Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: T1t5cwrHJbttEwuSyhkdUlMJQXzKkEp3eSxzgCnQG7w=
Subject key identifier: 02:B0:2A:C7:21:70:54:26:87:C6:01:EA:A6:70:09:F5:3D:7A:3A:18
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019D333E6A3ABF858C1A7B360E128B3F8B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 119B
Signing time: Sat 28 Mar 2026 07:00:21 +0000
Manifest this update: Sat 28 Mar 2026 07:00:21 +0000
Manifest next update: Sun 29 Mar 2026 07:00:21 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: dykd34V3Pm9GNrFB+DACZU5rVYo4uCZMeDHURb9rqRE=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:6a:3a:bf:85:8c:1a:7b:36:0e:12:8b:3f:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Mar 28 07:00:21 2026 GMT
Not After : Mar 29 07:00:21 2026 GMT
Subject: CN=02b02ac72170542687c601eaa67009f53d7a3a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:b0:ba:38:e4:78:4f:ea:12:60:d9:67:59:
e2:73:57:95:0b:bf:3b:dc:ec:7e:de:2f:5d:dc:9d:
5d:a0:c2:6c:88:23:52:b6:8f:53:65:3a:52:77:30:
12:79:33:1c:5d:35:31:16:5d:ac:cd:57:56:89:d8:
50:94:c1:84:df:55:f1:8b:2b:f4:eb:b0:f7:0e:a6:
8c:de:cc:7d:e1:27:9b:3f:5b:8c:98:83:a2:c2:b1:
f3:a9:e0:b6:cd:c8:16:50:87:58:5d:d5:24:2e:9e:
23:01:d4:e2:6d:c3:6c:ab:d4:5f:dc:6b:a0:e7:cb:
dc:51:8c:c1:74:97:cf:23:f9:a0:ee:a2:fc:49:09:
c7:2d:c5:cf:fc:c7:79:74:b8:97:cd:8e:d1:5d:72:
8f:3b:a3:dd:6c:5f:6e:42:83:1c:37:f0:9a:96:85:
43:70:22:60:2f:23:f6:cb:98:67:0b:11:37:b1:f1:
59:ae:d9:cb:56:31:fc:81:41:8f:da:f8:62:7a:d9:
b1:d9:37:ed:e8:b1:3a:e6:ab:36:0e:99:9d:f2:80:
00:42:80:54:4f:12:10:81:2e:68:6c:20:09:3b:dc:
b3:92:34:5e:48:1b:bf:d6:bc:00:fd:b6:9c:89:c7:
f0:d9:aa:a5:02:85:57:91:ca:83:0f:33:4b:f3:b0:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B0:2A:C7:21:70:54:26:87:C6:01:EA:A6:70:09:F5:3D:7A:3A:18
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f0:9c:a0:c5:e4:04:b8:cb:dd:e9:a0:41:2a:3c:40:19:88:
95:b6:95:58:94:74:17:dc:e0:d9:8a:3c:ae:4c:c5:9e:74:a2:
e5:4f:74:62:44:79:16:42:c3:1b:28:2e:ea:96:3b:38:1e:e2:
72:e2:92:a8:af:bd:ac:15:15:5f:c1:8e:4d:91:37:33:3e:4e:
42:f5:ea:18:ea:d7:87:13:1c:a1:de:81:90:a5:50:f6:4b:e0:
b4:0e:40:51:cf:6a:a4:cf:71:0a:18:ce:a1:05:1d:0a:7c:64:
6e:1b:e1:1a:b4:c1:7f:d5:d1:3c:cf:53:4e:6b:fe:85:e4:57:
dc:d3:22:22:0b:b6:b3:3d:60:e6:d8:62:84:d3:4a:ae:61:1e:
51:b5:63:12:ea:33:ab:5a:39:2b:a2:ae:cf:c0:62:7f:ce:f0:
90:68:f4:a5:44:69:7d:76:82:df:6f:d7:b6:aa:83:55:5d:4f:
54:ce:d9:23:8e:4d:3a:a4:05:00:93:6f:83:02:f5:4d:34:8c:
c9:61:42:87:59:d1:4b:87:9b:18:43:a6:be:49:49:1b:d8:19:
0d:3d:0e:0f:c7:ad:c9:e5:e4:13:36:35:38:08:a7:c3:51:9b:
79:f7:ec:27:50:27:9b:8b:d5:dc:64:13:8f:98:9a:26:5c:95:
84:62:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:29:38 2026 by rpki-client