Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: HWGGZxODLpXgQng4aq9v0VXYAUOzVTQiWpkQCq1VUeY=
Subject key identifier: CD:14:CE:A1:08:76:AB:C9:A1:56:CD:77:9C:9C:10:16:F4:ED:C7:49
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 019D2AE0E77A24B20A536455D5208E8920A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 084A
Signing time: Thu 26 Mar 2026 16:01:15 +0000
Manifest this update: Thu 26 Mar 2026 16:01:15 +0000
Manifest next update: Fri 27 Mar 2026 16:01:15 +0000
Files and hashes: 1: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: yPnAL/IwWzsh9kcir13z0/eN9+gI96MyQ4uw/SDi+c4=)
2: iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa (hash: BxwlJ6L7JiirPlQT5hR2YOM60CkwhHbmXiQ9C6w1opo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:e7:7a:24:b2:0a:53:64:55:d5:20:8e:89:20:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: Mar 26 16:01:15 2026 GMT
Not After : Mar 27 16:01:15 2026 GMT
Subject: CN=cd14cea10876abc9a156cd779c9c1016f4edc749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:09:26:44:e2:09:c7:26:c9:ee:93:18:1c:
21:8e:40:9f:10:ad:44:5f:d2:87:96:f6:e5:7a:3b:
c9:99:7a:c6:10:7f:96:0c:21:5f:99:3d:53:f9:26:
50:f2:49:8a:2d:7b:6f:7a:b8:c1:bb:ff:07:d4:77:
e6:9b:71:2d:33:06:d0:6d:ed:6d:ee:2a:e9:39:14:
ef:74:f3:aa:1a:0a:53:b8:cf:dc:71:95:21:5b:08:
4a:71:85:84:00:95:dc:d5:b3:2b:30:72:1d:10:22:
32:c7:a3:01:98:7a:91:64:10:84:af:16:49:91:df:
0f:8f:e2:21:ba:47:89:d5:68:e0:b8:c0:87:a1:13:
16:94:ed:b3:01:b7:ca:f0:03:52:c3:62:56:77:5a:
7b:d1:50:30:b1:ed:bc:4e:ad:0b:44:b4:93:b5:a8:
d8:ba:99:97:10:7e:9e:70:fe:1b:3a:97:e8:54:53:
e4:63:17:e6:ba:da:20:16:86:ec:e7:6c:18:bf:95:
cf:e4:29:f1:54:47:80:c7:f0:c2:6f:d8:50:16:e8:
24:76:64:be:fe:1c:8b:82:5a:06:b4:69:ce:46:ed:
d5:16:67:fe:10:e4:37:1c:ab:d9:7d:dd:75:e1:82:
af:d0:d0:ee:b2:ed:77:18:04:de:4d:3c:2e:de:09:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:CE:A1:08:76:AB:C9:A1:56:CD:77:9C:9C:10:16:F4:ED:C7:49
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b0:69:43:08:03:b9:ae:78:b9:35:6d:b2:30:c7:f2:a4:00:
17:c3:47:d3:fc:8c:d0:88:b5:07:27:ca:e0:31:b1:03:5d:35:
b5:02:ab:64:00:3b:35:0a:3e:f9:df:a7:78:f6:61:2f:d0:ab:
ee:e7:ac:2a:37:22:a8:a3:63:88:9b:a6:1b:3e:17:e6:5b:80:
e8:a7:56:c2:c3:96:da:0e:e3:a9:9f:7f:57:60:ce:f2:fa:9d:
4e:a5:1a:c5:db:97:df:c9:43:5c:c2:b2:bb:f1:72:7c:15:34:
ef:9f:c8:d2:09:53:1f:aa:6c:43:b0:3c:1f:06:a1:e1:07:40:
09:4c:66:3e:74:7d:0e:0e:ff:c4:00:b8:95:a3:49:94:fc:80:
8a:a9:eb:8b:f0:c6:ba:62:0c:90:88:22:fc:65:6d:94:35:40:
9e:fe:76:d4:66:c0:96:59:3e:0e:d4:c8:07:c6:da:b0:27:23:
bc:07:78:da:64:86:63:61:a0:9a:ae:9a:0d:c5:84:a0:94:79:
ea:76:23:c3:b2:00:d0:93:24:17:b1:0d:ac:55:62:fa:fa:f4:
ec:70:00:81:77:8f:9d:1a:c4:5f:f8:88:34:79:cc:76:ae:70:
96:37:9e:b1:45:b5:65:ca:5d:c2:b4:71:08:d8:a8:db:9b:44:
a2:d3:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:25 2026 by rpki-client