e:a1:c0:8e:68:de:c9:b6:0a:50:12:36:c5:02:
96:88:2a:4c:a6:9a:d1:e2:ab:e0:54:fe:41:d5:fa:
b9:fb:0c:d7:8a:c8:83:0f:b1:c0:22:93:c9:42:4c:
5b:be:55:d1:1c:23:83:7e:66:7b:09:92:a0:1b:98:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:95:DC:1E:9B:84:94:47:A1:92:84:A5:97:03:A0:ED:6B:8D:77
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:41:07:07:2e:5f:30:ec:f5:45:d2:7b:84:63:20:ce:e6:40:
31:54:a6:4a:8c:a6:ae:bd:47:35:5b:e7:4e:34:15:8d:73:d2:
f4:9d:d6:1a:8f:77:9c:4c:66:cf:43:96:98:73:7d:b8:82:76:
4c:af:c8:da:b5:ab:39:f9:6a:a7:f0:7e:bf:ec:49:cf:22:57:
91:08:ba:7b:34:99:a9:3c:08:93:be:f8:98:13:41:8c:3b:bf:
5c:dd:03:0b:41:97:72:9b:33:b2:1f:ca:47:63:a5:ac:67:a2:
0f:59:8f:c1:1e:db:c2:a7:81:51:da:25:14:d3:02:f3:41:31:
7b:cc:df:3b:5a:2a:ca:82:c6:5c:2e:e3:6d:d2:fc:6f:8e:b9:
b2:c3:7c:fc:35:5f:03:7b:b7:34:c4:f9:e7:c6:db:00:c3:47:
1b:50:5f:ff:8d:ae:66:a6:14:02:ed:d4:82:2e:b1:bb:57:ea:
53:51:88:88:17:a3:4e:04:e9:3e:8f:41:c7:77:b9:8d:ce:4d:
d6:80:fa:ff:b7:45:8a:19:de:81:11:b7:4d:c0:c6:14:b8:c6:
3e:40:13:9f:e8:1f:d9:96:4f:df:16:46:f8:05:31:db:d5:b3:
14:5a:54:2d:65:1a:81:fa:33:38:6d:14:c5:70:10:fd:f0:e4:
31:44:47:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ls6uc1rNxvGayOYO+piDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNmRkYjcyZTcyNjgyOThjMTcxNDU4MzEzMWJiZTRhZTRl
ZjA5MTYwHhcNMjYwMzI5MDYwMTI0WhcNMjYwMzMwMDYwMTI0WjAzMTEwLwYDVQQD
Eyg5ZTJlOTVkYzFlOWI4NDk0NDdhMTkyODRhNTk3MDNhMGVkNmI4ZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB9DkiSWryAusr1+2Eg871OPsMzk
Z7BaYfjiRDAHGzhCYRA1uxon9hYykoYjDuhyIAsfy1L9mJ429GKIGcW84/wDwXIr
N31RHxLjZouozkescdWLmfmjGmfxw3pmzZA1KpumJn8XrCLB1mU/Im+YrJW70x98
sUFvbedwoG6q4wLJOd494HzPbW1Kd3or1mfAX39UfNswSx9A+5FMq79iT6lkNseC
8ITTQVK3UfL7RI89sNVae/zEsgbhASWxFAsgdPYeLqHAjmjeybYKUBI2xQKWiCpM
pprR4qvgVP5B1fq5+wzXisiDD7HAIpPJQkxbvlXRHCODfmZ7CZKgG5iiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4uldwem4SUR6GShKWXA6Dta413MB8GA1UdIwQY
MBaAFGxt23LnJoKYwXFFgxMbvkrk7wkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZDc3NjQtMWE1OC00NWU2LWFkODMt
MzJhNjA5MTJlZjQwLzEvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZDc3NjQtMWE1OC00NWU2LWFkODMtMzJhNjA5MTJlZjQw
LzEvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEEHBy5f
MOz1RdJ7hGMgzuZAMVSmSoymrr1HNVvnTjQVjXPS9J3WGo93nExmz0OWmHN9uIJ2
TK/I2rWrOflqp/B+v+xJzyJXkQi6ezSZqTwIk774mBNBjDu/XN0DC0GXcpszsh/K
R2OlrGeiD1mPwR7bwqeBUdolFNMC80Exe8zfO1oqyoLGXC7jbdL8b465ssN8/DVf
A3u3NMT558bbAMNHG1Bf/42uZqYUAu3Ugi6xu1fqU1GIiBejTgTpPo9Bx3e5jc5N
1oD6/7dFihnegRG3TcDGFLjGPkATn+gf2ZZP3xZG+AUx29WzFFpULWUagfozOG0U
xXAQ/fDkMURHTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:22 2026 by rpki-client