Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: QQQNz5VlLWAsgD7azDl7F//ZHt+V+BNWzteipTfPApY=
Subject key identifier: BD:06:04:F4:AE:99:AA:C2:57:04:DC:EF:DC:81:45:CA:A1:33:DC:A1
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 019E1FB5F2942C3AB47A00A9B2AF74254BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0BBA
Signing time: Wed 13 May 2026 05:01:18 +0000
Manifest this update: Wed 13 May 2026 05:01:18 +0000
Manifest next update: Thu 14 May 2026 05:01:18 +0000
Files and hashes: 1: D6BGr-5dJZvETpMbA__Q61SK3f4.roa (hash: zOFmPuRjAmwk6FKGKP0FAzMgJQg9lT91lc24vYQHaUc=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: sOCfYbGkjcstwsj+54ciHhK9JMn+gfnlX/QTWX5wEXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:f2:94:2c:3a:b4:7a:00:a9:b2:af:74:25:4b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: May 13 05:01:18 2026 GMT
Not After : May 14 05:01:18 2026 GMT
Subject: CN=bd0604f4ae99aac25704dcefdc8145caa133dca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:eb:68:86:0f:96:a9:ef:d9:4d:b6:d8:20:
16:36:50:b7:55:ef:9e:1d:96:73:d7:2a:05:75:d0:
e8:da:ac:49:5b:fe:24:fd:e8:00:85:da:26:d1:bb:
df:92:ce:e5:f5:a7:0e:70:45:88:78:40:54:a9:11:
7d:c9:43:2f:99:1c:05:f3:3b:51:f9:58:59:90:e4:
ff:d1:ca:70:cb:e7:f6:6a:5d:ea:6f:ec:33:35:ed:
8c:1b:bb:90:e4:22:e6:35:02:75:9a:41:cc:8c:76:
90:fb:74:d5:be:6d:ba:4d:aa:33:ac:1f:b8:65:29:
77:6b:ed:eb:12:55:33:e0:74:0d:a8:59:eb:2f:77:
ff:9c:9c:21:19:5e:16:6f:74:6b:fc:a4:65:e5:bc:
51:cc:80:05:61:ab:3c:10:2a:be:35:0b:a2:61:c1:
73:df:cc:0a:eb:70:1d:9a:71:c0:32:02:09:5d:84:
6b:a1:20:8c:ea:76:5c:b0:b5:68:a0:82:c4:dc:2f:
62:d2:7f:f1:dc:e4:6c:74:df:b1:92:fc:bc:3f:87:
95:2a:09:11:52:f1:20:36:58:1c:3a:25:80:70:67:
2e:6e:e3:6b:93:26:2c:af:04:06:4c:95:c2:13:4c:
43:e4:94:3d:80:19:86:c4:20:6a:39:89:91:14:c3:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:04:F4:AE:99:AA:C2:57:04:DC:EF:DC:81:45:CA:A1:33:DC:A1
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:ce:0b:e5:ee:2c:24:5f:c4:b2:e2:d0:24:ec:25:cb:92:
22:3a:ad:ea:ae:59:17:f6:58:c0:1c:87:d9:b5:7c:90:66:e3:
af:92:94:20:80:15:fd:ba:5e:56:7e:90:69:13:45:07:34:01:
56:b4:81:ad:f8:7c:93:61:de:7b:98:35:a8:85:a2:08:74:2b:
30:01:d2:2f:9e:8e:75:ee:8b:27:65:2c:18:8d:8c:3d:04:ee:
ea:a5:c3:b1:be:7a:5d:57:30:1e:32:25:0c:06:2d:4a:c7:0e:
d8:e2:4f:f7:4f:19:05:10:31:48:d6:7d:cd:40:14:2f:7c:bb:
64:b3:93:71:6d:d5:97:7b:8d:86:ca:ff:d0:27:2a:b6:73:a7:
ec:cc:ad:aa:b1:63:5c:83:fe:02:f2:2a:e6:f7:2e:ca:d4:12:
dd:83:20:d5:15:12:44:09:ef:f8:c4:dc:ea:3c:74:92:8c:58:
30:c1:42:da:d9:91:80:d5:46:08:58:18:0e:25:ea:c3:a1:40:
bd:0a:1e:5b:91:00:f1:38:41:4d:ba:e6:42:dc:3c:ee:06:ca:
ce:85:0b:ab:68:ee:9b:0d:93:6a:e5:21:e7:76:9a:44:40:77:
f3:1d:33:5a:13:b7:e8:a6:04:20:cb:23:a0:4e:30:00:65:bd:
fd:f5:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:09 2026 by rpki-client