Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
File: pB6cBojcQS_Ce8DiQtcDmp34yGg.mft (raw, json)
Hash identifier: sAPSdcWfNuJrj0DdsX8aJPMCykN6ukIHrAiLJEOLWTw=
Subject key identifier: 64:64:36:9F:F9:F1:0F:7E:A2:67:B2:2E:7B:77:EC:4A:93:24:BA:76
Authority key identifier: A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68
Certificate issuer: /CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868
Certificate serial: 019D3A546B7628E01976F10A9B6B80C86992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
Manifest number: 0229
Signing time: Sun 29 Mar 2026 16:01:44 +0000
Manifest this update: Sun 29 Mar 2026 16:01:44 +0000
Manifest next update: Mon 30 Mar 2026 16:01:44 +0000
Files and hashes: 1: pB6cBojcQS_Ce8DiQtcDmp34yGg.crl (hash: 7mK4MQO4q5xsoRShzqhmw+/7e0vwzEvvs9wepjhhnoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:6b:76:28:e0:19:76:f1:0a:9b:6b:80:c8:69:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868
Validity
Not Before: Mar 29 16:01:44 2026 GMT
Not After : Mar 30 16:01:44 2026 GMT
Subject: CN=6464369ff9f10f7ea267b22e7b77ec4a9324ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:c7:46:4f:71:8a:1a:5b:1a:b1:24:55:d3:
d5:04:12:87:26:69:8a:c9:09:7c:b2:51:c9:d8:be:
95:97:20:c3:24:c9:7f:a0:0d:13:7e:87:70:55:2b:
ee:c3:83:e0:4b:49:da:d9:3b:bb:5d:c1:ea:27:97:
04:dc:2f:34:3d:de:fa:fd:75:25:da:1e:51:f7:74:
90:da:a7:04:d9:28:c8:1c:6a:7a:66:fe:d7:63:6b:
82:93:64:8b:3b:ec:1f:09:51:73:0a:9d:8f:cf:b0:
2c:15:1c:7e:6b:8f:46:e6:fe:86:de:60:0f:be:ae:
a0:cf:6a:32:8e:4e:d6:d4:13:08:87:2f:d6:21:69:
e9:12:fc:5a:f5:1b:5e:5a:bd:ae:74:01:b0:c4:1c:
27:16:89:c8:a7:0d:7e:6d:bb:95:b6:0d:0d:96:b9:
06:0b:66:f1:c5:e7:9c:4d:4e:6b:dc:f1:f5:c4:21:
e4:55:c4:75:b8:cc:27:f8:49:08:a5:d6:83:e9:fd:
50:ed:e3:1f:1f:d1:f4:d7:d8:ac:1b:67:e7:e1:e8:
5e:19:07:06:8c:cf:92:50:eb:ac:f4:85:4b:c9:a2:
7a:be:60:cf:e1:2a:28:cd:f4:10:8b:d5:0b:cb:e6:
57:81:60:60:75:bf:3c:c1:4a:35:8f:29:91:bf:8a:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:36:9F:F9:F1:0F:7E:A2:67:B2:2E:7B:77:EC:4A:93:24:BA:76
X509v3 Authority Key Identifier:
keyid:A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:20:9c:c9:07:62:dd:ad:91:9e:ce:b4:95:d4:38:da:1e:
19:39:b9:e3:11:1d:47:dd:b2:97:39:b1:70:a4:36:7b:1e:33:
c0:68:5b:e3:f2:85:12:fc:b9:7a:a7:83:e2:4c:ef:a5:70:66:
bd:8c:c8:0a:6f:de:b3:6b:1f:54:a0:97:1b:32:7c:cc:3e:af:
81:56:8b:e0:17:c8:df:34:62:af:ee:db:2a:0b:0b:40:02:ea:
c4:e9:7f:d4:f6:65:9d:92:0d:52:b8:79:06:09:0f:16:86:60:
f5:ac:58:58:f8:88:2f:61:06:28:de:3a:66:f6:9c:56:30:9b:
91:92:bb:c8:32:03:a0:65:3e:60:42:32:9a:84:b9:29:e2:12:
56:e0:a6:68:1c:22:7f:58:a0:dd:7f:97:32:14:53:5b:1a:68:
c2:63:86:15:1c:1c:b8:0e:2f:86:6b:a3:90:1d:b1:81:38:7e:
bf:b6:12:10:9a:b6:aa:b1:e1:fd:db:f6:72:a8:3b:e3:79:65:
25:33:35:4d:ee:ef:8a:96:d3:7e:eb:33:3e:21:82:1e:e3:fd:
45:c7:3b:4a:59:34:f1:34:11:cf:3c:8f:54:75:2d:d0:b1:3c:
23:ea:a1:3a:e0:fd:b0:79:62:fe:b9:6a:1c:59:01:a7:08:8d:
97:4b:a3:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VGt2KOAZdvEKm2uAyGmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWU5YzA2ODhkYzQxMmZjMjdiYzBlMjQyZDcwMzlhOWRm
OGM4NjgwHhcNMjYwMzI5MTYwMTQ0WhcNMjYwMzMwMTYwMTQ0WjAzMTEwLwYDVQQD
Eyg2NDY0MzY5ZmY5ZjEwZjdlYTI2N2IyMmU3Yjc3ZWM0YTkzMjRiYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WTHRk9xihpbGrEkVdPVBBKHJmmK
yQl8slHJ2L6VlyDDJMl/oA0TfodwVSvuw4PgS0na2Tu7XcHqJ5cE3C80Pd76/XUl
2h5R93SQ2qcE2SjIHGp6Zv7XY2uCk2SLO+wfCVFzCp2Pz7AsFRx+a49G5v6G3mAP
vq6gz2oyjk7W1BMIhy/WIWnpEvxa9RteWr2udAGwxBwnFonIpw1+bbuVtg0NlrkG
C2bxxeecTU5r3PH1xCHkVcR1uMwn+EkIpdaD6f1Q7eMfH9H019isG2fn4eheGQcG
jM+SUOus9IVLyaJ6vmDP4SoozfQQi9ULy+ZXgWBgdb88wUo1jymRv4qgwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRkNp/58Q9+omeyLnt37EqTJLp2MB8GA1UdIwQY
MBaAFKQenAaI3EEvwnvA4kLXA5qd+MhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEI2Y0JvamNRU19DZThEaVF0Y0RtcDM0eUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYmIyZTQtOGM4MC00Yjg5LTgzOGYt
M2QxMzZmM2E3OGQ3LzEvcEI2Y0JvamNRU19DZThEaVF0Y0RtcDM0eUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wYmIyZTQtOGM4MC00Yjg5LTgzOGYtM2QxMzZmM2E3OGQ3
LzEvcEI2Y0JvamNRU19DZThEaVF0Y0RtcDM0eUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnsgnMkH
Yt2tkZ7OtJXUONoeGTm54xEdR92ylzmxcKQ2ex4zwGhb4/KFEvy5eqeD4kzvpXBm
vYzICm/es2sfVKCXGzJ8zD6vgVaL4BfI3zRir+7bKgsLQALqxOl/1PZlnZINUrh5
BgkPFoZg9axYWPiIL2EGKN46ZvacVjCbkZK7yDIDoGU+YEIymoS5KeISVuCmaBwi
f1ig3X+XMhRTWxpowmOGFRwcuA4vhmujkB2xgTh+v7YSEJq2qrHh/dv2cqg743ll
JTM1Te7vipbTfuszPiGCHuP9Rcc7Slk08TQRzzyPVHUt0LE8I+qhOuD9sHli/rlq
HFkBpwiNl0ujhg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:48 2026 by rpki-client