Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: CN6cT7B93u5wblLnAwNoZMNxD3Yz2szku0MBAdyJN0Q=
Subject key identifier: 30:49:C7:CD:BC:ED:E4:45:FC:00:53:E1:E7:C9:29:B8:38:0F:36:C7
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 019D2771CD6F0FEEA0AC10ACB3AD2327592E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 16F4
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: J01Fpct5Y6DBY-ay2CI2Onxw7ls.roa (hash: U4PkhqJ+Vho+VmAjuCONJYVLeK5uvQZ0u+ij3ZflsHA=)
2: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: KgO1ioncOTOCfgfvbIy9adNOb4I1/fw4tZLYgvIRjtI=)
3: hUmeN4RZKbsYYc_l4uCSd2PDCfo.roa (hash: Tk0pGzYSdyHfAZRkeQDxs+AKgZCXk7MNPWm4TXjCtDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cd:6f:0f:ee:a0:ac:10:ac:b3:ad:23:27:59:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=3049c7cdbcede445fc0053e1e7c929b8380f36c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:77:d7:ef:21:9b:ab:5c:b6:37:b1:6c:f9:
e0:62:66:10:bd:5b:90:dd:16:40:74:d1:8d:e3:37:
5d:e4:ee:20:ad:36:c7:0f:ba:2c:00:d6:0c:2a:df:
de:7c:d3:19:fc:7e:71:27:24:ec:fd:e3:84:bc:df:
41:17:59:48:9a:0b:d4:b4:01:2e:20:67:46:ec:3f:
7e:7c:85:8f:86:ed:15:bc:30:06:d2:41:44:34:2f:
08:d9:ea:f2:a8:6c:83:3d:a7:55:3b:c9:3e:a6:b8:
da:e3:47:07:c4:07:13:c0:8f:a9:36:85:ec:cf:a6:
1c:af:5f:ca:5d:86:3a:67:53:7f:7e:8b:d4:8a:7a:
6a:b8:d6:53:63:54:cd:7b:de:1a:83:e9:73:70:86:
af:8c:ca:3a:17:2a:58:20:0b:e4:cf:8a:2e:5d:43:
d4:b1:cb:55:d5:fc:28:7a:9f:a5:97:5f:7d:1a:51:
d9:ed:4f:fe:34:da:3e:be:00:be:14:ef:02:38:c8:
60:c4:d5:9c:05:b0:23:50:0a:09:60:66:2a:11:26:
2b:18:46:da:2f:0d:1c:4a:0a:bc:26:bd:b6:fe:e9:
52:ee:4a:53:9e:32:f9:7e:2d:38:41:f0:93:93:f5:
22:97:f8:60:50:67:af:9a:05:46:e5:e6:80:76:15:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:C7:CD:BC:ED:E4:45:FC:00:53:E1:E7:C9:29:B8:38:0F:36:C7
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:a2:3b:2b:4d:e7:8a:03:f7:81:40:c9:9e:94:44:62:db:
01:ec:0c:fe:63:9c:40:69:36:f0:ff:0e:06:79:77:17:9f:d6:
9a:e0:c7:26:2a:19:7a:21:a6:ca:c4:f9:40:15:2d:93:25:52:
a9:46:5f:b7:ee:21:4a:8b:74:f6:8b:b8:b6:90:a2:e1:bc:24:
74:0f:1e:99:3d:72:71:8f:c7:56:b4:42:1f:61:24:c6:33:46:
d4:9e:d1:d6:4f:5d:5d:3e:90:2a:5a:d2:75:7c:e4:fc:cb:a9:
69:04:dc:48:a4:97:a9:aa:33:c9:19:6a:4c:58:69:48:0c:79:
c3:09:c9:d3:b5:dd:16:63:97:75:ff:a0:25:87:7f:c9:20:dd:
fb:ba:7d:e8:9f:b2:de:ad:65:a2:d1:8c:a2:d8:cd:cd:0c:95:
f8:42:25:87:74:66:72:4e:11:c0:cf:12:d5:0f:e3:ae:5d:1c:
e4:74:4b:10:e0:7c:e2:ca:d6:93:c0:f3:a2:e2:02:e8:cc:19:
24:40:fd:3b:1f:09:a5:1d:18:e9:3e:0a:ed:29:6b:3e:d5:00:
81:b4:0e:4e:e8:e1:42:7a:12:bc:c6:e7:48:d5:25:0f:7f:12:
08:73:b7:a3:50:f5:a3:21:8d:e0:84:0c:9c:17:5c:a6:3f:00:
f0:e9:23:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncc1vD+6grBCss60jJ1kuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzcwMWQ1ODUwNDkxZjUwMjk5ZWY5M2YyZDc0MDliNzhj
ZDZjOTYwHhcNMjYwMzI2MDAwMTAyWhcNMjYwMzI3MDAwMTAyWjAzMTEwLwYDVQQD
EygzMDQ5YzdjZGJjZWRlNDQ1ZmMwMDUzZTFlN2M5MjliODM4MGYzNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXx31+8hm6tctjexbPngYmYQvVuQ
3RZAdNGN4zdd5O4grTbHD7osANYMKt/efNMZ/H5xJyTs/eOEvN9BF1lImgvUtAEu
IGdG7D9+fIWPhu0VvDAG0kFENC8I2eryqGyDPadVO8k+prja40cHxAcTwI+pNoXs
z6Ycr1/KXYY6Z1N/fovUinpquNZTY1TNe94ag+lzcIavjMo6FypYIAvkz4ouXUPU
sctV1fwoep+ll199GlHZ7U/+NNo+vgC+FO8COMhgxNWcBbAjUAoJYGYqESYrGEba
Lw0cSgq8Jr22/ulS7kpTnjL5fi04QfCTk/Uil/hgUGevmgVG5eaAdhWQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBJx8287eRF/ABT4efJKbg4DzbHMB8GA1UdIwQY
MBaAFG13AdWFBJH1Apnvk/LXQJt4zWyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAt
NjZhMzI5YjZhZmFkLzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAtNjZhMzI5YjZhZmFk
LzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqGiOytN
54oD94FAyZ6URGLbAewM/mOcQGk28P8OBnl3F5/WmuDHJioZeiGmysT5QBUtkyVS
qUZft+4hSot09ou4tpCi4bwkdA8emT1ycY/HVrRCH2EkxjNG1J7R1k9dXT6QKlrS
dXzk/MupaQTcSKSXqaozyRlqTFhpSAx5wwnJ07XdFmOXdf+gJYd/ySDd+7p96J+y
3q1lotGMotjNzQyV+EIlh3Rmck4RwM8S1Q/jrl0c5HRLEOB84srWk8DzouIC6MwZ
JED9Ox8JpR0Y6T4K7SlrPtUAgbQOTujhQnoSvMbnSNUlD38SCHO3o1D1oyGN4IQM
nBdcpj8A8OkjLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:35 2026 by rpki-client