Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File: b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier: 5hziykhtJZAIKNyBLobPr2AdXGMhy+V0rFSev27JkAk=
Subject key identifier: 7C:49:D7:62:E3:31:0E:6B:06:1A:F8:E2:6B:A8:F8:81:7F:4E:17:45
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial: 019E1FECD5D2EC239B703D17973D09EEAD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number: 0456
Signing time: Wed 13 May 2026 06:01:15 +0000
Manifest this update: Wed 13 May 2026 06:01:15 +0000
Manifest next update: Thu 14 May 2026 06:01:15 +0000
Files and hashes: 1: Qiay74MbBLJX0CXXaOcyKRwu1oE.roa (hash: kahuToIQXEZrrTaByaYWat/npZL3xVVcTJ88XatdcNg=)
2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: SJ4WDKvFRW8YPmlfUh8szCYy0xyZ2bN888UqI/U6Pl4=)
3: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (hash: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:d5:d2:ec:23:9b:70:3d:17:97:3d:09:ee:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Validity
Not Before: May 13 06:01:15 2026 GMT
Not After : May 14 06:01:15 2026 GMT
Subject: CN=7c49d762e3310e6b061af8e26ba8f8817f4e1745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:58:b5:4a:10:36:52:6a:90:90:33:2c:ca:
75:4f:9a:c4:3e:c1:de:4f:2b:84:0d:4f:2f:fd:a2:
b8:10:dd:99:7f:08:22:e5:ee:6c:35:94:dc:45:71:
42:6b:08:fc:78:52:a6:64:e1:9c:18:42:76:b9:37:
db:1b:98:55:4b:c7:81:6f:25:1e:e4:d5:bf:30:87:
76:20:e3:d8:a3:42:72:21:22:b0:1c:48:f0:21:92:
11:50:d7:55:c1:d7:ae:25:1b:22:94:49:fb:0f:11:
0c:de:8b:81:88:08:b8:1b:82:6b:e4:03:93:98:31:
3f:39:a8:90:2a:54:a8:af:18:62:e2:25:13:e5:5d:
66:e9:ef:d7:93:40:e4:4f:3b:a2:64:a1:ae:b2:5d:
b1:36:05:94:cf:e2:60:c9:a3:dc:79:3b:c6:86:e0:
1b:66:06:3e:2d:8e:91:b2:68:52:6d:da:8c:b7:a5:
ce:3c:a4:f0:c0:1d:17:fd:bb:0a:47:f2:48:0b:c0:
37:1b:9b:6a:81:5b:33:13:92:1f:c9:a2:99:0c:14:
ab:5d:91:0a:77:45:e2:77:d1:70:a7:67:86:54:92:
b4:1a:be:54:e6:48:1e:4c:4d:33:cb:37:6a:98:77:
0a:09:1b:c9:36:1f:63:24:23:53:ff:41:d8:25:53:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:D7:62:E3:31:0E:6B:06:1A:F8:E2:6B:A8:F8:81:7F:4E:17:45
X509v3 Authority Key Identifier:
keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:50:b2:10:65:2d:ef:87:7f:ea:e6:97:41:39:87:54:37:4a:
df:99:0f:70:61:69:0c:03:8c:15:54:6e:e1:14:aa:c3:1f:e5:
64:2e:0f:c7:dd:b3:7f:7e:f3:1f:21:2d:52:a1:bb:83:44:6a:
c9:2b:b1:36:13:46:04:f4:19:b2:df:c3:e4:87:6b:34:81:36:
5b:bf:45:40:81:f8:a2:83:01:73:0c:37:b1:f2:47:ce:d7:98:
76:28:be:0f:df:40:fb:7c:61:84:df:e9:ca:90:e4:a2:24:1b:
81:2c:ff:d3:1f:5f:27:a1:ec:5e:68:a5:31:df:03:36:cb:49:
f2:24:3f:85:e3:e0:b0:b9:3a:ec:a4:88:f4:0c:db:20:1f:7e:
22:2f:eb:63:8e:b0:79:ca:c0:db:9e:72:4d:7d:b0:1d:67:f3:
32:52:c9:5f:17:98:91:e2:b0:92:cc:5b:db:7b:21:33:02:48:
4f:3a:a7:44:e8:68:51:61:0a:19:87:bd:19:cb:14:93:03:b0:
fe:ba:0b:06:1e:e3:a4:95:1a:4a:8b:79:9d:b2:af:8b:15:a5:
b8:f7:dd:13:c2:e5:db:65:14:bd:ad:65:03:fd:0f:21:1b:3b:
30:9d:1d:35:4b:fc:06:de:8f:e8:6c:da:19:45:56:1d:b7:fd:
ed:30:d0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7NXS7CObcD0Xlz0J7q1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx
MDQ4YTUwHhcNMjYwNTEzMDYwMTE1WhcNMjYwNTE0MDYwMTE1WjAzMTEwLwYDVQQD
Eyg3YzQ5ZDc2MmUzMzEwZTZiMDYxYWY4ZTI2YmE4Zjg4MTdmNGUxNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ1YtUoQNlJqkJAzLMp1T5rEPsHe
TyuEDU8v/aK4EN2Zfwgi5e5sNZTcRXFCawj8eFKmZOGcGEJ2uTfbG5hVS8eBbyUe
5NW/MId2IOPYo0JyISKwHEjwIZIRUNdVwdeuJRsilEn7DxEM3ouBiAi4G4Jr5AOT
mDE/OaiQKlSorxhi4iUT5V1m6e/Xk0DkTzuiZKGusl2xNgWUz+JgyaPceTvGhuAb
ZgY+LY6RsmhSbdqMt6XOPKTwwB0X/bsKR/JIC8A3G5tqgVszE5IfyaKZDBSrXZEK
d0Xid9Fwp2eGVJK0Gr5U5kgeTE0zyzdqmHcKCRvJNh9jJCNT/0HYJVNXCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxJ12LjMQ5rBhr44muo+IF/ThdFMB8GA1UdIwQY
MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt
OTlhMDhiOTEyNzRjLzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj
LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlCyEGUt
74d/6uaXQTmHVDdK35kPcGFpDAOMFVRu4RSqwx/lZC4Px92zf37zHyEtUqG7g0Rq
ySuxNhNGBPQZst/D5IdrNIE2W79FQIH4ooMBcww3sfJHzteYdii+D99A+3xhhN/p
ypDkoiQbgSz/0x9fJ6HsXmilMd8DNstJ8iQ/hePgsLk67KSI9AzbIB9+Ii/rY46w
ecrA255yTX2wHWfzMlLJXxeYkeKwksxb23shMwJITzqnROhoUWEKGYe9GcsUkwOw
/roLBh7jpJUaSot5nbKvixWluPfdE8Ll22UUva1lA/0PIRs7MJ0dNUv8Bt6P6Gza
GUVWHbf97TDQag==
-----END CERTIFICATE-----
Generated at Wed May 13 18:26:37 2026 by rpki-client