Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier: 2bE4/PTGHOB1NpbhVGJpYzw4ruXH8SKuTbM1/nv7nRo=
Subject key identifier: 41:35:DD:C0:1A:DC:01:21:EF:F1:4E:8E:89:46:EC:28:3D:C3:C5:B9
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 019D28166CAF80CA8EC6C231282DCC818405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: 7N/nDqudcLnLqq9zEQfjLaB42gxQXM3yLfdV9wG8ikA=)
2: JKANABqd6E0fTlpYiraRYYJi5Is.roa (hash: kpgkNjTCyYCDSV5Bfn9GBPVaDYU8s9QPiJ/Y5QzbmG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6c:af:80:ca:8e:c6:c2:31:28:2d:cc:81:84:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=4135ddc01adc0121eff14e8e8946ec283dc3c5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:56:6d:9b:3a:96:55:e2:3f:95:14:3d:41:
98:69:5c:56:f6:5b:d0:8e:e8:ae:cf:65:b0:dd:69:
08:54:59:44:cd:37:d1:a6:72:18:6b:e2:d2:ed:f8:
af:9a:fb:01:12:c9:c1:6d:ab:29:e6:eb:3e:91:1d:
48:fc:35:a7:cb:7a:40:16:71:77:e3:71:01:9f:b9:
9b:94:a5:25:25:db:31:86:a7:cc:57:eb:35:e1:a4:
77:e4:39:68:0d:14:d0:0a:70:9f:38:e6:d5:ea:e0:
32:5f:7a:42:d0:12:e7:00:86:56:56:5b:bc:22:9e:
3d:33:19:e1:61:61:52:e0:5f:6e:d3:e6:b0:2c:2d:
b3:70:2c:9a:b2:1c:5d:75:12:63:66:92:69:2b:00:
47:51:51:60:77:2e:d7:22:1b:80:92:b3:4a:b9:a3:
64:38:9f:c2:b9:14:8a:1e:e3:b4:c4:10:ca:7f:b2:
06:f5:ff:03:9f:db:18:55:c2:9a:ac:44:31:01:58:
e1:bf:4a:98:03:7b:8e:d3:54:c2:56:7b:7a:1d:db:
7f:79:07:f0:8d:6c:6b:57:64:9b:02:66:9e:65:8a:
5c:3f:c0:8b:a2:be:c7:f0:b4:fe:e1:f9:22:d4:2b:
2a:b3:18:64:be:5f:d4:29:8b:3f:d0:76:a0:4f:71:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:DD:C0:1A:DC:01:21:EF:F1:4E:8E:89:46:EC:28:3D:C3:C5:B9
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:2f:aa:bf:cb:79:13:41:1b:08:6e:72:21:28:39:d0:09:
4e:68:4a:de:28:71:12:ef:42:cf:46:cc:40:dd:1e:ff:8e:58:
98:45:7e:42:a5:6a:7b:1d:b5:f7:3f:fd:71:8d:0e:24:04:7f:
0b:bd:24:ce:b7:e2:08:74:19:69:38:9e:75:62:07:0f:0e:6a:
3d:0d:73:81:e5:9d:0d:6e:56:1d:52:64:26:8d:69:3b:63:ba:
56:50:a4:99:36:48:29:1b:fc:a2:1e:b3:7a:78:10:77:37:f6:
c9:dd:64:94:1b:74:c8:93:8e:28:c0:2f:3c:b9:2f:34:a0:d0:
f2:33:b6:09:dd:c3:32:b6:b8:ee:5a:bd:2e:bf:a3:72:d8:9d:
0d:d3:19:76:61:24:9f:3e:1e:64:6a:88:38:bf:22:4b:17:27:
9e:2a:4a:1f:8f:d6:c5:a3:33:52:15:7e:ad:01:13:26:c4:d1:
6d:b9:06:9f:c2:29:26:10:79:d3:e2:76:3c:3b:dc:22:98:42:
0b:2f:aa:bf:0a:e4:f8:05:da:d2:e9:77:08:47:9d:70:31:cd:
80:fd:5e:40:ba:38:f7:e9:53:6d:e5:2b:87:2f:a1:73:19:a0:
c5:b2:6a:cc:3f:0a:bc:29:15:34:bc:91:18:cd:cb:1f:af:44:
75:f7:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:07 2026 by rpki-client