Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: Scn8tThBYVCg1R76jAB5mZoa85ffykGMIQFH1g84EwU=
Subject key identifier: 90:88:80:47:05:39:10:5F:79:60:D6:1E:28:43:8E:54:7C:C3:2A:3A
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 019D3A5453F560946B71A20D3F698DDBB4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 0852
Signing time: Sun 29 Mar 2026 16:01:38 +0000
Manifest this update: Sun 29 Mar 2026 16:01:38 +0000
Manifest next update: Mon 30 Mar 2026 16:01:38 +0000
Files and hashes: 1: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: HoxxPBPpcgNRWkHG9lkIRlejBCjVVjuxCYR0NEqduD0=)
2: iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa (hash: BxwlJ6L7JiirPlQT5hR2YOM60CkwhHbmXiQ9C6w1opo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:53:f5:60:94:6b:71:a2:0d:3f:69:8d:db:b4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: Mar 29 16:01:38 2026 GMT
Not After : Mar 30 16:01:38 2026 GMT
Subject: CN=908880470539105f7960d61e28438e547cc32a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:28:e8:a3:5d:be:f0:e7:16:cd:6d:69:54:
28:ab:66:a5:81:64:3f:a6:65:89:1d:f8:22:50:79:
1b:1f:6f:1c:1c:c5:a0:72:b8:76:1b:d8:ed:4d:dc:
3d:6e:14:0c:57:de:ef:69:6f:fe:5e:07:5f:c6:df:
e4:a5:05:72:cb:ba:ec:d7:54:55:21:c9:a4:54:e9:
da:e7:94:44:ca:31:c2:35:d7:08:3a:b1:4b:1c:91:
a0:b8:ba:87:1e:25:a5:76:7e:54:ca:63:80:50:2e:
72:1d:e1:3c:14:ea:6b:e1:db:36:84:13:57:47:a6:
a2:96:64:e1:ef:85:18:7a:c8:e2:5c:1f:4f:5d:f8:
43:d5:15:6c:76:32:21:a7:cc:3d:32:ac:37:09:c8:
ce:72:33:0d:e3:70:91:af:f2:a4:b6:80:c4:02:b2:
80:d9:01:c4:53:17:9d:b1:65:10:66:dd:9c:04:c1:
38:53:e2:60:7f:a8:4d:df:34:98:df:5d:4c:98:0e:
bf:27:73:fc:7d:62:4a:f3:f7:ff:4c:d4:31:a3:f6:
b8:88:f6:eb:8b:35:39:3d:6e:bf:12:d0:0d:e0:9e:
53:7f:0a:e3:c4:a5:d2:f4:5a:f8:d8:5c:13:10:3e:
20:15:6b:a0:c2:c5:aa:11:cf:c1:1f:d6:3c:3f:bc:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:80:47:05:39:10:5F:79:60:D6:1E:28:43:8E:54:7C:C3:2A:3A
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bd:d5:4b:3d:f9:80:d5:19:cd:95:e9:06:22:32:dc:b5:c1:
7c:0c:de:5a:22:66:70:9e:61:d4:7b:9c:b9:16:81:e4:48:44:
1e:6d:f0:10:58:c9:94:72:d7:9b:a3:05:18:5c:73:f5:a1:cf:
72:36:f4:10:cc:86:b4:31:60:ca:81:8d:1f:76:d5:19:15:b7:
73:05:a6:03:4c:ee:71:ca:91:5e:93:f9:9e:fa:4f:e0:b5:ed:
87:82:f6:31:9d:00:61:23:27:63:b9:61:c9:43:f7:e6:94:25:
9e:e0:ad:0b:f6:c4:63:4b:90:90:10:47:49:87:27:44:fa:56:
4f:c7:72:ba:cc:bb:73:21:b5:9d:9b:08:27:d7:6b:26:d5:3f:
84:6a:98:a7:52:6d:24:99:b2:9c:1c:c9:7d:54:2c:fc:c9:6c:
82:59:8f:e2:01:35:ea:1a:ab:e2:83:49:a4:3b:b7:ad:77:34:
d7:b5:76:fa:90:69:47:a3:b4:6b:ec:9e:9c:d6:c5:fa:91:7a:
02:a4:94:51:73:13:83:60:6e:b9:73:7d:95:34:2f:ce:c1:23:
e1:e8:0c:7d:39:6d:83:3a:51:f8:f4:d9:00:17:ad:03:c4:fd:
72:60:0f:7d:a0:be:c7:37:55:92:74:f8:2b:2a:17:c6:02:7a:
80:19:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:08 2026 by rpki-client