Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier: xkdC2rEScVfO6dhL4vhJvnC8PTh8hoVwBWybseZeZcE=
Subject key identifier: DA:51:81:B8:D2:1D:24:D6:36:01:85:44:73:FF:E7:4C:30:0D:BC:4D
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer: /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial: 019D39410F849DD3FA27C468F8FC96B352A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number: 54
Signing time: Sun 29 Mar 2026 11:00:58 +0000
Manifest this update: Sun 29 Mar 2026 11:00:58 +0000
Manifest next update: Mon 30 Mar 2026 11:00:58 +0000
Files and hashes: 1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: tDvu9rVqkdUx3EiSuPG8wO5NWiCuLK0edZOC7JIfHGU=)
2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0f:84:9d:d3:fa:27:c4:68:f8:fc:96:b3:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Validity
Not Before: Mar 29 11:00:58 2026 GMT
Not After : Mar 30 11:00:58 2026 GMT
Subject: CN=da5181b8d21d24d63601854473ffe74c300dbc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:c2:2b:12:08:7b:ba:e6:07:02:a7:e5:6b:
71:2f:65:62:66:74:71:0d:42:8f:3e:75:2a:bd:f4:
1e:30:3b:c6:00:a2:83:6d:af:a6:c8:b3:df:a6:7f:
b5:91:90:fc:c1:12:65:79:e2:f6:27:03:92:34:fb:
aa:e6:f9:bf:61:7f:bd:7e:1e:ba:13:06:5f:30:ac:
24:9d:e0:fe:0d:98:04:f5:0f:ed:3d:9c:49:42:f8:
b9:75:b7:c9:02:62:bf:74:c1:dd:ad:83:3e:b7:b8:
24:ed:0a:ca:58:c2:47:c0:6c:f9:4f:5f:67:9e:44:
76:f0:f9:6c:81:38:d5:73:51:d0:7a:75:04:45:a8:
01:aa:15:9d:08:e2:cc:c4:12:19:23:ac:b0:82:e7:
08:cf:f2:f9:6d:dd:f1:f3:b3:77:8e:69:42:cc:44:
08:f4:3d:59:85:ea:3b:c9:ce:b3:64:65:ea:d6:7d:
80:ca:42:dc:09:84:9d:f1:92:84:3b:ce:a4:ab:46:
42:07:1f:4a:37:63:0d:82:d1:c3:37:a0:ca:38:2a:
a2:5c:42:c4:63:8e:42:6c:d4:63:b9:a6:c1:2b:ea:
d6:70:ff:b4:41:bd:d9:9d:f1:62:5c:b1:1c:b5:2d:
40:89:d1:b2:2a:d6:74:29:cb:f7:8f:69:9d:e3:27:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:51:81:B8:D2:1D:24:D6:36:01:85:44:73:FF:E7:4C:30:0D:BC:4D
X509v3 Authority Key Identifier:
keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:97:fd:82:07:d1:56:7d:28:0d:e7:2f:73:c0:06:ba:e9:
0c:40:9f:d0:d2:d1:e5:f1:ac:11:47:de:8b:0d:b1:37:71:cb:
8c:3a:55:e9:b8:6f:0c:39:32:9f:39:48:6c:58:fb:57:43:d6:
78:e5:c9:f8:96:97:71:c2:ad:07:35:21:48:74:6c:72:29:99:
61:35:4f:46:30:73:3f:e5:38:67:08:33:51:63:3d:78:17:67:
34:1a:da:c5:9e:3f:9a:db:48:b6:44:31:23:9f:45:e7:71:26:
4f:90:3b:a7:f7:9a:02:b7:cc:c1:80:64:2a:59:56:dc:03:20:
e3:76:51:70:bc:7c:a0:b0:18:9c:69:cc:4c:69:c7:05:7d:0b:
82:2b:8e:5b:3e:4c:af:79:a2:84:55:c8:fc:d4:d4:e2:01:63:
43:a8:7b:72:1f:5d:76:29:1c:0e:26:0a:35:15:ee:44:7e:7d:
37:3b:03:33:d6:10:86:17:0f:99:85:f3:b7:20:54:77:ba:64:
ff:d8:bf:1e:d1:ac:b9:2f:c0:0c:35:4c:01:88:20:56:df:5d:
53:e7:d4:d0:08:c6:c0:e7:1e:28:1f:48:cb:4b:ba:5a:d7:90:
23:a8:4d:38:d1:07:7b:ee:c9:01:20:fe:68:0a:e9:ff:12:be:
e5:82:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:28 2026 by rpki-client