Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
File: bCecf9LtlfgYXaFSKg9XxQPuxas.mft (raw, json)
Hash identifier: x/+B9FwfeDwDa35Aq2mmNE7g4tFqdAPANM4ctaje89Q=
Subject key identifier: 03:5E:3D:2E:4B:14:D4:BC:BE:C7:7C:86:71:D5:D1:ED:40:2D:08:1F
Authority key identifier: 6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
Certificate issuer: /CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Certificate serial: 01A08C0D7D7FC772CD74B442E80A200F8086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
Manifest number: C3
Signing time: Thu 10 Sep 2026 16:01:29 +0000
Manifest this update: Thu 10 Sep 2026 16:01:29 +0000
Manifest next update: Fri 11 Sep 2026 16:01:29 +0000
Files and hashes: 1: VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa (hash: PJAiuPsV0OJUExzoh82Xuin/NOUbTrHxFe1Pka5/k/Q=)
2: bCecf9LtlfgYXaFSKg9XxQPuxas.crl (hash: G5RvHBqKF7lRWy7kqGkW3zoxzYmdZepM8j6gBhV1fW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:7d:7f:c7:72:cd:74:b4:42:e8:0a:20:0f:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Validity
Not Before: Sep 10 16:01:29 2026 GMT
Not After : Sep 11 16:01:29 2026 GMT
Subject: CN=035e3d2e4b14d4bcbec77c8671d5d1ed402d081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:d9:e2:88:0e:14:e3:50:6d:df:63:b4:8d:
3a:42:41:fb:51:8d:b0:7b:61:36:3f:e2:ce:69:9d:
ce:31:14:8e:79:f6:a9:bb:8c:6f:e4:45:76:1c:cf:
42:b8:ff:db:b3:9b:45:dd:14:bd:86:0a:3f:43:35:
52:97:58:b7:6b:2e:b5:80:f8:a6:9e:02:f6:3c:20:
bd:30:e5:e6:37:e9:7d:91:0d:99:7a:18:52:96:d5:
6b:ab:3e:00:05:e8:b7:e4:13:29:a8:e8:eb:f8:60:
f7:fe:90:d0:fe:bb:70:00:39:3c:86:ba:a6:f3:ed:
b6:ea:ef:fc:9c:84:ed:06:69:38:32:00:68:c1:f1:
e9:f7:ff:03:6a:f7:8f:42:0d:ca:04:53:a1:55:91:
38:b3:27:40:eb:2d:53:05:3c:17:dc:c2:f5:a9:c1:
17:50:48:45:28:05:72:87:e6:16:3f:59:fd:13:f6:
30:e1:0e:c5:44:9f:4d:ba:0b:52:fa:cc:0d:ba:a9:
31:fd:b9:db:8c:eb:cc:48:d3:a8:99:25:e8:69:98:
86:5f:52:a9:b2:ed:bc:c6:16:df:06:52:88:63:20:
70:b2:aa:d4:14:43:48:b6:d5:1c:82:7c:eb:11:15:
8f:2e:42:b2:c0:0f:6a:bc:bb:39:22:04:64:13:b6:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5E:3D:2E:4B:14:D4:BC:BE:C7:7C:86:71:D5:D1:ED:40:2D:08:1F
X509v3 Authority Key Identifier:
keyid:6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:23:0b:0f:f0:3b:b8:2b:d1:ce:f4:df:4e:77:ce:2b:fd:3a:
94:48:4b:26:98:1e:2f:0d:23:cb:78:59:12:ea:74:0b:83:c8:
8d:c4:df:57:ce:7e:a0:4a:b4:c3:87:72:db:5e:04:a0:2c:af:
64:9a:47:4f:cd:de:f0:99:bb:6e:bb:97:4c:75:03:d9:13:49:
18:b8:2e:2b:b9:c9:13:ff:f8:78:5b:d8:1b:e4:e9:c2:fe:14:
1d:d2:14:94:79:d6:d9:1b:0f:9b:1a:a2:b3:ba:a4:67:e6:bf:
fa:36:9c:50:cb:0b:c5:de:24:5c:c8:5b:59:80:59:56:7c:b5:
46:b9:ce:55:ba:a4:1e:76:87:05:cd:25:09:c3:ef:6a:12:c4:
c2:47:9d:54:84:1a:4e:d4:0a:dc:03:b8:52:95:4a:84:bb:24:
c1:bd:e0:9c:aa:56:11:03:1c:8e:44:d4:6b:19:05:a1:f4:8c:
3d:62:a9:20:f1:89:3f:d2:98:df:2c:71:bd:4d:f6:f2:75:85:
f6:8e:c0:fa:be:39:7d:ec:ee:3f:97:ff:2c:98:33:eb:53:7b:
21:c3:23:c2:2b:52:cb:39:55:6b:cd:a8:7d:ca:22:a3:3a:c4:
9c:34:e7:94:9f:d8:2c:71:74:8b:e0:16:2e:62:47:b7:49:f8:
25:28:ae:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDX1/x3LNdLRC6AogD4CGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMjc5YzdmZDJlZDk1ZjgxODVkYTE1MjJhMGY1N2M1MDNl
ZWM1YWIwHhcNMjYwOTEwMTYwMTI5WhcNMjYwOTExMTYwMTI5WjAzMTEwLwYDVQQD
EygwMzVlM2QyZTRiMTRkNGJjYmVjNzdjODY3MWQ1ZDFlZDQwMmQwODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6vZ4ogOFONQbd9jtI06QkH7UY2w
e2E2P+LOaZ3OMRSOefapu4xv5EV2HM9CuP/bs5tF3RS9hgo/QzVSl1i3ay61gPim
ngL2PCC9MOXmN+l9kQ2ZehhSltVrqz4ABei35BMpqOjr+GD3/pDQ/rtwADk8hrqm
8+226u/8nITtBmk4MgBowfHp9/8DavePQg3KBFOhVZE4sydA6y1TBTwX3ML1qcEX
UEhFKAVyh+YWP1n9E/Yw4Q7FRJ9NugtS+swNuqkx/bnbjOvMSNOomSXoaZiGX1Kp
su28xhbfBlKIYyBwsqrUFENIttUcgnzrERWPLkKywA9qvLs5IgRkE7YF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANePS5LFNS8vsd8hnHV0e1ALQgfMB8GA1UdIwQY
MBaAFGwnnH/S7ZX4GF2hUioPV8UD7sWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkNlY2Y5THRsZmdZWGFGU0tnOVh4UVB1eGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kMjJhZGUtNTNkZC00MGQwLTgyNTQt
MjQwZGQ4NjM2ZTQ3LzEvYkNlY2Y5THRsZmdZWGFGU0tnOVh4UVB1eGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kMjJhZGUtNTNkZC00MGQwLTgyNTQtMjQwZGQ4NjM2ZTQ3
LzEvYkNlY2Y5THRsZmdZWGFGU0tnOVh4UVB1eGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyMLD/A7
uCvRzvTfTnfOK/06lEhLJpgeLw0jy3hZEup0C4PIjcTfV85+oEq0w4dy214EoCyv
ZJpHT83e8Jm7bruXTHUD2RNJGLguK7nJE//4eFvYG+Tpwv4UHdIUlHnW2RsPmxqi
s7qkZ+a/+jacUMsLxd4kXMhbWYBZVny1RrnOVbqkHnaHBc0lCcPvahLEwkedVIQa
TtQK3AO4UpVKhLskwb3gnKpWEQMcjkTUaxkFofSMPWKpIPGJP9KY3yxxvU328nWF
9o7A+r45fezuP5f/LJgz61N7IcMjwitSyzlVa82ofcoiozrEnDTnlJ/YLHF0i+AW
LmJHt0n4JSiuDw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:54:59 2026 by rpki-client