Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: pZMmkbtpCmB277SroYWwLwyTXL7kwhsx8/tAz0660bc=
Subject key identifier: 22:60:F3:1A:B1:EA:9C:4D:E4:4E:D5:68:FE:C5:1A:86:EB:E6:D7:92
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 019D296138062AB4E8A14B8E01B2CB38031A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:10 +0000
Manifest this update: Thu 26 Mar 2026 09:02:10 +0000
Manifest next update: Fri 27 Mar 2026 09:02:10 +0000
Files and hashes: 1: SVOvzgkEfvGYjK4LPp7LCekPWQg.roa (hash: lwuDAbFV1ncdXu1vKoYuToeJM9cyJDqz+l6o1B6s+ac=)
2: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: XpOyjJI1sH25/KmAivZ824IBwKy2M0ex/n8Z1CV7/w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:38:06:2a:b4:e8:a1:4b:8e:01:b2:cb:38:03:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Mar 26 09:02:10 2026 GMT
Not After : Mar 27 09:02:10 2026 GMT
Subject: CN=2260f31ab1ea9c4de44ed568fec51a86ebe6d792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:d4:ce:ab:25:19:c4:9c:31:ac:14:d9:88:
4e:54:a2:e7:5c:03:a8:2a:7d:78:dd:51:73:d3:72:
a1:1e:08:13:85:5b:42:d4:37:b0:e3:33:a2:44:8d:
1d:c4:b7:2a:4c:d3:fc:13:7c:2f:17:d4:fb:4a:c3:
dc:c3:76:8d:07:8f:df:c8:bb:cb:99:ef:b8:65:1c:
d2:ad:97:87:80:37:15:49:4e:9c:21:d8:c5:da:43:
a2:fb:28:e5:35:ba:00:e0:3d:36:53:99:ed:13:3e:
c7:e4:50:9a:5b:58:f5:4c:2e:63:d6:19:6e:90:9d:
ef:00:dc:c4:0a:a0:f9:49:61:04:ae:0f:5a:73:a9:
71:45:af:63:28:f0:0f:5f:99:4f:d7:77:d3:6e:2e:
25:e7:58:a3:e1:36:21:6c:3d:05:7e:d4:5a:aa:31:
44:32:13:35:86:3c:ed:8f:47:af:57:e1:12:fa:7f:
53:c8:3b:52:2f:6c:ae:d9:5f:ab:6a:d3:05:9c:03:
ad:9a:ea:8d:b2:60:23:a8:ac:91:e1:c5:53:eb:2a:
26:60:cf:58:c5:82:48:bf:22:e7:f3:4f:de:57:66:
06:d6:54:1a:4c:4c:fb:fb:47:83:0a:9f:36:a8:84:
c5:55:fa:b8:12:e0:df:9f:3a:04:bb:cd:b1:f7:0c:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:60:F3:1A:B1:EA:9C:4D:E4:4E:D5:68:FE:C5:1A:86:EB:E6:D7:92
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f6:ae:1c:0b:c5:a0:e7:96:a3:a7:c1:84:82:34:c6:83:b5:
53:64:42:1a:05:58:65:a6:cb:82:69:38:37:5e:9a:e5:1f:05:
21:e4:e2:52:96:90:3b:64:be:32:58:39:8c:6a:d8:8d:ca:17:
47:90:14:99:6f:1c:f7:c0:ce:12:92:32:7b:61:83:ea:d6:d8:
c7:37:18:ea:3c:5a:e0:90:a0:de:7f:8f:9b:e8:8d:fd:75:e3:
5b:d1:4b:a0:d5:1b:b1:2a:e5:0d:72:df:f0:9c:28:07:52:0c:
d9:33:b9:b7:71:1e:4b:8d:a2:d8:97:e7:ed:bb:0c:26:99:93:
03:91:74:26:6f:b1:6a:f9:ba:52:8e:b7:71:bf:33:03:25:92:
47:91:ae:1a:24:e5:18:c3:d2:7b:aa:26:62:87:13:1f:0b:7e:
61:d2:46:10:a0:f0:b4:35:3c:05:a7:a3:c4:07:29:4d:1c:c3:
e5:e6:90:05:9a:8a:a9:1a:14:96:a0:be:d4:3b:cc:ba:3c:55:
f0:5f:4f:e6:d8:6c:d2:85:89:a9:4b:1f:53:5d:37:64:74:01:
df:ec:69:4e:85:11:bb:a8:79:0f:c3:02:63:27:46:3d:71:0d:
cc:ef:15:7d:ab:54:98:24:0c:16:d0:64:9e:10:ef:0d:ff:33:
d9:0e:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:05 2026 by rpki-client