
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: ymGpy7CcHuF9gJloQG4sgxYCrqt8lhlgD82YgV8o2dA=
Subject key identifier: 93:ED:CE:DF:BB:7E:C9:A1:7C:41:A8:B8:1E:79:44:26:08:B3:F7:9F
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 019D27DFD7278D5673EDE1B65144540EC885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0F6B
Signing time: Thu 26 Mar 2026 02:01:13 +0000
Manifest this update: Thu 26 Mar 2026 02:01:13 +0000
Manifest next update: Fri 27 Mar 2026 02:01:13 +0000
Files and hashes: 1: 0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa (hash: yajzvHBczLvuRuutMDqrA4C/+S65nBUWHxWPZS+HU6Y=)
2: DpPM78RcAUvB-2kUXp3GCC4YWfM.roa (hash: 0s/UH20Gxwk37R3AzNPM1q4h2mFyRoMXI2GNUSV2z7A=)
3: O-In-8EU6bPfnod8wXwR8FyJmbs.roa (hash: uelI0IHExddUnealsb56pd/EXHI/t8Ure6Mfv6igkCw=)
4: _vXqV2-g7xwCNYuc9LOG1sJWevM.roa (hash: BJlsW9/rnHnD9aRumzD296n7QaGzXmfbPDZjx3MN9U0=)
5: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: DKWKIwVMgrs8ZhbUFxopCUV93yfDPycvxyo/RE/Hd0I=)
6: j9TBm7xlc93nIZuNOs3NlUyZzEs.roa (hash: OJvrZsHB8fK3Xgo6IhUOmrDOAtYYR5DtLBMAzJ8x9HU=)
7: v1kxLCHFe4rXrYp0W0C1yyln4_I.roa (hash: 6ZjRVf5/3Gwzgj/w23L+ctsJZNRROST71Vpw12YsM/U=)
8: xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa (hash: hFlPZerhEkhi26Lu5WKLWffMM3WUMXgzobrQrYJBZfA=)
9: xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa (hash: l2//kwEVxmYAhAAeP0g1fPw8aXt0cKX6RabVhra8PNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d7:27:8d:56:73:ed:e1:b6:51:44:54:0e:c8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Mar 26 02:01:13 2026 GMT
Not After : Mar 27 02:01:13 2026 GMT
Subject: CN=93edcedfbb7ec9a17c41a8b81e79442608b3f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:e3:e3:90:68:26:92:74:a7:0c:4f:fb:2a:
d9:62:2c:da:26:1f:14:68:d5:d5:03:8c:84:4d:f2:
c1:02:3b:a6:95:ee:6a:70:7a:7c:f7:bf:49:1b:34:
12:e9:c2:81:c3:8d:ac:9c:3d:4b:35:03:b0:24:d9:
8d:fd:2b:78:62:b3:15:fe:e4:9a:1c:8e:cd:c6:8f:
dc:35:73:46:48:20:94:fb:5a:4c:2e:6c:00:31:50:
69:d0:5a:b1:87:96:6a:72:81:6b:39:29:c4:54:ad:
5d:10:e5:cc:ea:8a:c5:4a:b1:d4:45:ec:f0:5d:f1:
7a:81:ee:fc:0f:41:43:40:50:9d:d3:0b:ac:27:de:
b7:bb:43:6c:f0:79:c8:4e:f7:5f:d2:fd:c3:1c:1c:
72:58:f3:87:d4:34:48:01:09:2c:84:e9:5f:d7:3b:
ca:d6:6e:ee:30:36:ad:48:74:7e:bf:a6:9b:64:33:
5d:4c:7a:db:8b:80:65:5f:0b:5b:8d:d2:cd:31:39:
4f:80:f2:46:83:48:3f:97:23:15:c6:cd:4a:6c:d0:
00:6a:ec:23:23:58:ae:00:c3:5e:0d:be:de:70:5e:
22:26:26:5c:5e:99:d0:0e:6c:38:a9:8b:62:c2:5c:
bd:19:30:ce:9c:64:82:77:c0:9f:33:b4:49:71:c5:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:CE:DF:BB:7E:C9:A1:7C:41:A8:B8:1E:79:44:26:08:B3:F7:9F
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e6:31:f1:79:5a:15:9d:91:14:ad:e4:56:61:a2:83:0c:21:
7a:1c:2f:94:cd:a4:1f:d7:7a:4f:5b:24:3a:97:c8:0b:b3:27:
b2:96:07:52:d6:9f:41:9e:e6:d0:7d:61:1b:ea:25:0b:1f:d9:
ea:fd:a3:95:2e:08:92:1b:19:23:9a:51:6b:24:e9:d4:ff:29:
eb:c7:68:5c:15:02:2a:ca:a9:41:63:f7:32:2b:cd:f1:51:4d:
32:0b:79:f4:bf:9c:8e:00:04:9e:2d:fa:d2:f9:ff:4d:b7:08:
75:a6:72:15:f4:e7:f4:8d:91:a7:c6:7f:b1:3b:68:8a:39:a8:
1c:19:41:5c:f8:5a:6c:1f:79:7d:45:91:23:45:72:72:f1:b7:
09:a2:76:3d:48:c5:39:53:9b:48:34:e7:31:87:5c:e4:ba:bf:
b3:9d:9b:b2:bd:76:0f:a3:17:68:19:8d:ce:00:4e:cd:a0:d6:
3f:f0:da:81:76:c2:ef:00:61:41:62:5b:fc:d2:1d:d9:4c:8a:
72:1b:d8:45:10:41:36:e8:43:12:f5:2c:d7:3b:d5:8f:a9:63:
2c:42:c3:ca:8d:bb:29:bd:4a:0a:ff:26:98:a1:20:08:4d:24:
ed:9a:38:69:9f:fe:a1:b4:5a:73:78:b9:cc:32:c1:43:4d:55:
4e:cf:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:07 2026 by rpki-client