Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: NMTfC4jY2ICMjUx6w9HPJm06Fs8gOSl0Pqyq//BnJJk=
Subject key identifier: 75:9F:49:9F:B0:F1:02:EB:B2:47:77:46:23:A5:0A:CF:7C:0D:46:C8
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019FA304BE4CF6B23E6425E4F2951826FD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 12DE
Signing time: Mon 27 Jul 2026 10:00:24 +0000
Manifest this update: Mon 27 Jul 2026 10:00:24 +0000
Manifest next update: Tue 28 Jul 2026 10:00:24 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: zExs94EX9yuvF5n4kMUhb8mgpd4kHVse1fQBLzmylgM=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:be:4c:f6:b2:3e:64:25:e4:f2:95:18:26:fd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Jul 27 10:00:24 2026 GMT
Not After : Jul 28 10:00:24 2026 GMT
Subject: CN=759f499fb0f102ebb247774623a50acf7c0d46c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:19:17:20:87:b0:fd:b5:82:6a:e7:27:5e:
f9:f8:c7:d1:3d:fe:42:2d:65:50:67:f7:4c:38:c0:
33:33:f1:bf:ec:59:08:29:c4:b4:27:d7:77:01:33:
28:db:2a:c4:6c:6a:83:85:df:84:eb:dd:b5:27:3e:
51:c7:22:e7:59:c8:20:b5:8a:c7:2a:b8:9e:61:cc:
f1:4b:2a:fb:cf:0c:e7:76:43:fa:99:82:94:2f:6d:
8c:3c:ad:e9:f6:6c:75:ff:36:84:10:2e:98:a7:dd:
a9:c9:47:4f:93:c7:37:08:cc:c3:7d:91:fe:8a:40:
26:64:da:c2:4e:c7:15:38:67:2f:80:bb:21:ba:3a:
ce:1c:04:78:54:e7:2e:f1:c1:2b:49:83:8e:c4:12:
ec:4d:7c:32:80:df:e1:99:8b:ce:ff:c4:85:da:3a:
bd:fd:6e:69:08:83:68:ec:6b:1e:9d:cb:bb:33:8b:
73:bc:d9:45:ae:fd:c6:73:90:7d:27:6c:c1:80:88:
14:61:a8:00:16:b3:81:45:6a:1d:8a:a9:b2:ec:87:
ad:29:77:b0:f1:4b:32:8c:87:d0:f9:d3:8c:51:e8:
ca:0e:af:28:31:15:12:e9:57:bd:85:93:49:a7:a8:
4b:08:29:3d:54:63:92:ed:2b:1c:d6:49:14:3a:69:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:49:9F:B0:F1:02:EB:B2:47:77:46:23:A5:0A:CF:7C:0D:46:C8
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:87:16:eb:98:1c:34:bd:4a:42:2b:29:2e:1c:45:e3:02:
ce:b5:af:d6:98:43:80:84:d0:bc:f3:8c:f7:50:8b:90:52:29:
8f:fe:fa:9a:e9:0c:8d:bc:68:c1:a6:b2:5d:4f:54:00:8a:5f:
9d:4c:3b:2e:9c:ae:e7:2f:b1:9a:c8:e4:e8:ed:04:a5:75:60:
ff:02:04:74:f7:4f:8b:da:93:7d:45:eb:30:7a:f0:f5:1c:ee:
02:53:15:2c:b4:f8:18:95:2f:79:cf:4c:89:0a:73:d2:6c:5c:
94:54:d8:b4:c8:9f:d9:63:c0:17:0c:71:66:ec:20:3f:af:ce:
49:28:cd:bc:e5:0a:4e:bb:2c:36:7b:94:d3:7b:58:80:e6:54:
d0:68:82:57:11:7b:7a:b2:96:65:79:fa:3b:9d:40:17:3b:44:
73:7d:6a:31:fb:57:34:8b:70:b9:5c:6e:f4:74:f3:cb:a4:c7:
ad:02:fa:1b:ca:8c:42:bd:6f:ef:d3:89:a5:12:fb:f9:d3:0f:
1d:b2:59:1a:3a:6e:43:89:8d:c6:47:92:d9:80:08:86:42:51:
68:1d:82:31:61:e2:3c:4c:81:92:29:c8:92:ae:07:42:ca:75:
c0:e4:d0:27:b5:bc:ab:e0:2e:5c:cf:50:a3:17:13:59:b7:89:
b9:8f:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:45:20 2026 by rpki-client