Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: 52NvWIZ+3pvpCV6F+DUhP6N7dZaRzJ/1llv/x9BzC6I=
Subject key identifier: 00:68:E6:A5:FA:5B:9D:11:E5:39:69:47:95:E7:91:A6:9C:44:B5:86
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019E1CEC09D6792440E870AC60692E268B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 1214
Signing time: Tue 12 May 2026 16:01:31 +0000
Manifest this update: Tue 12 May 2026 16:01:31 +0000
Manifest next update: Wed 13 May 2026 16:01:31 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: Tp8HoIFzJAtdOA4BqMyp3lLPlVsLstIVwzODc2X5gQw=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:09:d6:79:24:40:e8:70:ac:60:69:2e:26:8b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: May 12 16:01:31 2026 GMT
Not After : May 13 16:01:31 2026 GMT
Subject: CN=0068e6a5fa5b9d11e539694795e791a69c44b586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:9c:cb:fb:b6:63:2d:4b:53:e6:2d:30:31:
9b:a5:4c:e5:5f:f6:ea:5f:63:6e:1a:cf:a5:70:df:
f7:0f:fc:6f:23:d9:f8:37:71:7d:c7:1d:ad:ee:03:
58:07:d9:4a:20:07:8f:26:89:72:d7:39:e7:b2:c9:
f7:ef:02:b6:26:1d:ec:b4:6e:a4:4f:97:44:b9:ed:
eb:35:cf:c2:b3:1b:3d:58:af:25:6d:b5:8f:a3:44:
7a:e7:85:de:ff:a4:a4:ca:59:65:01:b2:29:e7:9e:
09:55:2c:93:b0:56:6b:0d:be:b4:2b:df:7a:7d:41:
e9:86:c4:52:65:08:fe:81:8f:7a:17:bb:dd:98:4c:
95:b3:2c:17:18:e6:72:4c:ee:ee:25:55:b0:6d:2d:
ff:13:c1:61:ba:cf:0a:d4:6d:83:a3:bf:6e:96:2c:
cd:05:d4:5b:a3:6b:39:be:12:1e:61:65:37:aa:bb:
fc:cd:5e:83:15:f0:81:f7:25:56:ba:60:ee:0e:07:
ef:5f:86:21:54:5e:a8:85:03:f7:ae:c3:3a:39:9c:
b6:dd:98:73:2f:27:ce:59:ed:45:f9:05:48:cc:e7:
68:5b:ba:75:de:0b:83:1d:65:d2:8a:a8:dc:7a:96:
ba:5b:65:d8:68:c7:05:8c:eb:a8:9b:48:a9:7f:07:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:68:E6:A5:FA:5B:9D:11:E5:39:69:47:95:E7:91:A6:9C:44:B5:86
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:78:6d:50:04:2c:15:c4:72:7e:94:cc:be:18:fc:09:87:b2:
2a:07:03:e2:b3:65:42:55:76:19:b4:d9:84:5e:93:65:69:22:
c6:7f:2b:da:5f:42:19:78:b1:79:44:e3:7d:ab:e7:69:b0:34:
e8:e9:03:67:78:fd:6f:9a:31:f7:1b:4d:ba:97:63:48:1b:d7:
9a:54:92:63:bf:d7:fd:75:d0:ba:8d:ea:28:96:3d:4b:f4:01:
4b:b9:2a:36:51:a0:44:c8:a5:7d:7b:5b:b2:0d:94:b8:19:f0:
f6:18:90:29:f3:97:1a:28:a4:fc:50:18:45:26:18:3a:1c:44:
f6:ff:3e:0e:2e:98:55:4f:56:b2:23:25:b6:de:4b:53:25:93:
a1:84:ba:93:d9:bb:37:cd:bc:32:23:35:f0:7c:87:a1:a2:a5:
94:9e:c4:50:1c:fe:bd:88:92:ac:83:19:aa:fd:7d:5c:c7:86:
04:c9:86:00:a2:7f:18:f6:f0:72:40:d2:11:be:4f:ef:ca:1c:
3c:8d:50:96:36:d7:26:ee:04:be:08:ac:d9:a6:9e:6c:53:35:
53:55:af:bc:30:ac:ad:33:26:b1:16:1c:b3:45:ab:14:50:36:
a2:db:54:32:93:96:dd:63:d8:35:79:05:02:f0:3e:d7:e0:ad:
4e:c5:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:43 2026 by rpki-client