Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: D2mrCtDEdozKP3fyBn7pOnJXPwoQSuY46hhueMFw5QM=
Subject key identifier: 94:BB:37:6D:CD:A1:6C:78:55:5C:30:43:E6:46:F0:EC:46:6F:84:35
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 019D28BB1721E93B0919CFD05CB07B82CC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:42 +0000
Manifest this update: Thu 26 Mar 2026 06:00:42 +0000
Manifest next update: Fri 27 Mar 2026 06:00:42 +0000
Files and hashes: 1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: r5p/7GPamKeCpoUas9N5Q0Sh4BDcYQJ+Dx+rHksp7Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:17:21:e9:3b:09:19:cf:d0:5c:b0:7b:82:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Mar 26 06:00:42 2026 GMT
Not After : Mar 27 06:00:42 2026 GMT
Subject: CN=94bb376dcda16c78555c3043e646f0ec466f8435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:71:85:db:f8:e5:f4:54:af:af:f2:aa:dc:
45:3b:61:4b:48:a9:b8:c9:af:af:82:37:ad:83:3f:
cc:71:40:f5:61:63:80:61:8d:af:0e:e4:f1:7f:49:
aa:90:38:49:34:db:7e:4d:78:22:08:4c:96:0e:69:
1b:ef:e9:31:e5:0d:6f:e5:11:2d:01:56:f9:51:f1:
2d:7f:ed:91:24:97:a2:e2:a6:a7:cf:b1:5a:7a:9b:
7d:15:b7:5c:db:05:dd:40:36:6e:96:59:2e:3f:35:
b8:f6:39:16:4b:55:31:31:f4:f3:1e:b5:bd:1b:a2:
9b:e8:1d:ff:1a:ad:e2:e4:23:0c:0e:5c:1e:58:2a:
b3:4c:72:81:39:df:84:3c:53:e3:0f:12:4c:b7:aa:
70:54:f4:9c:ae:e2:9a:3d:ef:da:a3:21:05:5b:c4:
0e:a7:85:56:d5:6e:e9:d2:df:fb:9a:64:36:9d:da:
49:31:2c:f8:70:58:27:a9:2b:6b:b9:c0:0c:f9:6e:
0c:01:d4:73:24:23:ba:ba:f0:8b:d0:d5:ca:98:5d:
20:a5:dc:e2:03:a5:5d:64:21:c3:dd:81:fd:bb:0a:
19:31:de:31:26:f5:b7:83:0e:64:88:b7:c4:1c:09:
47:0e:db:04:b3:5c:72:e1:b7:5c:88:da:a3:31:dd:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:37:6D:CD:A1:6C:78:55:5C:30:43:E6:46:F0:EC:46:6F:84:35
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:80:29:fe:90:f8:ea:ef:37:65:83:82:35:0b:fa:f7:82:c1:
82:ef:4e:c3:a9:cd:2a:d9:f6:8c:01:fd:a5:8d:bb:91:b5:b7:
d7:53:1e:fd:8d:ed:12:73:61:76:aa:f2:61:bf:b9:9d:3c:69:
1d:a6:e6:ce:c1:a5:43:c0:c3:41:e1:ab:8f:0b:0a:e3:18:d3:
f3:d1:08:2c:5f:3b:1c:11:de:58:f0:14:54:49:75:1e:78:46:
ea:e9:46:c7:ef:bb:17:88:de:a7:13:19:86:37:c8:3a:de:70:
16:fc:7b:66:fe:2b:29:58:89:c6:17:1f:cd:03:2e:b0:8a:a8:
a3:42:5f:d8:ac:bc:bc:78:65:f2:5b:95:c4:f4:95:e8:f0:54:
96:8d:6a:ab:c3:26:d0:a6:fa:92:c5:62:62:e0:84:1f:77:7a:
71:67:1a:4b:f2:56:23:23:32:c5:3d:16:7b:4a:36:ef:1a:89:
ed:18:c4:99:bd:58:39:38:0b:be:29:b2:67:10:c3:3b:1d:bf:
75:43:fb:c1:ed:e0:c2:5c:2e:db:0d:5f:df:d2:ca:92:66:ce:
2b:fe:e8:2f:91:f0:1a:ad:f5:45:b7:ff:af:cb:1a:38:2a:0d:
00:b2:ca:ec:e8:16:e7:97:bc:03:43:b6:ed:f5:58:3f:c4:c0:
ba:f2:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:20 2026 by rpki-client