Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: 1NBf4ziXVGPj9EZODwtXhRq66m9bWGQzOodNjenDNTc=
Subject key identifier: 03:BE:16:52:4F:D2:F0:5B:7E:D9:BB:EC:BB:A9:AF:34:4C:43:2A:FD
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 019D2C2A7B75DE7058237D64E120135717FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 0AC7
Signing time: Thu 26 Mar 2026 22:01:14 +0000
Manifest this update: Thu 26 Mar 2026 22:01:14 +0000
Manifest next update: Fri 27 Mar 2026 22:01:14 +0000
Files and hashes: 1: 1BErc-sCXugnHLg09q4n_ZjYz7I.roa (hash: 52qZtaxRHc/C+Jbo8eGgMzX6zH/fjvF2XaUR90mgHO4=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: 7QPV2cvoNUu6sOJXh/LwWzuwKVs/VRQP071ke2bqk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:7b:75:de:70:58:23:7d:64:e1:20:13:57:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Mar 26 22:01:14 2026 GMT
Not After : Mar 27 22:01:14 2026 GMT
Subject: CN=03be16524fd2f05b7ed9bbecbba9af344c432afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:e8:d3:e8:2b:75:96:94:39:7d:6f:6c:6a:
19:50:b1:e3:15:32:6b:1e:35:d6:1e:47:f0:9c:9c:
5f:c1:b9:ea:12:64:78:d7:4d:be:1d:d6:a3:97:a6:
f0:14:0b:c4:d0:74:95:b2:45:b2:4f:88:7e:52:43:
9f:ea:0d:af:ee:99:db:a1:ca:16:50:fe:e9:66:c4:
c6:ac:82:42:0a:12:5a:8d:42:bf:87:b1:1d:aa:28:
58:05:b6:be:70:eb:6b:43:09:af:11:95:7b:44:ea:
4b:85:bc:96:9e:43:ec:dd:2f:54:15:a5:9b:9e:db:
89:31:68:a1:be:3e:22:98:02:3d:9b:fa:ae:f6:cb:
59:05:82:49:82:0a:32:ae:70:da:12:91:18:f5:a6:
3a:24:33:d1:5d:f6:0c:04:a2:7a:a0:41:ca:a7:2a:
64:8a:1a:57:48:89:0d:b7:65:1d:e6:17:73:b0:75:
3b:dd:5f:f6:59:e8:88:cb:9b:59:6f:e0:34:3e:37:
85:63:e0:f9:01:d1:10:3e:a1:91:50:60:9a:65:bb:
7d:f7:f7:23:05:c7:5b:20:5d:2d:29:a4:33:9c:93:
bc:7c:c0:9f:e9:60:55:33:11:d5:f2:ab:f1:c1:3f:
02:02:5e:8d:39:c0:1a:c7:6e:f9:a3:5c:49:ec:d9:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BE:16:52:4F:D2:F0:5B:7E:D9:BB:EC:BB:A9:AF:34:4C:43:2A:FD
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:8a:b6:ec:57:a6:72:94:e0:f9:51:23:af:99:e9:cd:3b:
ca:55:92:8b:e5:91:0b:d5:dd:64:ad:2c:06:ec:9f:7a:0c:46:
e1:44:53:ef:3e:4a:6a:27:b5:a3:85:6d:cb:94:0d:60:50:13:
5b:76:8b:49:d9:6e:5b:d6:3a:91:66:6e:c5:b8:b2:55:14:da:
8a:81:de:a2:b7:c8:71:45:94:bc:fb:fd:af:67:e0:eb:fb:90:
ed:33:e8:8b:c8:3a:64:8f:5e:23:0f:67:46:62:98:dc:70:6e:
bd:d9:9a:b0:b3:0e:3f:ce:f8:e1:0d:80:7e:23:79:dc:5d:0c:
64:6e:66:77:c0:c3:2b:20:dc:84:6d:f1:43:e6:80:3a:23:3f:
f9:a2:d5:76:bd:2f:96:13:73:0e:85:b0:ac:b9:c1:3a:9e:53:
04:54:04:de:43:73:81:b8:fa:d7:33:6b:87:7d:a1:95:7e:af:
f0:22:37:db:5c:47:20:48:bf:83:8e:a3:d0:56:fb:be:62:80:
ff:e2:44:d3:91:57:4e:20:3e:f8:a4:2e:2f:40:fb:ad:fd:eb:
e8:1b:da:44:26:43:22:c6:29:b5:65:0b:69:8a:02:52:29:1d:
6e:12:7f:95:0a:cd:7d:12:ef:2e:28:33:99:c4:8b:39:31:2f:
ff:ca:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:11:25 2026 by rpki-client