Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier: hya6+UN+NAyVb2wv5JVjl/Iq6BB/YClJiyI5EDh/Al0=
Subject key identifier: 14:BA:44:0C:93:81:36:F5:9B:D8:90:BF:C6:CB:75:27:36:49:CA:0A
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer: /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial: 019D337595EEA85B071590A297F330300B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number: 51
Signing time: Sat 28 Mar 2026 08:00:37 +0000
Manifest this update: Sat 28 Mar 2026 08:00:37 +0000
Manifest next update: Sun 29 Mar 2026 08:00:37 +0000
Files and hashes: 1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: +MIjnYm7NoGnnhTP6tUUdvXeLGbckKa57woWHSlahqI=)
2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:95:ee:a8:5b:07:15:90:a2:97:f3:30:30:0b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Validity
Not Before: Mar 28 08:00:37 2026 GMT
Not After : Mar 29 08:00:37 2026 GMT
Subject: CN=14ba440c938136f59bd890bfc6cb75273649ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:32:7a:f4:97:bc:a3:bd:42:68:e1:c3:5f:
65:b7:c1:14:3b:7a:58:c2:95:64:d2:71:cb:03:7f:
f3:76:5b:e0:39:bb:66:da:85:85:a6:fc:92:8d:61:
b1:89:26:ca:36:ad:04:f3:a8:b9:07:90:e7:c8:e0:
36:58:47:7a:b9:9b:89:90:44:7d:86:aa:2d:2d:3c:
de:42:52:54:31:15:2e:be:7f:9c:ef:9d:a0:8a:0c:
ad:3d:02:a2:9f:bd:f7:98:15:1f:b9:c1:1d:6f:b6:
b7:b0:c1:61:b2:72:45:10:89:7d:7d:0c:93:72:b5:
75:35:03:b6:b5:68:65:f6:c7:5e:8e:73:04:25:dd:
1d:e5:66:e8:2a:df:0e:91:5f:83:f0:36:d0:f3:f3:
2c:f1:70:56:78:d5:65:07:da:ef:d7:35:d8:e0:09:
34:41:bf:29:64:c6:75:0f:2c:82:a6:57:93:2d:95:
78:d9:4b:95:40:60:e6:40:92:89:d9:3d:67:85:17:
36:96:4c:9f:a9:27:57:80:63:86:b0:9e:17:72:f0:
3d:3d:e9:6b:51:8c:c8:8a:9c:93:85:ad:27:43:22:
99:db:fe:67:a2:d2:21:e7:9e:df:0e:3a:29:08:4a:
96:3c:86:be:41:1a:52:eb:12:9c:01:ed:5f:b0:4a:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:44:0C:93:81:36:F5:9B:D8:90:BF:C6:CB:75:27:36:49:CA:0A
X509v3 Authority Key Identifier:
keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ef:79:17:81:a2:e7:b4:dc:a6:ac:03:3b:47:ec:47:16:1d:
90:db:5a:35:c8:ad:8e:52:4d:20:44:02:be:b5:77:ca:65:e4:
d6:ef:b7:46:fb:0f:b7:a3:65:eb:5a:03:f0:6a:e0:1e:b6:3e:
36:53:67:03:8c:f5:58:f3:4a:08:7b:a7:ab:f6:c2:6c:1c:51:
8c:11:f4:a3:c2:59:d0:ae:e7:c2:19:b8:0b:95:6f:62:5c:11:
fc:a6:7c:31:00:2c:fe:bc:09:79:74:7c:e8:94:ab:5a:3c:d6:
e5:31:14:1f:6d:11:5a:07:65:7e:08:41:81:13:dd:c1:c6:58:
f3:e6:b6:b4:ce:7c:19:3b:b7:67:ef:04:e1:07:50:da:c5:67:
24:51:41:0e:92:70:3c:48:58:05:47:27:3a:e5:cb:54:8a:cf:
09:de:d2:f2:2a:a8:67:5c:74:23:49:c2:06:5c:18:5d:38:80:
c8:6a:28:b5:46:07:54:cf:68:e8:e5:3f:95:5b:f1:e9:93:24:
5c:60:0d:ad:eb:3b:fe:bd:9c:ef:37:e2:5f:3d:8c:56:73:c1:
7b:2b:e7:5b:62:a7:34:4a:b7:44:3a:63:9f:0c:e3:ee:01:d4:
ff:37:0b:14:1a:d2:20:db:6f:c7:78:44:fe:61:4e:18:17:4d:
d4:dd:fc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:07 2026 by rpki-client