Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
File: bDjM5r4-JvXmJUacse03btd5v7A.mft (raw, json)
Hash identifier: 9VTH+rj2DHZvvR25hoObgVra6Dv414jZlSntCHgxyLA=
Subject key identifier: 91:F9:CB:73:85:32:1C:94:7C:A8:38:D2:28:6B:7C:F2:56:EA:F8:81
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Certificate issuer: /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial: 01A11598317CAE0AA92F72B76BC6D5224023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
Manifest number: 0109
Signing time: Wed 07 Oct 2026 09:00:57 +0000
Manifest this update: Wed 07 Oct 2026 09:00:57 +0000
Manifest next update: Thu 08 Oct 2026 09:00:57 +0000
Files and hashes: 1: OZq72zv4sg7RvskqcH-YM473vC0.roa (hash: ZaPK+bZUcZeqLBhmkFhNu+PtlkG5P1ecScSV/otpvoU=)
2: aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa (hash: OBvOGfVO6gpSCVcXtODca/H8DDZWmcTW85b6yxSA+tY=)
3: bDjM5r4-JvXmJUacse03btd5v7A.crl (hash: 9VqyLFKbUNcSfH+JfrJoy/SberGWDcMsJ62MDTh7kNw=)
4: isv1noVOs3IF7XKFRPIZvlT-zzs.roa (hash: Y7qPP/O0hbTSlwRSjlHZA/XaYa5Jq+RJtLqdMHL5xuY=)
5: vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa (hash: ktZFb+NWv0kq4A04+BX1/mDAvqdfa84ChDii4aiEH4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:31:7c:ae:0a:a9:2f:72:b7:6b:c6:d5:22:40:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Validity
Not Before: Oct 7 09:00:57 2026 GMT
Not After : Oct 8 09:00:57 2026 GMT
Subject: CN=91f9cb7385321c947ca838d2286b7cf256eaf881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:07:57:e4:c4:ce:36:ea:b3:1a:5a:92:d8:
2a:03:3b:31:c0:7f:07:9f:52:b2:8a:e0:20:42:15:
38:59:b5:fa:db:60:51:a9:bb:1a:de:c4:c1:df:49:
00:4b:6f:88:93:e5:27:52:83:4e:f7:64:60:fd:74:
59:b0:3f:40:df:1f:d1:98:6b:ff:21:f7:a5:f9:81:
44:06:ec:23:89:37:d2:32:69:03:ee:dc:c3:c1:b9:
d5:ed:d9:ed:88:da:0f:3c:a1:86:75:7f:28:91:23:
db:1c:ef:78:6d:ae:25:bd:19:c0:88:a8:ac:f0:27:
c1:5b:1f:16:73:62:ec:b0:64:8a:92:03:29:e2:b3:
35:87:03:eb:f4:84:1e:1a:24:ff:66:2a:d3:d4:65:
3e:47:2f:a0:38:08:97:15:43:a8:a6:a2:8f:fb:9d:
fa:83:80:b6:7d:14:71:79:ad:c9:8c:9c:17:dd:7a:
cc:65:85:82:f6:c6:74:c3:5e:ae:03:17:d8:0c:5f:
6b:e4:98:c2:bc:c3:59:e3:c0:55:a8:23:dc:40:69:
5f:dd:af:ab:bf:29:1c:70:88:b2:3e:9a:b7:27:bd:
c2:d6:8e:66:70:d8:b6:f2:e9:91:de:48:1a:f4:d1:
3a:c0:d7:17:3d:c2:bf:e4:28:91:53:5d:e1:7b:a3:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F9:CB:73:85:32:1C:94:7C:A8:38:D2:28:6B:7C:F2:56:EA:F8:81
X509v3 Authority Key Identifier:
keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fd:88:fb:dc:b0:8a:ca:b3:2a:d0:40:4e:02:fb:bc:b0:97:
48:41:50:5f:b8:9e:0d:66:85:d8:cf:2f:9a:40:2d:30:9b:96:
58:a7:7a:f3:21:72:b4:15:2f:df:b2:77:a5:a4:61:71:6c:96:
e1:51:9e:6a:f7:c1:ff:37:7d:de:bb:0b:fd:96:eb:89:70:60:
c6:54:47:97:26:4b:3b:08:0f:a1:f3:d2:af:7a:ee:9a:a0:f0:
1d:f1:e1:ff:62:5b:19:ab:f3:62:ad:d0:3b:b3:23:5d:9a:3f:
18:e1:ee:3d:bd:9b:10:de:41:44:b4:8d:3b:68:ec:82:dd:a9:
ea:ef:e8:19:03:84:d8:be:5e:ba:b8:9c:13:ce:10:ba:1c:97:
8c:c7:1e:ce:3f:6c:92:83:c4:cf:4b:ac:e5:11:41:28:9c:c0:
20:ec:58:73:2e:cc:2c:f3:fe:53:a3:d7:b6:1b:cb:e1:a8:bf:
6e:48:ad:a5:ff:52:38:9b:3e:e7:9f:5e:fa:54:db:00:ec:3e:
28:a1:a1:d4:4a:36:2e:1c:e2:d8:13:21:5c:95:67:af:47:d7:
37:ab:17:f0:e7:ca:7d:47:df:4f:7f:b9:27:1d:0c:6d:35:5f:
f8:2e:25:49:b5:11:c9:61:8e:13:52:a5:a4:2c:08:fe:25:04:
44:48:d0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEVmDF8rgqpL3K3a8bVIkAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzhjY2U2YmUzZTI2ZjVlNjI1NDY5Y2IxZWQzNzZlZDc3
OWJmYjAwHhcNMjYxMDA3MDkwMDU3WhcNMjYxMDA4MDkwMDU3WjAzMTEwLwYDVQQD
Eyg5MWY5Y2I3Mzg1MzIxYzk0N2NhODM4ZDIyODZiN2NmMjU2ZWFmODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPMHV+TEzjbqsxpaktgqAzsxwH8H
n1KyiuAgQhU4WbX622BRqbsa3sTB30kAS2+Ik+UnUoNO92Rg/XRZsD9A3x/RmGv/
Ifel+YFEBuwjiTfSMmkD7tzDwbnV7dntiNoPPKGGdX8okSPbHO94ba4lvRnAiKis
8CfBWx8Wc2LssGSKkgMp4rM1hwPr9IQeGiT/ZirT1GU+Ry+gOAiXFUOopqKP+536
g4C2fRRxea3JjJwX3XrMZYWC9sZ0w16uAxfYDF9r5JjCvMNZ48BVqCPcQGlf3a+r
vykccIiyPpq3J73C1o5mcNi28umR3kga9NE6wNcXPcK/5CiRU13he6N7twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH5y3OFMhyUfKg40ihrfPJW6viBMB8GA1UdIwQY
MBaAFGw4zOa+Pib15iVGnLHtN27Xeb+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRqTTVyNC1KdlhtSlVhY3NlMDNidGQ1djdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut
YzQ3MTE0ODIzODBlLzEvYkRqTTVyNC1KdlhtSlVhY3NlMDNidGQ1djdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl
LzEvYkRqTTVyNC1KdlhtSlVhY3NlMDNidGQ1djdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvv2I+9yw
isqzKtBATgL7vLCXSEFQX7ieDWaF2M8vmkAtMJuWWKd68yFytBUv37J3paRhcWyW
4VGeavfB/zd93rsL/ZbriXBgxlRHlyZLOwgPofPSr3rumqDwHfHh/2JbGavzYq3Q
O7MjXZo/GOHuPb2bEN5BRLSNO2jsgt2p6u/oGQOE2L5euricE84QuhyXjMcezj9s
koPEz0us5RFBKJzAIOxYcy7MLPP+U6PXthvL4ai/bkitpf9SOJs+559e+lTbAOw+
KKGh1Eo2Lhzi2BMhXJVnr0fXN6sX8OfKfUffT3+5Jx0MbTVf+C4lSbURyWGOE1Kl
pCwI/iUEREjQBw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:49:51 2026 by rpki-client