Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File: b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier: eTAN2QITgjq1aRk68fn/R8619st84NGzFQg/2r0D2zg=
Subject key identifier: 70:D9:11:C3:9C:16:92:E6:2F:47:52:5D:57:51:A8:C8:38:47:96:AF
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial: 019D2AA9264171B25DA4AAE1E05A83E40045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number: 03D7
Signing time: Thu 26 Mar 2026 15:00:21 +0000
Manifest this update: Thu 26 Mar 2026 15:00:21 +0000
Manifest next update: Fri 27 Mar 2026 15:00:21 +0000
Files and hashes: 1: Qiay74MbBLJX0CXXaOcyKRwu1oE.roa (hash: kahuToIQXEZrrTaByaYWat/npZL3xVVcTJ88XatdcNg=)
2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: acFRN9dRNTJV5pti3BNNdfu72A92g6Yjr5n1zg4L9ZI=)
3: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (hash: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:26:41:71:b2:5d:a4:aa:e1:e0:5a:83:e4:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Validity
Not Before: Mar 26 15:00:21 2026 GMT
Not After : Mar 27 15:00:21 2026 GMT
Subject: CN=70d911c39c1692e62f47525d5751a8c8384796af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:6c:7e:e1:9c:63:37:a8:b4:35:f1:58:00:
ec:d5:38:7c:e8:07:db:96:3e:b0:a6:ad:26:74:d7:
bf:96:9e:79:07:b3:a3:7e:05:74:5b:f9:c7:d4:30:
3a:55:10:2b:1a:6f:77:9a:f0:b1:37:7f:44:3e:69:
f4:e8:86:0c:9d:96:2b:f5:26:6a:8c:ae:bd:76:60:
6a:69:c1:14:d6:b0:c9:6f:c9:15:9b:d0:56:61:d9:
28:0a:86:be:5e:0f:33:d1:21:e1:e1:6c:fd:53:87:
47:8a:12:91:fd:b3:63:d9:b2:83:b3:a8:2a:f8:6f:
49:ae:95:68:c1:11:c3:d8:72:c2:22:74:b3:10:88:
bf:f7:9a:ce:a1:bc:1d:d3:57:58:73:2e:eb:be:d7:
4f:c4:99:49:52:b1:27:0d:8b:5e:4e:e9:7f:71:f6:
0c:e0:92:66:69:9b:a6:a2:0e:3a:c3:e8:1e:00:da:
a4:6f:0c:b5:73:91:85:da:8c:3d:ab:56:ff:1c:f9:
9e:22:76:5e:0a:f0:54:8d:58:85:f1:cb:c3:28:de:
22:d9:dc:cd:e3:f4:99:7b:c0:2b:fe:f0:bb:31:35:
a2:71:4c:92:d9:bd:08:60:b8:9a:44:f0:64:51:b0:
32:83:00:9d:e5:98:33:af:98:d9:62:66:26:80:46:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:11:C3:9C:16:92:E6:2F:47:52:5D:57:51:A8:C8:38:47:96:AF
X509v3 Authority Key Identifier:
keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c7:ad:54:1a:e2:67:f7:49:9e:4c:ce:1d:bb:88:2f:81:ee:
0d:05:23:85:ff:dd:f9:45:8c:1d:27:13:d2:6b:78:3a:d4:25:
5c:b4:52:37:26:9c:2e:aa:84:b0:35:be:0b:d4:2e:22:33:cb:
7b:be:78:28:70:d3:00:98:e0:77:2d:3b:09:51:3f:91:71:bd:
db:d3:1a:67:c3:31:17:23:27:bc:71:2b:0e:73:3f:9a:b4:d8:
66:a7:9f:17:11:33:85:57:ba:24:b1:03:71:58:ef:96:58:3f:
35:32:d9:be:4e:66:d1:bc:df:0e:c4:d9:47:3b:54:e6:61:3a:
de:ff:f2:31:7f:eb:b2:92:e2:63:db:9a:28:17:64:24:9b:b9:
12:82:b8:b6:00:b6:e4:97:5c:42:ed:38:73:ba:1c:ed:0b:c5:
41:2e:d7:00:8a:3a:72:20:0d:a1:a4:36:f5:b4:b4:d5:84:cc:
a4:3b:b1:0c:09:43:b7:81:dd:28:d7:70:68:0c:2e:74:c0:26:
04:bb:07:93:69:1f:a0:dc:94:f3:8b:e8:4a:3f:62:60:b6:e6:
21:4d:af:b0:90:cb:f3:69:b4:14:5f:b3:cc:13:02:ea:88:29:
98:a6:96:88:77:68:d5:b5:30:38:de:75:3a:f1:ba:45:e1:b1:
67:a8:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:45 2026 by rpki-client