Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: iEijKP2otuJ2ZYE5FrBB4IHNpFRpoTRB82slXjH9zDI=
Subject key identifier: 3E:5B:A2:35:FE:0B:32:53:A3:82:80:76:93:A1:EE:A6:B2:A2:39:E2
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 01A03E5FC627A98F5B61C0F22B75F25F2552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 14:00:58 +0000
Manifest this update: Wed 26 Aug 2026 14:00:58 +0000
Manifest next update: Thu 27 Aug 2026 14:00:58 +0000
Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: P/qnA3e3Pt2zq/o9eXA40Qf1yhma4DlHh48Y09SoBfE=)
2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:c6:27:a9:8f:5b:61:c0:f2:2b:75:f2:5f:25:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Aug 26 14:00:58 2026 GMT
Not After : Aug 27 14:00:58 2026 GMT
Subject: CN=3e5ba235fe0b3253a382807693a1eea6b2a239e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:68:8a:48:36:c7:c0:37:10:5f:7b:9e:38:
fb:c1:e0:1d:4d:ff:fa:9f:60:01:db:27:e1:7d:a3:
a7:a7:b5:3f:1a:5e:ed:0e:fb:61:f4:b6:ac:25:46:
9e:b1:0e:a1:b1:a9:1b:d2:e3:48:86:27:04:56:64:
55:1c:ae:65:f2:60:33:3c:6e:c9:c5:cd:48:80:98:
df:4d:52:ef:cf:2d:fa:9c:49:45:81:64:f3:37:be:
77:3d:31:9d:44:43:15:c4:be:e2:0e:51:96:c1:5a:
29:7a:4b:91:65:1d:e9:b7:56:62:58:8a:51:f7:22:
54:fe:e4:ea:d2:e6:d7:09:03:3d:db:d5:08:a6:08:
dc:a7:52:a6:65:71:f8:62:64:a4:4d:de:de:75:a7:
25:59:fd:5c:c5:7a:93:b1:bc:f6:ed:e5:de:49:db:
6c:3d:72:84:0b:37:1f:c1:63:c1:16:f1:f1:b0:46:
78:44:bb:5c:0d:4d:ee:f8:1e:37:33:36:a1:cc:14:
7b:5f:ce:eb:f8:d8:60:7a:b2:2c:c0:42:f5:7f:09:
82:44:9e:0e:dc:05:d6:4c:73:8d:19:fe:f3:19:55:
f0:5f:bf:ee:c8:98:b2:3f:f8:d4:db:97:10:15:2f:
35:34:e0:ce:17:8e:fd:31:fb:31:62:cf:1a:35:70:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5B:A2:35:FE:0B:32:53:A3:82:80:76:93:A1:EE:A6:B2:A2:39:E2
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ee:70:9a:bc:19:f4:ab:69:77:a9:3a:0c:41:36:95:26:20:
a7:bd:de:18:c2:6d:aa:1d:c4:41:2d:a9:0a:67:f2:1f:8e:f6:
94:63:95:5a:5f:49:a4:1b:e2:04:88:42:5a:27:a0:4d:54:dd:
02:9e:8c:be:06:f7:2a:f8:ec:57:26:fc:e8:7d:5a:4d:72:70:
73:a3:57:c3:95:37:4f:2c:1e:92:b3:a1:08:73:35:45:e2:24:
c1:a3:a2:e6:98:c9:6f:16:2a:d4:fc:36:1e:9f:83:0c:8a:d7:
70:48:31:12:1e:2f:c2:8a:1f:13:0d:3d:5b:99:dc:86:51:3b:
6c:bb:d2:98:ff:01:f6:60:01:0a:50:dd:80:a0:90:f4:7d:fd:
54:72:16:09:9e:b3:d4:3d:d6:ec:e0:1e:86:3c:7d:f3:10:3a:
f0:96:82:49:4a:e7:16:f5:67:3e:9f:5b:9a:87:6b:c4:ab:ea:
67:be:50:90:f8:35:5f:7f:23:2d:2e:57:21:1f:e0:a4:bc:39:
9a:32:c1:e4:d7:6d:a0:1d:9e:93:d7:81:a9:c9:d9:c0:6c:79:
50:00:a0:c9:1e:55:0a:8d:8d:b6:04:0e:62:ac:f8:47:50:41:
75:c4:f8:2b:84:b0:e2:51:ad:4d:c0:38:a5:fe:46:1b:59:c3:
2b:a1:e5:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+X8YnqY9bYcDyK3XyXyVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjYwODI2MTQwMDU4WhcNMjYwODI3MTQwMDU4WjAzMTEwLwYDVQQD
EygzZTViYTIzNWZlMGIzMjUzYTM4MjgwNzY5M2ExZWVhNmIyYTIzOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGZoikg2x8A3EF97njj7weAdTf/6
n2AB2yfhfaOnp7U/Gl7tDvth9LasJUaesQ6hsakb0uNIhicEVmRVHK5l8mAzPG7J
xc1IgJjfTVLvzy36nElFgWTzN753PTGdREMVxL7iDlGWwVopekuRZR3pt1ZiWIpR
9yJU/uTq0ubXCQM929UIpgjcp1KmZXH4YmSkTd7edaclWf1cxXqTsbz27eXeSdts
PXKECzcfwWPBFvHxsEZ4RLtcDU3u+B43MzahzBR7X87r+NhgerIswEL1fwmCRJ4O
3AXWTHONGf7zGVXwX7/uyJiyP/jU25cQFS81NODOF479MfsxYs8aNXDtfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5bojX+CzJTo4KAdpOh7qayojniMB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAou5wmrwZ
9Ktpd6k6DEE2lSYgp73eGMJtqh3EQS2pCmfyH472lGOVWl9JpBviBIhCWiegTVTd
Ap6Mvgb3KvjsVyb86H1aTXJwc6NXw5U3TywekrOhCHM1ReIkwaOi5pjJbxYq1Pw2
Hp+DDIrXcEgxEh4vwoofEw09W5nchlE7bLvSmP8B9mABClDdgKCQ9H39VHIWCZ6z
1D3W7OAehjx98xA68JaCSUrnFvVnPp9bmodrxKvqZ75QkPg1X38jLS5XIR/gpLw5
mjLB5NdtoB2ek9eBqcnZwGx5UACgyR5VCo2NtgQOYqz4R1BBdcT4K4Sw4lGtTcA4
pf5GG1nDK6HlpQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 21:15:13 2026 by rpki-client