Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: gORHs9p7Iq2KGAt0L54sHr02vzeqTSxnkr8h7njZZG4=
Subject key identifier: 45:F1:AF:DD:8F:59:75:B7:7F:E9:7B:89:A1:7E:CB:E0:66:68:BE:AD
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 019D382DF40E1F35CD77B3069A1FBC7562B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: cXxvi5vUFkYVYGYi45A8W13oD5qMoM04mz7AHEHbqU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f4:0e:1f:35:cd:77:b3:06:9a:1f:bc:75:62:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=45f1afdd8f5975b77fe97b89a17ecbe06668bead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:48:dd:05:7d:55:4c:78:92:9f:4b:54:b3:
96:c9:6a:66:5f:df:22:a0:76:c3:55:e2:db:9e:43:
91:fa:3d:c1:b0:e3:18:d2:dd:cd:bf:3a:bc:f2:07:
29:75:0f:4d:fb:34:84:32:d7:46:0a:c0:1b:aa:e6:
32:37:7b:ba:e2:e9:8e:a0:c9:97:fd:e6:32:7c:40:
b3:b9:8e:1e:63:52:6b:7a:c7:95:68:26:03:64:bd:
fe:c5:13:ac:c5:16:a2:59:67:1d:69:4a:43:fd:f7:
09:09:84:42:0e:33:1e:81:b7:18:59:a0:4a:6d:88:
fb:19:70:15:63:5f:46:eb:c8:90:17:04:a9:04:af:
6a:21:b1:af:f3:7f:b8:81:61:57:f9:65:55:f6:88:
14:77:55:65:63:66:cc:c5:6b:8f:ed:b1:e3:7c:7f:
0b:4c:f6:58:d2:bc:af:2c:52:a5:86:68:05:02:93:
41:9a:c2:c9:23:99:3d:dc:2d:1c:ca:0a:7c:96:a3:
b5:27:74:59:f3:21:7f:67:21:db:0b:8c:9d:e2:6c:
9d:81:78:f8:94:cc:7e:c4:43:2c:b1:26:8a:4b:77:
7b:89:63:68:1f:22:b1:cb:fd:33:76:d8:99:6e:16:
90:12:20:6f:d8:40:22:af:bc:ad:62:af:04:f9:f8:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F1:AF:DD:8F:59:75:B7:7F:E9:7B:89:A1:7E:CB:E0:66:68:BE:AD
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f4:79:0e:63:f5:d4:5d:e2:07:ed:fa:2a:ca:03:58:7b:83:
a5:94:90:bc:cb:20:bd:2d:ca:4d:57:cd:86:c0:12:c1:b7:03:
d2:f1:bc:db:6d:95:4b:49:ba:90:57:fe:2b:40:28:e6:23:f3:
ee:31:9e:ab:cf:fe:1b:fc:e3:09:c8:11:3b:48:1e:3a:b4:e7:
11:be:4e:98:41:4e:e0:77:3b:05:94:8b:5d:00:f8:26:09:8d:
49:9e:e9:2d:cb:c8:92:82:e6:79:4c:ff:10:cd:09:4a:d8:0a:
41:60:87:a5:9b:82:22:06:7d:24:38:7c:5d:2e:10:50:33:1c:
30:03:06:06:58:53:f3:6d:d9:33:63:50:7b:9e:8e:26:38:4b:
17:3d:cb:22:e8:1e:f0:76:6e:9b:13:01:56:f9:c7:a2:4e:79:
c7:3f:7b:ac:de:f7:96:23:44:53:50:58:4f:14:87:d5:d3:ae:
f0:5b:95:58:97:2b:5a:37:23:ef:73:80:95:19:f2:99:ef:22:
f7:39:26:bb:1c:0d:2f:d2:dc:7b:f0:38:55:cf:c6:49:1b:69:
61:ad:bd:97:66:fb:3b:59:cf:11:c3:aa:a9:d2:d0:55:c6:9f:
14:d2:4d:2f:51:b3:26:22:8b:0a:35:73:54:f9:4e:a0:ba:c6:
7c:7a:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:45 2026 by rpki-client