Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: BzIMNoD0CXuXfoPfQKq14kXpLQM/j264IyUKnPLzMaA=
Subject key identifier: CC:19:2A:71:87:C4:1F:FE:03:12:0B:8C:B2:48:54:5C:09:F9:47:BE
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019CE5FF8526191EC75F1114DC6BA0C9B442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 1173
Signing time: Fri 13 Mar 2026 07:00:54 +0000
Manifest this update: Fri 13 Mar 2026 07:00:54 +0000
Manifest next update: Sat 14 Mar 2026 07:00:54 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: pZGK8+VrbYJ/WVTC39elqRhrVcfjVGabVWRUNVuKMEY=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:85:26:19:1e:c7:5f:11:14:dc:6b:a0:c9:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Mar 13 07:00:54 2026 GMT
Not After : Mar 14 07:00:54 2026 GMT
Subject: CN=cc192a7187c41ffe03120b8cb248545c09f947be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:b9:d9:b4:20:ff:f2:77:6c:76:09:6c:09:
ce:1c:dc:29:10:da:fa:d9:81:30:06:79:86:ab:8b:
3d:4f:30:d1:b5:57:06:04:25:e0:de:2f:f6:e9:27:
5c:03:69:9b:71:a9:c1:2f:af:f6:1d:6d:36:4c:04:
75:5f:d7:c5:9e:37:68:df:34:68:d2:6a:0d:bd:dc:
0a:b5:0a:46:64:90:62:0b:0b:45:e0:f9:34:bd:09:
d7:90:a1:88:b5:33:3f:5d:3e:5b:08:27:82:b8:6e:
78:0b:65:1e:09:72:04:2c:91:52:bc:96:44:cd:39:
a0:a7:f4:13:32:e7:e3:f2:95:de:3c:c7:e3:19:03:
89:76:86:14:b2:98:34:cb:b8:0c:81:bd:66:bd:93:
52:ea:f7:78:a4:a0:f4:b4:aa:d2:f1:93:dc:25:a0:
92:7c:58:06:94:f1:15:cf:a1:77:0d:fb:d3:2f:05:
fd:0a:99:7e:0c:e8:df:cb:25:bc:ee:50:89:d8:65:
93:c0:e9:36:40:ae:be:ed:32:32:c9:f0:07:aa:a8:
f5:52:5b:d2:3b:fe:a4:4d:af:2b:01:f9:da:4d:27:
5a:b6:88:18:6a:7c:79:7b:40:56:99:0d:3c:41:58:
83:bb:74:07:ef:11:f0:0b:03:2a:7c:c9:07:7a:95:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:2A:71:87:C4:1F:FE:03:12:0B:8C:B2:48:54:5C:09:F9:47:BE
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:43:2b:e1:aa:1e:bf:89:23:f6:45:40:ec:69:bb:6f:61:
65:0f:5f:5c:17:91:23:b5:eb:31:19:ab:9a:3b:24:9b:f1:55:
32:13:3b:c9:ac:95:93:77:e7:ff:d7:f5:ad:08:26:48:d1:05:
fd:97:67:46:b3:f4:ee:2f:f8:a8:16:e8:bd:9d:d1:5c:77:9c:
a9:09:3b:6a:05:2d:96:4e:45:b5:7c:e9:60:8a:e8:71:5a:67:
7f:b8:73:69:d4:10:c9:e3:dc:f5:08:0d:11:cf:77:c8:e7:f1:
ec:14:a8:38:98:7c:71:6d:12:b6:4e:cc:a6:33:f6:fe:d8:30:
db:6e:f4:5f:93:56:a3:fe:27:f1:db:8f:46:d8:69:41:b0:17:
73:e5:be:5b:ca:c5:0e:00:69:f5:50:97:c6:1e:03:c0:da:80:
16:bb:2b:fc:d3:4c:f6:61:16:67:e1:53:a9:a7:22:59:5a:11:
cb:03:3e:8c:f4:e6:e2:b7:4d:d6:fc:8a:59:e1:06:de:96:0d:
1d:39:be:e6:5b:59:6c:c6:4c:e8:be:43:8f:83:67:2f:e9:4c:
f0:78:cc:2e:e7:4c:b0:48:20:41:34:66:f1:72:45:c6:c4:1a:
c8:0c:e1:85:b4:c9:55:d1:1c:11:88:ea:f1:f9:43:f0:f2:33:
6f:41:69:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:05 2026 by rpki-client