Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: RZXKNfgvgvPVBws9qyRD7s2RoEgWVbzOMhsFfi8aee4=
Subject key identifier: BB:49:6A:41:B7:3B:D1:86:3C:AC:0F:30:7D:C6:62:A4:D9:9F:5B:63
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019D2704D7DA896EF754BB36A94D7E7A6DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 131B
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: sM3fZsP9HCGdA/vnVOKAYa/MndPaYBdJfd6D+0RV524=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d7:da:89:6e:f7:54:bb:36:a9:4d:7e:7a:6d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=bb496a41b73bd1863cac0f307dc662a4d99f5b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:ca:8e:ce:66:bb:90:ea:4c:ba:62:e2:4a:
74:18:a9:10:ee:f9:23:c1:88:73:85:ec:a1:9a:a4:
2b:55:b8:cf:f1:e3:bc:ce:df:9f:76:ab:44:6b:6a:
40:49:6c:81:e4:b8:43:ac:bf:ab:e8:69:86:a1:7f:
e6:c1:e9:4c:b0:64:33:6c:21:ac:ef:f7:94:6b:75:
25:7d:57:5b:05:bf:07:0f:c4:44:e8:3a:38:25:9a:
09:cb:46:4e:13:84:e2:64:75:0b:3f:3f:e1:d3:03:
02:15:e5:8b:ba:81:20:fa:b7:2c:5f:6e:52:4f:ff:
db:f6:5a:c0:e2:96:eb:89:d1:27:00:92:8b:d1:4b:
69:e3:86:78:70:90:42:d4:dc:ee:4e:b1:df:71:0b:
6b:f1:36:d9:33:dd:f6:6f:76:fb:ce:5c:41:c7:47:
14:bc:32:05:7d:a3:66:96:47:6b:d9:31:62:66:8d:
f8:dd:76:b1:f3:a2:39:18:cc:bd:ab:00:c6:97:34:
21:6a:2d:ec:65:ff:c4:ca:d3:06:fb:06:2c:42:d0:
5f:f0:94:ed:ef:54:9a:d8:7c:2f:30:3d:f4:d2:c3:
47:3b:24:b9:89:fd:3f:77:f6:b9:05:a3:8e:0a:14:
eb:fc:7d:4f:b6:ec:c3:49:15:6c:70:bf:2b:ad:63:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:6A:41:B7:3B:D1:86:3C:AC:0F:30:7D:C6:62:A4:D9:9F:5B:63
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:2e:75:e7:bf:85:7b:5b:8c:bf:64:f7:cc:64:ae:d1:d6:
df:12:3a:18:68:67:46:15:41:65:31:9f:02:3e:74:cb:e3:9f:
70:87:39:ef:3f:b8:ed:dc:cf:5d:b0:8e:af:f0:e6:4a:47:a9:
62:18:54:9f:71:bf:f4:da:2a:1c:c1:62:fa:a1:de:52:87:d0:
34:84:44:83:a2:60:cb:ea:66:e3:4a:e2:9a:ba:56:bc:08:28:
69:d4:21:f6:cb:43:07:f5:91:d5:5b:d2:7a:14:e1:3e:c9:2d:
3b:87:1f:e2:e0:04:6f:7c:82:94:bf:48:a7:52:43:47:c2:96:
a3:dc:fe:66:65:c1:ba:52:df:1d:4d:ea:b9:3e:b5:29:36:03:
9b:41:95:91:c4:eb:97:2f:07:2c:bd:c7:a4:8e:12:67:41:62:
1a:5a:e5:69:c9:97:db:ba:f2:0f:f5:a6:8c:2b:06:de:ff:d0:
5f:fe:13:ea:33:25:6c:4f:13:a2:ad:26:56:14:88:7c:9d:12:
9f:a1:d0:e6:f5:64:d0:a9:e6:4f:c5:f1:f8:bc:6d:dc:a9:39:
cd:c1:af:0c:72:39:1d:f2:f7:56:47:5d:79:6f:e7:cd:c9:35:
21:d3:70:54:7f:66:71:3c:bc:09:57:e4:bc:9d:0f:a8:5a:94:
58:07:0c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNfaiW73VLs2qU1+em3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi
YTZjYWQwHhcNMjYwMzI1MjIwMjAxWhcNMjYwMzI2MjIwMjAxWjAzMTEwLwYDVQQD
EyhiYjQ5NmE0MWI3M2JkMTg2M2NhYzBmMzA3ZGM2NjJhNGQ5OWY1YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg/Kjs5mu5DqTLpi4kp0GKkQ7vkj
wYhzheyhmqQrVbjP8eO8zt+fdqtEa2pASWyB5LhDrL+r6GmGoX/mwelMsGQzbCGs
7/eUa3UlfVdbBb8HD8RE6Do4JZoJy0ZOE4TiZHULPz/h0wMCFeWLuoEg+rcsX25S
T//b9lrA4pbridEnAJKL0Utp44Z4cJBC1NzuTrHfcQtr8TbZM932b3b7zlxBx0cU
vDIFfaNmlkdr2TFiZo343Xax86I5GMy9qwDGlzQhai3sZf/EytMG+wYsQtBf8JTt
71Sa2HwvMD300sNHOyS5if0/d/a5BaOOChTr/H1PtuzDSRVscL8rrWOhYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtJakG3O9GGPKwPMH3GYqTZn1tjMB8GA1UdIwQY
MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt
YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1
LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVUudee/
hXtbjL9k98xkrtHW3xI6GGhnRhVBZTGfAj50y+OfcIc57z+47dzPXbCOr/DmSkep
YhhUn3G/9NoqHMFi+qHeUofQNIREg6Jgy+pm40rimrpWvAgoadQh9stDB/WR1VvS
ehThPsktO4cf4uAEb3yClL9Ip1JDR8KWo9z+ZmXBulLfHU3quT61KTYDm0GVkcTr
ly8HLL3HpI4SZ0FiGlrlacmX27ryD/WmjCsG3v/QX/4T6jMlbE8Toq0mVhSIfJ0S
n6HQ5vVk0KnmT8Xx+Lxt3Kk5zcGvDHI5HfL3VkddeW/nzck1IdNwVH9mcTy8CVfk
vJ0PqFqUWAcM4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:49 2026 by rpki-client