Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: ZOdUAxEgg0ZXm49/TF4BulYFV9SbG0RFLEQRRGeM4FE=
Subject key identifier: 12:58:46:75:FC:EC:15:E7:DA:1C:41:9C:DF:C3:9A:D2:0E:37:13:EB
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019E1F108856EFE4CAA04C5DBF8FC1F69C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:00:37 +0000
Manifest this update: Wed 13 May 2026 02:00:37 +0000
Manifest next update: Thu 14 May 2026 02:00:37 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: IsGxZCpWrTdvtN6fdoMhslrjIChVoVAjIl2PHf9r2xE=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:88:56:ef:e4:ca:a0:4c:5d:bf:8f:c1:f6:9c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: May 13 02:00:37 2026 GMT
Not After : May 14 02:00:37 2026 GMT
Subject: CN=12584675fcec15e7da1c419cdfc39ad20e3713eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:2f:81:e7:95:a1:84:03:0b:a0:98:27:53:
a2:89:ab:32:89:a2:13:35:e7:af:26:c6:f0:cf:b2:
7a:47:72:7d:19:87:8a:ad:99:c6:49:27:96:52:a2:
ee:40:fd:1c:c4:e0:ec:94:fd:20:53:05:7e:74:b0:
0b:7d:26:f7:4f:43:04:aa:94:2e:50:8c:fa:a5:68:
52:f7:83:15:64:0e:80:14:1d:ca:07:8f:6a:82:2f:
dd:1c:3d:f9:0d:f2:16:68:e5:14:18:f3:3f:1c:e3:
00:3f:35:a1:49:f9:9b:55:ab:88:78:79:44:5b:9d:
06:5f:b9:1c:c6:98:23:05:14:1d:78:ff:3d:e4:ba:
2d:86:51:aa:59:67:65:8b:f1:b7:58:fc:bf:e9:ff:
6c:65:1e:f0:dd:56:2f:46:99:f4:16:e6:cf:7e:14:
c3:eb:c8:bf:cd:02:2b:2f:9b:68:3f:9b:ed:37:c3:
b3:53:ab:3b:85:77:68:25:26:e3:96:2d:cf:ac:25:
5a:e2:51:52:0d:6e:f7:81:60:8c:d8:b3:09:9d:f2:
37:be:df:69:e7:aa:4c:29:67:61:49:58:eb:38:14:
8a:5a:12:08:6a:39:de:e6:d6:ca:b0:31:ea:da:4e:
34:c8:48:c7:fc:96:66:c0:3b:0f:9e:84:ca:50:d3:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:46:75:FC:EC:15:E7:DA:1C:41:9C:DF:C3:9A:D2:0E:37:13:EB
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:11:b1:75:65:ad:dd:b3:40:41:d9:8f:65:e1:38:62:a8:68:
1f:5a:17:61:55:ff:c7:7d:e6:7b:15:f0:98:04:a5:d4:f8:db:
53:e9:86:a8:71:1d:47:6c:ac:b1:70:ae:72:0a:1c:60:51:50:
ac:e9:42:9b:1a:bd:bf:89:41:52:82:59:a4:7b:49:5e:a1:e2:
e1:76:e9:cd:e9:2c:a0:55:65:2b:6c:91:13:64:c3:ff:9f:b8:
d9:82:14:90:84:bb:3b:b1:42:b2:05:36:4f:ad:06:94:0c:6d:
8c:1f:8c:9b:5c:ad:db:9a:12:e4:71:49:d0:50:40:2f:70:dd:
06:ed:25:89:ac:d3:93:1c:e4:75:1a:af:d4:31:8b:a5:c5:d5:
f3:43:0b:ab:a6:af:72:e6:5c:6b:17:ab:d6:00:39:17:6d:02:
4c:1f:cc:a6:95:dd:61:b1:37:23:8b:5a:f5:a8:8f:34:53:06:
37:70:12:1a:10:a8:99:5e:9a:09:44:16:33:0a:42:98:f9:4c:
a7:c3:16:83:0b:96:8d:e8:0c:93:29:e6:d3:0f:26:5e:fb:d4:
a5:09:f3:68:7b:f5:04:31:85:42:72:33:01:90:38:a7:90:d1:
ff:88:82:71:fc:2f:cb:e0:35:b0:88:f4:09:85:63:98:21:12:
7c:37:05:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEIhW7+TKoExdv4/B9pyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl
ZDFkNDYwHhcNMjYwNTEzMDIwMDM3WhcNMjYwNTE0MDIwMDM3WjAzMTEwLwYDVQQD
EygxMjU4NDY3NWZjZWMxNWU3ZGExYzQxOWNkZmMzOWFkMjBlMzcxM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgvgeeVoYQDC6CYJ1OiiasyiaIT
NeevJsbwz7J6R3J9GYeKrZnGSSeWUqLuQP0cxODslP0gUwV+dLALfSb3T0MEqpQu
UIz6pWhS94MVZA6AFB3KB49qgi/dHD35DfIWaOUUGPM/HOMAPzWhSfmbVauIeHlE
W50GX7kcxpgjBRQdeP895LothlGqWWdli/G3WPy/6f9sZR7w3VYvRpn0FubPfhTD
68i/zQIrL5toP5vtN8OzU6s7hXdoJSbjli3PrCVa4lFSDW73gWCM2LMJnfI3vt9p
56pMKWdhSVjrOBSKWhIIajne5tbKsDHq2k40yEjH/JZmwDsPnoTKUNNhNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJYRnX87BXn2hxBnN/DmtIONxPrMB8GA1UdIwQY
MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt
NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm
LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRGxdWWt
3bNAQdmPZeE4YqhoH1oXYVX/x33mexXwmASl1PjbU+mGqHEdR2yssXCucgocYFFQ
rOlCmxq9v4lBUoJZpHtJXqHi4XbpzeksoFVlK2yRE2TD/5+42YIUkIS7O7FCsgU2
T60GlAxtjB+Mm1yt25oS5HFJ0FBAL3DdBu0liazTkxzkdRqv1DGLpcXV80MLq6av
cuZcaxer1gA5F20CTB/MppXdYbE3I4ta9aiPNFMGN3ASGhComV6aCUQWMwpCmPlM
p8MWgwuWjegMkynm0w8mXvvUpQnzaHv1BDGFQnIzAZA4p5DR/4iCcfwvy+A1sIj0
CYVjmCESfDcFNA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:50:35 2026 by rpki-client