Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File: b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier: hX8hk2LgMPAub51runZmKU3Vvxxj1/IhBTB3yr0NMBU=
Subject key identifier: 00:33:B7:56:F0:D8:DD:7A:31:24:EE:71:BE:D4:8F:4B:6C:4B:0C:70
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial: 019D3A1CEF66D5542019D16424B11C175430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number: 03DF
Signing time: Sun 29 Mar 2026 15:01:07 +0000
Manifest this update: Sun 29 Mar 2026 15:01:07 +0000
Manifest next update: Mon 30 Mar 2026 15:01:07 +0000
Files and hashes: 1: Qiay74MbBLJX0CXXaOcyKRwu1oE.roa (hash: kahuToIQXEZrrTaByaYWat/npZL3xVVcTJ88XatdcNg=)
2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: yCmwSHikGYvlfXstN7vcoaHUXkJIQqcs5ljbj/kprWE=)
3: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (hash: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ef:66:d5:54:20:19:d1:64:24:b1:1c:17:54:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Validity
Not Before: Mar 29 15:01:07 2026 GMT
Not After : Mar 30 15:01:07 2026 GMT
Subject: CN=0033b756f0d8dd7a3124ee71bed48f4b6c4b0c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:3d:81:02:89:1b:1b:78:e3:70:5e:d6:aa:
00:46:57:d2:5d:25:55:0e:e3:75:de:f0:22:d8:da:
be:3e:47:33:db:c5:27:04:1f:92:81:81:91:9d:b2:
89:0b:43:32:41:13:21:8c:ae:31:f4:77:ed:98:a3:
6e:7b:c2:15:46:a6:5f:27:1e:1c:bf:d0:9e:5d:5c:
de:4c:25:bc:9f:f7:34:92:16:e3:16:c4:03:01:ac:
ab:eb:fe:5c:4c:1d:e8:1e:71:e7:19:6f:1b:d9:44:
30:1b:75:cf:c4:92:4e:cd:c2:17:5e:26:5d:85:bd:
60:d8:fa:9a:df:21:10:6f:16:0b:89:50:28:5d:9b:
2e:4c:83:96:8b:d0:55:30:f8:af:cf:13:17:ec:3b:
45:1c:6e:52:0b:8f:8c:73:ee:fc:6c:28:f8:ad:97:
c8:33:3f:f0:d3:84:6b:e3:41:2d:53:25:7f:db:76:
13:f7:81:47:c8:39:9d:1b:15:3d:19:7f:41:0a:9b:
75:32:fe:84:c1:75:44:9e:ab:9a:b8:2d:4e:11:5d:
f3:42:54:f9:53:97:9b:f4:77:79:fd:f8:43:9e:ab:
0e:1f:83:72:4f:15:ed:41:1e:2c:f9:b4:6b:a0:82:
46:dc:2b:58:3b:35:ae:c4:ee:06:9f:d1:0a:58:6d:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:B7:56:F0:D8:DD:7A:31:24:EE:71:BE:D4:8F:4B:6C:4B:0C:70
X509v3 Authority Key Identifier:
keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7d:fc:bc:82:ac:3b:8d:6d:71:4d:ea:fe:bd:b2:c9:dd:02:
3a:e0:08:c6:d5:02:62:a6:1d:e9:07:8f:e2:88:8d:0d:37:b0:
da:7c:8f:92:c9:c1:e6:61:b6:76:3c:f7:ba:b7:de:8c:93:ce:
a1:56:ad:d9:0f:af:74:ad:fb:74:2d:96:d8:51:c3:da:88:f2:
54:09:43:da:df:1d:76:15:8c:ba:28:8f:0e:f2:86:fc:2b:6f:
0e:cc:29:ba:9d:30:b7:8e:80:5f:c0:ab:e1:08:9a:d4:87:ae:
a4:92:ac:fd:fc:ba:fd:fa:b5:50:a0:2a:3d:c7:06:35:0d:12:
58:9b:6b:a7:4c:95:b5:9b:83:3b:b0:db:1f:54:dd:7f:c9:92:
14:4e:f1:47:f8:1c:79:b0:23:c0:63:33:1b:91:24:d3:d1:75:
68:45:ad:8d:94:6a:a9:9a:b4:f5:e4:7d:47:2b:57:76:5b:6a:
a8:9a:f3:eb:47:d0:09:1f:e6:99:0c:ce:9b:36:89:7b:ad:50:
04:ae:cc:2e:3c:20:b2:57:33:7a:1c:4a:6e:c3:b9:f6:1a:93:
ee:14:a1:26:55:aa:b8:d5:15:da:f0:24:19:6e:5f:78:f4:1e:
24:9d:8e:c2:19:a3:e1:ee:d7:22:1d:11:c3:67:a5:d4:57:f6:
fc:1d:54:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HO9m1VQgGdFkJLEcF1QwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx
MDQ4YTUwHhcNMjYwMzI5MTUwMTA3WhcNMjYwMzMwMTUwMTA3WjAzMTEwLwYDVQQD
EygwMDMzYjc1NmYwZDhkZDdhMzEyNGVlNzFiZWQ0OGY0YjZjNGIwYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt849gQKJGxt443Be1qoARlfSXSVV
DuN13vAi2Nq+Pkcz28UnBB+SgYGRnbKJC0MyQRMhjK4x9HftmKNue8IVRqZfJx4c
v9CeXVzeTCW8n/c0khbjFsQDAayr6/5cTB3oHnHnGW8b2UQwG3XPxJJOzcIXXiZd
hb1g2Pqa3yEQbxYLiVAoXZsuTIOWi9BVMPivzxMX7DtFHG5SC4+Mc+78bCj4rZfI
Mz/w04Rr40EtUyV/23YT94FHyDmdGxU9GX9BCpt1Mv6EwXVEnquauC1OEV3zQlT5
U5eb9Hd5/fhDnqsOH4NyTxXtQR4s+bRroIJG3CtYOzWuxO4Gn9EKWG2nrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAzt1bw2N16MSTucb7Uj0tsSwxwMB8GA1UdIwQY
MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt
OTlhMDhiOTEyNzRjLzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj
LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnH38vIKs
O41tcU3q/r2yyd0COuAIxtUCYqYd6QeP4oiNDTew2nyPksnB5mG2djz3urfejJPO
oVat2Q+vdK37dC2W2FHD2ojyVAlD2t8ddhWMuiiPDvKG/CtvDswpup0wt46AX8Cr
4Qia1IeupJKs/fy6/fq1UKAqPccGNQ0SWJtrp0yVtZuDO7DbH1Tdf8mSFE7xR/gc
ebAjwGMzG5Ek09F1aEWtjZRqqZq09eR9RytXdltqqJrz60fQCR/mmQzOmzaJe61Q
BK7MLjwgslczehxKbsO59hqT7hShJlWquNUV2vAkGW5fePQeJJ2Owhmj4e7XIh0R
w2el1Ff2/B1Uxw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:08 2026 by rpki-client