Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: 3SnoXXstCuaNFlz6QOiv4pqfN/gAJQgza19Sj9iMlsg=
Subject key identifier: BC:E2:29:F9:7F:C7:E1:90:A2:E7:E8:A0:5D:93:AA:79:7A:88:F2:B6
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 019D37C06700875BA95047239239AD5B0D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 0BE8
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: FGnENwr6zzeEAkinQKbZd3UaEvhnNQfGAfU0cohF/ss=)
2: m-qku06qLY3rNaPKQ1zTMaIhHCk.roa (hash: P9Yy6mUhYd/ctFDm/ApbuzO2/tM/hkjnZVv/yiJ9K9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:67:00:87:5b:a9:50:47:23:92:39:ad:5b:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=bce229f97fc7e190a2e7e8a05d93aa797a88f2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:5b:8f:b3:d6:6a:01:95:37:82:aa:bc:03:
97:22:9e:aa:72:e8:8b:73:7a:0d:0f:d4:0f:70:e3:
b5:2f:b9:24:f7:d8:5e:91:e8:4a:07:3e:73:18:c1:
dc:8a:3f:70:2a:0d:01:22:d9:12:cd:a3:ae:df:1c:
37:f7:29:65:57:e0:6c:cf:c6:94:22:29:ca:ac:00:
b1:b0:dd:ca:ab:22:35:22:06:f1:31:35:4d:84:d9:
a4:c8:c9:14:b2:fc:6c:c6:fe:58:c7:1d:cc:02:e5:
f2:a8:1f:f7:9b:2d:d0:bc:c1:f4:47:9c:62:e6:9d:
35:2e:27:db:bb:e0:83:29:1d:27:16:a3:bc:56:06:
fc:ec:7d:0d:5a:85:83:1a:56:9b:4e:59:27:a3:5c:
c4:b2:5c:cb:c2:b3:7f:e9:41:2e:f2:c4:81:51:b7:
5d:45:e4:51:54:f2:59:86:2a:f4:d2:d1:f9:de:6d:
d6:d6:38:12:e9:25:78:46:72:66:c6:5a:ff:7e:6e:
73:33:4c:85:e9:cf:c3:7a:a0:67:17:96:ec:76:0b:
e1:f7:af:38:fd:fe:05:ca:3d:a3:9c:d4:a8:37:72:
dc:dd:e7:bd:0f:00:70:e1:4a:47:ac:84:8d:a6:23:
cf:00:e5:d9:11:04:f9:6b:34:a8:da:55:12:b5:aa:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E2:29:F9:7F:C7:E1:90:A2:E7:E8:A0:5D:93:AA:79:7A:88:F2:B6
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:70:c6:97:a8:ba:bd:4b:5f:dd:02:73:b7:24:1b:d9:7f:0c:
1f:cc:65:9c:f5:6b:fb:2f:e7:2f:da:e9:bc:57:b7:b1:b2:ab:
8c:50:f3:22:61:9b:a3:db:da:4e:e6:81:95:b7:3d:5f:2e:c4:
78:47:1f:88:b8:e9:c1:da:75:d2:2f:9a:62:a1:fd:ca:ca:c8:
31:4d:0d:ed:8a:81:df:0f:20:ed:ce:fd:ce:31:a4:ad:bc:c8:
0d:b1:cc:63:0c:ce:3d:cc:3a:88:08:5f:12:cb:ab:65:83:84:
64:e4:bf:22:fa:fa:52:cc:db:28:aa:0b:e2:37:a3:ee:6a:dc:
a4:4c:9b:b5:37:2d:de:6a:70:91:74:bb:c5:2c:22:39:1c:56:
b1:3e:2b:d9:5b:d9:be:21:12:3c:8a:2e:64:0b:d7:e6:69:0f:
91:15:4f:b3:29:74:a0:d2:e2:0f:36:b4:aa:a9:c9:a7:6d:59:
11:47:66:dc:24:f6:e0:98:d2:13:d0:b4:3d:b9:84:a1:55:56:
57:80:b3:6f:25:4c:a2:ad:32:84:c5:00:e1:e3:9a:b1:07:30:
c2:60:b4:ac:d9:8f:09:ec:cd:1c:08:f0:26:66:99:e5:34:ba:
22:6f:cf:6e:b7:d5:57:a6:e6:43:ad:a7:88:65:aa:da:76:c3:
96:00:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:28 2026 by rpki-client