Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: fed9ieaj8GNnz7aUSpBF2RCABAtqAb1GdzCZgMOHo9k=
Subject key identifier: 6F:1D:55:76:2B:2E:CF:45:4F:97:C4:98:FA:D8:2D:03:A9:AE:29:B9
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 019D2704A0ED107187800865E55D77DA7E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 02BA
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: jjFrXR9qn2REJto2HkuGYcqIjqs7IwlJ8496hoOEshA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a0:ed:10:71:87:80:08:65:e5:5d:77:da:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=6f1d55762b2ecf454f97c498fad82d03a9ae29b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:d2:4d:69:fc:4c:a2:8d:d5:39:ff:7e:85:
9b:f0:0f:41:86:45:37:8c:22:bc:d3:bc:d3:4b:e3:
c8:2e:26:33:f8:3d:9d:f9:e9:45:f9:1d:7f:16:82:
a2:c1:47:6f:b6:9f:0a:43:54:60:39:fa:92:c5:eb:
ad:96:7c:2d:77:22:0b:aa:8a:a6:d2:56:31:fc:a1:
35:7a:7e:79:43:f0:fe:ae:1c:12:3a:a1:0f:6f:ff:
6e:c8:0c:59:64:f1:6d:00:34:4d:90:e1:f0:60:e7:
cc:fd:61:a6:b7:d1:45:99:a9:61:7d:6c:2b:30:6f:
4a:0a:30:c9:c1:1a:69:07:bd:e2:42:4a:67:6b:25:
b9:96:5e:cf:92:2a:1e:3c:30:e6:ba:a7:83:51:91:
10:52:10:14:9e:5f:bb:18:69:dd:79:63:83:f9:44:
3a:1e:db:d3:55:cf:9a:c0:a1:e3:a2:d0:10:eb:30:
90:99:23:2b:38:ac:6d:5d:60:0e:a6:ac:11:4a:d2:
dd:60:c7:34:e0:a0:bf:eb:2b:78:7c:4b:2a:28:17:
8e:d0:20:7b:ee:72:46:7c:46:c8:7a:af:77:83:0c:
5b:2e:4d:7d:cb:3c:26:77:f4:b6:9f:db:5f:06:04:
8c:b9:0f:07:3d:95:58:e6:d8:e5:21:b9:e4:af:cf:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:55:76:2B:2E:CF:45:4F:97:C4:98:FA:D8:2D:03:A9:AE:29:B9
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b7:5c:34:f5:8a:01:89:05:7d:d2:9e:7a:1c:a4:ce:dc:ae:
ce:bd:10:a2:24:b4:cf:b3:f8:a3:d7:2f:87:f3:f8:57:09:0a:
d6:f6:79:11:22:51:08:16:f9:ab:93:ea:3b:ac:94:6f:ae:2d:
5f:12:80:6c:4f:bb:ac:df:dd:37:a8:d8:d5:9d:f9:67:f2:b5:
09:72:1a:c7:81:8f:44:0a:03:9d:36:c7:b2:00:54:d2:fa:da:
52:8e:99:f4:71:2a:33:13:7a:86:f6:bf:b4:80:d8:b2:6b:a1:
68:85:2e:31:a3:ca:b6:f3:97:23:55:42:61:0b:83:7c:9e:c3:
3c:1d:04:4d:bb:05:10:d4:ba:5e:39:b9:99:98:42:10:8c:1b:
20:01:a3:2a:3e:37:37:cc:d2:fe:ef:19:39:18:e1:3c:a2:5b:
bc:22:45:5c:47:40:90:b1:6a:13:77:6e:0b:3e:8b:c9:90:36:
af:c8:11:2b:4b:d1:fb:12:0f:99:d7:42:61:ca:a2:ab:09:d0:
f8:a2:f6:a5:e0:82:41:11:e7:e2:18:25:87:47:fc:26:8b:cb:
b4:ac:1b:6e:54:82:46:29:3a:14:67:44:fb:7e:33:9a:31:a4:
e9:f0:2e:53:c1:6b:27:87:dd:cf:ad:53:f8:da:d5:6e:31:6c:
44:68:4e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBKDtEHGHgAhl5V132n4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTA2NDdkOTUyZTkxMjEyMjBmNDE0ZTg4YTVkZGQ2MmJj
ODIzN2IwHhcNMjYwMzI1MjIwMTQ3WhcNMjYwMzI2MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg2ZjFkNTU3NjJiMmVjZjQ1NGY5N2M0OThmYWQ4MmQwM2E5YWUyOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW7STWn8TKKN1Tn/foWb8A9BhkU3
jCK807zTS+PILiYz+D2d+elF+R1/FoKiwUdvtp8KQ1RgOfqSxeutlnwtdyILqoqm
0lYx/KE1en55Q/D+rhwSOqEPb/9uyAxZZPFtADRNkOHwYOfM/WGmt9FFmalhfWwr
MG9KCjDJwRppB73iQkpnayW5ll7PkioePDDmuqeDUZEQUhAUnl+7GGndeWOD+UQ6
HtvTVc+awKHjotAQ6zCQmSMrOKxtXWAOpqwRStLdYMc04KC/6yt4fEsqKBeO0CB7
7nJGfEbIeq93gwxbLk19yzwmd/S2n9tfBgSMuQ8HPZVY5tjlIbnkr8+9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8dVXYrLs9FT5fEmPrYLQOprim5MB8GA1UdIwQY
MBaAFEQQZH2VLpEhIg9BToil3dYryCN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgt
NTQ1ZGNhODBiZjQ5LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgtNTQ1ZGNhODBiZjQ5
LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLdcNPWK
AYkFfdKeehykztyuzr0QoiS0z7P4o9cvh/P4VwkK1vZ5ESJRCBb5q5PqO6yUb64t
XxKAbE+7rN/dN6jY1Z35Z/K1CXIax4GPRAoDnTbHsgBU0vraUo6Z9HEqMxN6hva/
tIDYsmuhaIUuMaPKtvOXI1VCYQuDfJ7DPB0ETbsFENS6Xjm5mZhCEIwbIAGjKj43
N8zS/u8ZORjhPKJbvCJFXEdAkLFqE3duCz6LyZA2r8gRK0vR+xIPmddCYcqiqwnQ
+KL2peCCQRHn4hglh0f8JovLtKwbblSCRik6FGdE+34zmjGk6fAuU8FrJ4fdz61T
+NrVbjFsRGhOSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:33 2026 by rpki-client