Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: aAAdDLN/CaQtBWGY77+Bf5J1m2XNgq16nHJtz2GNg1U=
Subject key identifier: 80:BB:C6:72:4A:62:A4:44:2C:8D:65:9D:2D:4A:06:DF:DE:65:F4:FB
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 019D389C128409438DAF126211F71E62F9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 1090
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: WizoiKXbh4zfyVU9CN0e9oA9XluRBmiOX0zmz5C4zyw=)
2: BBKAblizkGIJV_f06RIh70XLtr0.roa (hash: EDuWd1ayZXpmIRskDvDc511OzhDthWRGsbu0u3My31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:12:84:09:43:8d:af:12:62:11:f7:1e:62:f9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=80bbc6724a62a4442c8d659d2d4a06dfde65f4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:eb:b5:64:a3:9a:8a:01:f4:62:dd:98:24:
87:d8:76:cf:a6:09:fc:00:8c:56:39:43:1f:28:b8:
46:ac:02:af:15:ee:72:81:ba:61:20:a7:42:f0:ff:
9e:8c:c0:68:ce:38:fb:60:02:ca:ae:a6:21:58:d8:
65:9f:81:c2:e7:62:90:3e:f5:1f:5a:f9:dd:85:41:
16:b9:8a:c4:da:45:b9:a5:35:bd:76:fe:dc:57:b7:
cd:08:9e:43:84:c9:2c:68:e6:70:47:54:e1:bc:f8:
6c:a5:82:7d:d9:a4:19:e8:db:7f:6c:c1:1a:91:da:
91:98:e6:7b:6f:a0:cf:db:b4:d7:7c:40:69:c2:de:
eb:7e:73:66:3a:7f:61:bf:1d:e2:14:51:75:81:af:
bd:90:74:4d:25:46:dd:cd:e0:6d:fd:50:7e:62:4a:
f5:b7:68:bb:97:f1:b8:57:b1:64:18:1a:d5:32:bc:
23:cc:c2:85:ce:7d:17:08:be:39:f7:ca:bd:33:db:
16:73:38:af:67:e6:04:07:72:9f:98:ee:c5:f8:41:
71:80:88:42:2e:27:0a:4b:de:5d:33:2e:7f:92:d5:
0b:a4:52:39:ab:09:d5:f3:e6:45:be:4d:97:9d:36:
49:cf:e6:c5:a8:57:9d:fd:cf:1d:ef:e6:b0:d8:34:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BB:C6:72:4A:62:A4:44:2C:8D:65:9D:2D:4A:06:DF:DE:65:F4:FB
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:dd:1b:b9:3e:2c:4c:c1:80:91:64:09:5c:81:2c:75:f7:
15:e2:b4:d2:9c:3a:6a:91:ac:9b:f8:15:2e:8b:da:14:57:0a:
da:7b:be:94:af:7c:e8:4b:27:df:27:3d:f1:bc:67:0b:c6:5d:
c0:ae:ed:c5:a1:18:42:3d:8e:19:ec:9a:09:53:a0:b7:2e:58:
82:a2:f4:72:00:b9:af:4f:fe:37:20:01:21:ba:fd:d6:88:63:
36:3e:53:1f:c8:5f:cd:56:92:80:d5:cc:eb:dc:d2:60:19:2e:
00:17:93:69:55:bd:3b:ab:59:4f:53:c1:3e:19:b2:7a:2f:af:
f1:a2:8d:04:be:c9:ea:8d:f2:95:4a:20:db:1e:c0:55:3a:1d:
13:a4:0a:ec:92:85:a3:e3:c9:df:dc:94:df:f0:9a:af:25:ff:
98:d1:20:0e:56:b2:09:50:44:84:84:07:1b:d0:52:b6:3a:fa:
84:77:88:68:77:e5:ee:f4:a3:14:f1:10:72:d4:41:b1:8f:ab:
ee:19:ae:fc:0d:6e:d9:76:38:d1:66:43:80:97:d4:f1:4a:07:
00:ad:de:41:06:04:93:2f:e1:5d:6c:fa:1b:5d:ea:c2:f5:01:
34:de:8a:62:a2:2c:fc:50:09:14:98:82:18:6c:d5:57:31:b9:
ab:2a:74:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBKECUONrxJiEfceYvnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjRiZWIwYTZhN2UxMjg0YWJmNDM4NTM0OGNmNDg2MTAw
YjlmODAwHhcNMjYwMzI5MDgwMDQ1WhcNMjYwMzMwMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg4MGJiYzY3MjRhNjJhNDQ0MmM4ZDY1OWQyZDRhMDZkZmRlNjVmNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeHrtWSjmooB9GLdmCSH2HbPpgn8
AIxWOUMfKLhGrAKvFe5ygbphIKdC8P+ejMBozjj7YALKrqYhWNhln4HC52KQPvUf
WvndhUEWuYrE2kW5pTW9dv7cV7fNCJ5DhMksaOZwR1ThvPhspYJ92aQZ6Nt/bMEa
kdqRmOZ7b6DP27TXfEBpwt7rfnNmOn9hvx3iFFF1ga+9kHRNJUbdzeBt/VB+Ykr1
t2i7l/G4V7FkGBrVMrwjzMKFzn0XCL4598q9M9sWczivZ+YEB3KfmO7F+EFxgIhC
LicKS95dMy5/ktULpFI5qwnV8+ZFvk2XnTZJz+bFqFed/c8d7+aw2DT89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIC7xnJKYqRELI1lnS1KBt/eZfT7MB8GA1UdIwQY
MBaAFNG0vrCmp+EoSr9DhTSM9IYQC5+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMt
OWJhMTE3MmE2OGMwLzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMtOWJhMTE3MmE2OGMw
LzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJF3dG7k+
LEzBgJFkCVyBLHX3FeK00pw6apGsm/gVLovaFFcK2nu+lK986Esn3yc98bxnC8Zd
wK7txaEYQj2OGeyaCVOgty5YgqL0cgC5r0/+NyABIbr91ohjNj5TH8hfzVaSgNXM
69zSYBkuABeTaVW9O6tZT1PBPhmyei+v8aKNBL7J6o3ylUog2x7AVTodE6QK7JKF
o+PJ39yU3/CaryX/mNEgDlayCVBEhIQHG9BStjr6hHeIaHfl7vSjFPEQctRBsY+r
7hmu/A1u2XY40WZDgJfU8UoHAK3eQQYEky/hXWz6G13qwvUBNN6KYqIs/FAJFJiC
GGzVVzG5qyp0Tw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:19 2026 by rpki-client