Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File: bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier: o1eItqOhoGyYGkolEqxQmGwAIymh+SH0PAde7NPUKBk=
Subject key identifier: 68:CD:62:90:9E:48:AA:12:3A:EF:14:29:33:63:46:2A:57:88:32:B2
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 019D38668C50AB143BE2F4C3B1C257B271CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: 0ohKVQN8JuTcilJLLas1PbkpJLQ.roa (hash: Iy3MQLBkcAq1eJnpEU2jctdrlX7AMZPQC/y2+z0Uq40=)
2: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: yIkyEt75a2hx0XXeR9NAJiKhS5jV13+MnDFuqq+0zT0=)
3: jWDr3wDugKmfFHaWOIXK3rm3KBM.roa (hash: t/jm2gNNlq/4NY3+0/h6qliZGJIxWHdoCDUSrWKpxvQ=)
4: kA7mfes0bqBl5D-bI67VpsmJV9k.roa (hash: Y1kiJDLllKmeTEYbA2zY2rhRombUij5BSss+NTqpPIw=)
5: n0ruOGbeVvXhGIrsWayjSXVW_as.roa (hash: 39LLK08KXO2vyHtc1/PHu8DzL0QhDBg9EmDMQZMx3yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8c:50:ab:14:3b:e2:f4:c3:b1:c2:57:b2:71:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=68cd62909e48aa123aef14293363462a578832b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:63:30:71:7e:99:2a:50:38:8b:ab:a2:ae:
4e:da:92:d8:1f:1e:be:84:9f:11:52:84:31:ee:70:
e4:6a:b9:bd:8f:d2:62:89:57:b8:df:6a:95:9c:58:
74:53:44:80:a7:f5:92:f4:b8:24:89:68:57:0b:f0:
ad:b7:39:4a:25:81:f2:0b:8d:9c:16:03:fa:ca:1e:
84:60:12:dd:e7:92:e7:7c:37:1e:e7:e8:11:04:3c:
8a:d5:6e:2f:22:7a:6a:d9:9b:f8:96:c6:e3:70:1d:
6a:d5:8a:24:83:59:c9:66:6e:50:e7:fa:67:48:e2:
15:31:b8:05:22:61:bd:d6:d4:64:a0:60:13:40:92:
2a:37:1a:66:82:e4:b4:a7:00:2b:56:4e:3c:56:29:
c2:52:81:f6:ee:c3:86:ab:db:7f:d0:b8:82:f6:71:
ff:ea:ff:69:11:0b:2b:99:e8:c2:68:7e:65:c5:5d:
3c:6b:ad:73:20:76:f4:dd:b3:d5:79:6b:d4:45:85:
13:ea:26:e7:af:53:01:c4:40:fb:f6:5a:ea:cd:03:
2d:df:20:d4:b5:1c:d0:c3:f0:8f:4b:ff:86:1a:72:
c0:b1:71:3d:fd:3c:46:d1:29:42:2f:17:07:71:66:
3d:5c:4f:61:da:70:68:dd:e6:d3:d8:4e:b3:a7:61:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:62:90:9E:48:AA:12:3A:EF:14:29:33:63:46:2A:57:88:32:B2
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c4:1e:9e:48:9c:60:2a:57:40:c8:88:17:a0:a7:bf:3b:18:
02:17:1e:fc:e2:86:16:6d:63:b0:98:68:b2:fb:8b:80:69:0c:
0b:ed:f9:1c:35:95:f4:62:93:52:66:f4:9d:8d:e3:fc:ef:25:
e5:ca:a4:e5:8c:c5:8a:0e:87:b5:43:b0:5b:5e:3d:de:24:26:
c8:23:17:39:10:fd:86:0c:0d:b6:01:a8:7c:58:2b:65:a6:85:
c9:e6:66:56:73:06:23:f9:ca:d8:8e:01:8e:13:b6:35:b7:6b:
db:6f:c0:95:c0:c6:20:97:d7:51:cb:34:0b:de:1c:f4:b8:6b:
ba:4b:42:0d:b4:f5:77:70:3a:6f:90:cb:00:6c:c9:f3:89:af:
79:e1:82:ed:9b:85:c5:e8:bc:f9:a2:62:3b:89:ef:9d:66:1f:
60:56:ee:b7:12:4a:c5:39:6e:07:38:aa:1b:1b:e4:48:83:d2:
5e:27:82:84:81:37:b3:76:15:53:43:00:7d:30:c7:5c:6b:e8:
9b:a1:14:9e:11:b1:71:60:f2:6a:f8:53:e8:e0:50:c6:67:45:
5c:57:53:84:bf:7e:d6:0b:fb:45:f6:d6:a8:77:d0:c2:76:0f:
9c:96:44:c8:61:f8:c1:ae:66:13:89:c3:6f:56:1e:10:ea:64:
6f:19:22:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZoxQqxQ74vTDscJXsnHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx
MjE2NDcwHhcNMjYwMzI5MDcwMjE3WhcNMjYwMzMwMDcwMjE3WjAzMTEwLwYDVQQD
Eyg2OGNkNjI5MDllNDhhYTEyM2FlZjE0MjkzMzYzNDYyYTU3ODgzMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJBjMHF+mSpQOIuroq5O2pLYHx6+
hJ8RUoQx7nDkarm9j9JiiVe432qVnFh0U0SAp/WS9LgkiWhXC/CttzlKJYHyC42c
FgP6yh6EYBLd55LnfDce5+gRBDyK1W4vInpq2Zv4lsbjcB1q1Yokg1nJZm5Q5/pn
SOIVMbgFImG91tRkoGATQJIqNxpmguS0pwArVk48VinCUoH27sOGq9t/0LiC9nH/
6v9pEQsrmejCaH5lxV08a61zIHb03bPVeWvURYUT6ibnr1MBxED79lrqzQMt3yDU
tRzQw/CPS/+GGnLAsXE9/TxG0SlCLxcHcWY9XE9h2nBo3ebT2E6zp2ErmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjNYpCeSKoSOu8UKTNjRipXiDKyMB8GA1UdIwQY
MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt
YjE1YjNmYmMwNGE2LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2
LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsQenkic
YCpXQMiIF6CnvzsYAhce/OKGFm1jsJhosvuLgGkMC+35HDWV9GKTUmb0nY3j/O8l
5cqk5YzFig6HtUOwW1493iQmyCMXORD9hgwNtgGofFgrZaaFyeZmVnMGI/nK2I4B
jhO2Nbdr22/AlcDGIJfXUcs0C94c9LhruktCDbT1d3A6b5DLAGzJ84mveeGC7ZuF
xei8+aJiO4nvnWYfYFbutxJKxTluBziqGxvkSIPSXieChIE3s3YVU0MAfTDHXGvo
m6EUnhGxcWDyavhT6OBQxmdFXFdThL9+1gv7RfbWqHfQwnYPnJZEyGH4wa5mE4nD
b1YeEOpkbxkiqA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:16 2026 by rpki-client