Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: CWAc9CeZfKy+yNAfnh9Q6+GtLVZCRY975eKBseM69/U=
Subject key identifier: 8F:62:DF:6B:4B:4D:06:AF:16:37:FD:26:A6:57:35:8A:79:82:95:B9
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019DCFAC28D6AF97DB51705D845C4D4EA029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 11EC
Signing time: Mon 27 Apr 2026 16:00:59 +0000
Manifest this update: Mon 27 Apr 2026 16:00:59 +0000
Manifest next update: Tue 28 Apr 2026 16:00:59 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: Xt92p6EvceEhakwPtCwN+uMF6ocNwgw7sJnmKejoN+E=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:28:d6:af:97:db:51:70:5d:84:5c:4d:4e:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Apr 27 16:00:59 2026 GMT
Not After : Apr 28 16:00:59 2026 GMT
Subject: CN=8f62df6b4b4d06af1637fd26a657358a798295b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:ed:3c:d1:25:95:3f:9f:b3:c4:01:24:66:
ff:e6:32:0f:0e:85:2b:c0:4a:1d:b7:12:25:ef:1e:
59:05:b2:17:29:67:5f:a8:fa:2b:94:36:c8:91:73:
23:eb:cb:f3:8f:6c:73:e6:f2:5a:38:47:6d:a9:af:
14:b6:ea:3a:b8:66:51:cc:e8:a7:3f:ab:96:2f:e8:
7c:fc:14:28:67:34:09:83:cf:5b:6c:96:78:21:02:
e9:0e:9f:e0:5c:3c:f5:81:6e:f5:a7:18:96:eb:ed:
23:b8:52:7e:32:69:af:12:f9:14:a8:5b:40:16:a7:
2a:05:e1:11:f6:25:ee:07:11:e2:8f:10:f9:cb:8b:
fd:32:86:c9:9d:0f:32:4f:fa:1d:5e:ac:8c:0b:df:
fe:d5:f9:1a:4c:e9:3f:4e:13:2b:4a:f5:b5:0f:1a:
c3:ca:2e:ef:a1:04:cc:ea:78:62:64:2c:c1:d1:f6:
be:b9:12:6f:02:53:30:fa:d9:f6:a2:5d:7b:ca:df:
41:e8:49:b0:7d:ec:bc:40:16:90:a6:ef:ff:92:6e:
30:c5:0d:52:35:96:05:1c:69:b2:b3:8e:ed:f1:7e:
2d:f2:79:0a:c4:97:82:f5:ac:ef:c5:36:9f:e5:21:
74:5a:9a:4e:73:e7:09:55:6e:69:1e:7b:0c:c3:67:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:62:DF:6B:4B:4D:06:AF:16:37:FD:26:A6:57:35:8A:79:82:95:B9
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:0a:e7:78:61:37:1d:cf:84:97:1b:56:33:d5:92:ad:42:
fc:37:9f:af:fa:28:6d:3e:91:40:bf:cf:68:48:65:46:f0:86:
9b:15:0c:25:0a:da:1a:1a:20:93:f7:5d:f0:71:91:34:dd:48:
de:09:13:91:bc:7d:a6:25:8b:59:5a:6e:ac:27:54:a8:54:1f:
2e:dd:d6:ee:55:e3:d6:3e:77:10:64:1b:f1:bc:37:6a:30:50:
ef:11:45:e3:0f:cd:62:d1:f8:34:13:1c:0c:dc:e6:ce:76:52:
83:05:08:df:d2:20:0c:a3:1c:b5:da:64:81:0e:7c:5b:b2:77:
4d:6d:2b:6d:9b:47:9f:35:72:81:6e:c2:99:62:f3:10:fa:db:
60:ff:50:22:c6:f1:af:7d:d2:7e:f9:80:8c:56:b5:a2:27:de:
04:c2:c1:06:03:92:88:2c:ed:1b:7e:97:17:86:5c:96:7c:49:
14:b0:44:3e:a8:bc:e7:73:eb:da:46:86:0a:8f:bc:30:f3:13:
bd:b1:94:2a:25:57:7b:e2:fa:ca:c4:00:4a:98:3e:2f:a5:02:
39:4b:c0:f0:2d:61:2e:99:d1:41:a8:e1:9d:89:db:26:2c:ba:
d3:4a:39:10:09:a6:dd:91:ff:98:be:e1:25:b0:93:3e:4e:2b:
a9:07:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:25 2026 by rpki-client