Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: abcSZ5GZnro+diTyt52wjUWT141kcisc5qm3fS04Big=
Subject key identifier: 1B:21:9B:6A:EB:48:5D:A7:CA:FE:D9:01:70:97:91:7A:23:BC:53:7F
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01A15BC2CF2172C26CB74731840740A89137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 1199
Signing time: Wed 21 Oct 2026 00:00:55 +0000
Manifest this update: Wed 21 Oct 2026 00:00:55 +0000
Manifest next update: Thu 22 Oct 2026 00:00:55 +0000
Files and hashes: 1: 0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa (hash: yajzvHBczLvuRuutMDqrA4C/+S65nBUWHxWPZS+HU6Y=)
2: O-In-8EU6bPfnod8wXwR8FyJmbs.roa (hash: uelI0IHExddUnealsb56pd/EXHI/t8Ure6Mfv6igkCw=)
3: _vXqV2-g7xwCNYuc9LOG1sJWevM.roa (hash: BJlsW9/rnHnD9aRumzD296n7QaGzXmfbPDZjx3MN9U0=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: sZmllxlc/IAvJDdLXgFSLzitzyAXu+DU56yHPma3Mlg=)
5: j9TBm7xlc93nIZuNOs3NlUyZzEs.roa (hash: OJvrZsHB8fK3Xgo6IhUOmrDOAtYYR5DtLBMAzJ8x9HU=)
6: sv0D0rQ-jLLb0IGeX2ROX93EsFk.roa (hash: EYfC2dmfQZQGj+XZAmvsP8gEvS8pC+VQXFW+zSAWNtc=)
7: v1kxLCHFe4rXrYp0W0C1yyln4_I.roa (hash: 6ZjRVf5/3Gwzgj/w23L+ctsJZNRROST71Vpw12YsM/U=)
8: xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa (hash: hFlPZerhEkhi26Lu5WKLWffMM3WUMXgzobrQrYJBZfA=)
9: xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa (hash: l2//kwEVxmYAhAAeP0g1fPw8aXt0cKX6RabVhra8PNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c2:cf:21:72:c2:6c:b7:47:31:84:07:40:a8:91:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Oct 21 00:00:55 2026 GMT
Not After : Oct 22 00:00:55 2026 GMT
Subject: CN=1b219b6aeb485da7cafed9017097917a23bc537f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:d3:fe:88:cc:6d:ca:09:05:67:46:fb:bf:
ee:6b:cc:a2:15:1c:12:ff:ae:94:18:2b:0b:fd:a9:
d5:72:c8:7c:25:94:f8:26:f4:33:f3:37:06:74:57:
ce:35:c3:91:df:53:53:51:84:5e:a2:69:ee:bd:0b:
9c:e6:15:b3:18:f8:82:3c:8a:f9:d2:8d:f0:4a:3d:
91:5a:3d:ec:38:b5:67:9b:cf:75:8f:3d:ef:e6:e8:
c6:29:7f:af:23:e1:d9:82:39:f1:9b:48:73:2e:9b:
dd:cc:c6:d0:44:67:a5:0b:13:01:c3:57:7f:80:0f:
8f:07:51:5c:f9:b4:44:52:b3:0e:06:69:61:bf:fa:
fc:d2:27:1e:09:b9:9e:10:67:e2:48:25:ad:82:60:
37:38:bf:3e:c6:70:45:33:c6:40:8c:b6:86:ee:17:
89:21:7d:dd:20:d3:41:97:ab:92:98:73:a2:11:3f:
fa:bb:f8:68:55:3a:ae:f8:da:c8:1f:93:72:12:56:
55:09:bc:b7:68:0b:3b:e7:47:35:6b:11:f2:62:ac:
a0:ba:70:20:18:4c:7c:3f:2f:0d:61:63:4e:74:67:
58:f1:d3:e1:71:f3:4e:11:a2:1f:5b:0c:62:9d:15:
a3:9c:6a:66:9f:96:5c:36:87:76:b0:9d:6a:e4:b3:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:21:9B:6A:EB:48:5D:A7:CA:FE:D9:01:70:97:91:7A:23:BC:53:7F
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6f:e4:b7:81:77:90:b1:4d:3d:47:7a:06:b1:e9:1f:8e:13:
2a:a6:b3:9a:6d:0f:99:85:c9:71:8c:80:8f:2d:28:20:5e:c9:
e3:39:7f:78:66:c3:86:82:80:0b:db:e3:11:73:7a:e8:1a:56:
22:74:35:93:48:67:b1:c4:7d:e5:ac:4d:ed:6e:f0:48:06:04:
a0:e1:dd:b1:e3:1a:bf:39:58:9c:79:70:db:08:2d:bd:aa:ac:
84:42:96:2a:39:be:14:ec:3a:d1:e7:23:01:e7:0e:3f:c0:a4:
ca:55:9c:27:7b:7b:bb:3a:66:80:db:1d:81:64:1c:36:d9:03:
a8:de:0d:a1:b1:64:62:d2:11:fa:fc:24:cf:a6:e3:90:45:75:
51:a1:0a:6e:02:55:96:b9:ee:b3:e3:26:03:76:35:ab:2e:c3:
c3:e2:d2:7d:3e:23:7e:3a:7f:de:2e:9a:aa:cd:64:ee:b6:4b:
4e:71:21:f0:ef:12:32:af:9b:e6:13:65:5b:05:27:7d:53:2c:
b6:07:7d:24:af:f2:e7:ba:1e:6f:e9:2e:07:ea:b1:e6:75:81:
4b:7b:98:6f:4e:87:7e:0d:7b:71:20:2c:db:f2:f0:dc:03:4e:
33:de:4c:20:81:cd:49:d8:75:3e:1f:80:58:3a:34:38:23:16:
63:54:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:42:30 2026 by rpki-client