Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: yqxBuQAlsxgxdF4DhjNeNBxgAi2AsopF3++/zoEkqz0=
Subject key identifier: C2:1E:33:3F:90:60:92:82:FC:B1:CE:CF:91:DB:D5:A8:BC:D5:2F:E3
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 01A18006F0C78AE90FBDEC4F7E91A04C2DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 13D5
Signing time: Wed 28 Oct 2026 01:01:40 +0000
Manifest this update: Wed 28 Oct 2026 01:01:40 +0000
Manifest next update: Thu 29 Oct 2026 01:01:40 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: 6jedqRIXAwl+ZDZ4mXW3kaqxPOOaYA/sCWG/oJ317gM=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:f0:c7:8a:e9:0f:bd:ec:4f:7e:91:a0:4c:2d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Oct 28 01:01:40 2026 GMT
Not After : Oct 29 01:01:40 2026 GMT
Subject: CN=c21e333f90609282fcb1cecf91dbd5a8bcd52fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:e2:87:36:83:ed:97:06:fb:ad:00:fc:0a:
88:b0:7d:b3:00:39:86:79:91:dd:35:2b:b7:53:c8:
a1:56:3e:b2:5d:ae:9a:c5:26:06:0c:b9:5e:14:eb:
3c:4c:63:69:7d:ca:17:81:8a:3c:93:af:b6:ff:1f:
48:0c:c9:d2:00:2c:4e:7a:49:66:68:5b:93:0c:54:
0f:15:b1:95:37:ce:05:8c:fb:70:eb:9a:c0:03:3f:
1f:36:a4:b1:02:ac:2f:fc:d9:65:97:14:8a:47:f9:
5e:20:df:04:e4:46:f8:07:4f:48:77:67:db:fd:55:
1d:97:d6:b5:56:ee:b2:fe:9f:38:15:fc:c4:5f:71:
d6:f9:db:a0:d2:1b:62:34:50:71:ba:0f:f0:24:37:
c2:d6:41:f5:66:8c:b4:42:d3:60:93:f4:f2:3d:86:
40:d7:69:08:35:d8:70:06:f0:3d:07:93:85:a9:3a:
5e:3b:ac:8a:80:85:3d:f9:58:d0:fc:64:69:3c:bb:
da:33:36:03:a3:0f:97:0c:c2:25:2e:27:0d:ed:f1:
15:4b:99:67:48:d0:d6:65:2e:a8:2e:37:c2:16:24:
2e:ae:3f:23:80:75:50:d1:54:c4:ed:9f:e3:06:af:
58:5b:48:46:1a:5a:3b:00:98:74:11:94:68:18:4c:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1E:33:3F:90:60:92:82:FC:B1:CE:CF:91:DB:D5:A8:BC:D5:2F:E3
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fd:ab:9e:f8:72:c3:aa:00:32:4b:42:2e:07:d7:68:4d:ed:
a8:01:51:26:34:76:5f:ab:1e:9c:2f:25:24:51:51:eb:b0:18:
88:27:2e:1a:92:08:ed:d0:f7:46:d0:3b:56:9a:fb:04:bb:46:
88:5b:28:db:ce:ad:c8:c9:33:9c:63:ed:82:9a:b9:93:12:0c:
3f:65:b6:4c:3b:69:91:87:45:41:f7:bc:bb:76:6a:79:8a:15:
03:67:10:13:6c:21:b7:ed:6f:b2:18:65:db:cf:9b:c2:8d:aa:
02:87:c6:ff:8e:03:69:c4:5f:76:ef:0b:a6:dc:2e:bc:ee:42:
8c:2f:70:26:71:1d:80:54:4f:eb:c3:f1:50:e7:40:2b:b6:a6:
2d:d3:70:8d:84:73:df:23:24:7b:4f:1d:a5:99:ce:51:f0:e8:
3a:31:38:a5:21:1f:8e:9a:83:ac:97:38:d1:24:ec:3e:48:a6:
b9:6d:ae:a5:b9:2b:29:4f:d1:be:49:3f:45:81:36:b1:55:ad:
e7:90:7a:cb:89:02:bc:a4:0f:c6:2a:67:11:7b:40:66:22:1a:
e5:7e:44:51:04:a5:41:36:27:f7:66:54:ec:24:2b:a1:31:cb:
2b:4a:c3:ac:98:ee:0b:68:26:77:ce:e9:ef:4b:b9:b8:00:99:
a9:95:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:57 2026 by rpki-client