Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: oiZP6qw8Uegv7CpFIkVJcplz7RwdJomjpSdGjlu/OeE=
Subject key identifier: AD:C9:51:A1:86:3B:51:BB:36:95:41:AD:E8:8D:84:C9:FD:57:21:67
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 01A1569D000A20B4522DA4BAD9CE5B4E2866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 17FD
Signing time: Tue 20 Oct 2026 00:01:31 +0000
Manifest this update: Tue 20 Oct 2026 00:01:31 +0000
Manifest next update: Wed 21 Oct 2026 00:01:31 +0000
Files and hashes: 1: 13x6q0kK4jWtFgTsaQE2IuvYeC0.roa (hash: jOVJU7qUmDkbddDyA5OyhBcSOp8ncmsAOoZ16mvRU1k=)
2: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (hash: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck=)
3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: 3eLmbpVNKupkB/v3cjDqu065dJ6ka1J5Iw+QempxtLQ=)
4: ekrqCKLizVAMKQXSGPD3DpBP_OY.roa (hash: s5CParuuwC3JvXqHExuQ7yQFo1a7fTuNWPzfjB6dlrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9d:00:0a:20:b4:52:2d:a4:ba:d9:ce:5b:4e:28:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Oct 20 00:01:31 2026 GMT
Not After : Oct 21 00:01:31 2026 GMT
Subject: CN=adc951a1863b51bb369541ade88d84c9fd572167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:57:7f:c8:ce:19:0b:71:c8:78:66:b3:c7:
ca:fd:44:19:5c:68:4d:cc:5a:bc:65:17:a5:65:15:
cf:b7:52:64:78:bb:f2:19:72:73:68:99:1e:95:f1:
20:3e:f1:22:99:0f:b8:82:ca:94:eb:ef:30:97:07:
6d:d5:48:a0:8d:fa:73:7d:a2:da:ab:35:bb:9c:67:
81:b3:be:b9:5b:78:b7:15:bb:1a:dd:10:a4:1b:fd:
96:35:05:d7:98:b4:6f:d0:41:72:51:82:08:be:81:
86:6d:af:c8:38:3f:ec:7a:5e:58:2c:b3:e5:a5:7d:
c2:0a:ff:99:23:6f:6f:61:f3:14:b9:14:f1:ae:a1:
4d:68:19:99:63:b6:d7:bf:91:91:62:b5:60:7e:a3:
1a:3c:db:bc:2b:59:a2:8c:f5:a6:bc:53:0f:11:26:
9f:5b:cc:f9:ea:63:fa:8e:f7:c9:b8:a2:42:14:16:
fb:9d:74:a4:fe:19:9e:41:de:b9:ec:91:b3:06:03:
c5:4a:93:c5:be:ee:49:43:2b:61:f7:1d:77:69:00:
9b:b8:b0:86:e0:86:58:a4:f1:01:3b:8a:1d:15:7a:
c5:c8:46:80:61:7f:65:1e:23:77:9f:f2:4c:ad:a0:
1f:88:7a:65:0c:06:54:8b:2c:09:59:eb:08:c8:92:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:51:A1:86:3B:51:BB:36:95:41:AD:E8:8D:84:C9:FD:57:21:67
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:50:26:94:c1:88:f2:c9:14:7e:45:1e:09:bf:a3:50:a2:67:
3b:bb:8f:e7:91:6b:5c:93:b9:9f:88:b8:f2:a5:af:00:b8:34:
97:79:7d:6b:b5:f1:d6:bb:73:7d:5e:1c:ad:ba:82:0f:1c:b2:
9e:67:46:d5:59:1a:ea:b0:f1:7a:9d:af:6d:28:f4:f6:d4:94:
65:d7:88:ab:23:ae:04:85:86:06:4e:57:4c:15:78:d7:1b:26:
f6:9a:9e:1c:5a:2e:79:b2:41:aa:fb:db:7a:da:74:37:d1:c3:
62:c5:fd:56:f4:46:5d:78:87:b7:0a:d6:fc:54:ba:55:18:fd:
c5:61:8e:44:39:5b:97:8f:39:e5:2a:5e:64:4d:0f:69:90:04:
19:05:c6:d8:21:70:88:0f:39:5d:46:20:7b:06:f8:0b:2e:c7:
eb:7a:95:a8:65:d4:f3:a7:bf:23:40:62:31:f9:52:25:4e:f9:
c9:58:25:8e:94:6e:67:aa:bd:a3:7f:2d:93:f4:ca:c5:dc:2c:
81:17:69:7c:c7:88:23:f1:46:42:6d:a0:75:cb:7d:73:cc:63:
da:bd:6c:4f:2d:af:c2:45:4d:7e:0c:1b:75:db:c6:58:09:dd:
90:b6:90:95:4c:f7:35:6a:36:f3:03:02:18:91:c9:32:12:6c:
6c:2b:a4:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWnQAKILRSLaS62c5bTihmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjliMjRmMmMwODQ3ZDA0MWMxZTY2YTEyZjAxZWFiYTQ3
OGI0ZmMwHhcNMjYxMDIwMDAwMTMxWhcNMjYxMDIxMDAwMTMxWjAzMTEwLwYDVQQD
EyhhZGM5NTFhMTg2M2I1MWJiMzY5NTQxYWRlODhkODRjOWZkNTcyMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto1Xf8jOGQtxyHhms8fK/UQZXGhN
zFq8ZRelZRXPt1JkeLvyGXJzaJkelfEgPvEimQ+4gsqU6+8wlwdt1UigjfpzfaLa
qzW7nGeBs765W3i3Fbsa3RCkG/2WNQXXmLRv0EFyUYIIvoGGba/IOD/sel5YLLPl
pX3CCv+ZI29vYfMUuRTxrqFNaBmZY7bXv5GRYrVgfqMaPNu8K1mijPWmvFMPESaf
W8z56mP6jvfJuKJCFBb7nXSk/hmeQd657JGzBgPFSpPFvu5JQyth9x13aQCbuLCG
4IZYpPEBO4odFXrFyEaAYX9lHiN3n/JMraAfiHplDAZUiywJWesIyJIxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3JUaGGO1G7NpVBreiNhMn9VyFnMB8GA1UdIwQY
MBaAFGz5sk8sCEfQQcHmahLwHqukeLT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWIt
OTQ2ODkyZjg4YmViLzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWItOTQ2ODkyZjg4YmVi
LzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1AmlMGI
8skUfkUeCb+jUKJnO7uP55FrXJO5n4i48qWvALg0l3l9a7Xx1rtzfV4crbqCDxyy
nmdG1Vka6rDxep2vbSj09tSUZdeIqyOuBIWGBk5XTBV41xsm9pqeHFouebJBqvvb
etp0N9HDYsX9VvRGXXiHtwrW/FS6VRj9xWGORDlbl4855SpeZE0PaZAEGQXG2CFw
iA85XUYgewb4Cy7H63qVqGXU86e/I0BiMflSJU75yVgljpRuZ6q9o38tk/TKxdws
gRdpfMeII/FGQm2gdct9c8xj2r1sTy2vwkVNfgwbddvGWAndkLaQlUz3NWo28wMC
GJHJMhJsbCukVQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:51:54 2026 by rpki-client