Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier: +m7DFHMgtMdQhwrvYEARZolWg6G4BT4QlBCR9ZuVW6w=
Subject key identifier: A9:57:6B:2B:50:66:72:5D:74:E6:1F:1F:4B:71:C1:06:D6:20:83:BC
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 019D3865B4444A9B0886971F83E12198CAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number: 02AB
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: YVwAhPj5hlVtgSQXvL1kjjIv8tnRgsdk+r7FkownAyI=)
2: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (hash: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b4:44:4a:9b:08:86:97:1f:83:e1:21:98:ca:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=a9576b2b5066725d74e61f1f4b71c106d62083bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:5b:2b:23:b9:1b:a9:83:d9:6d:4e:58:58:
b0:26:b4:95:77:fd:23:24:72:21:67:88:45:55:ea:
fa:b8:ad:80:6a:94:30:36:4d:03:23:e5:8b:43:9b:
f4:77:67:fd:fb:df:df:73:5b:8d:dd:58:d8:91:6d:
6f:36:79:db:1c:7c:70:f7:85:2c:c8:8b:2a:1f:2f:
d2:65:d6:21:3c:90:3b:31:66:90:b1:92:c9:db:4d:
cf:5f:1d:be:68:6d:36:d2:9b:62:d1:a1:6b:a8:0e:
00:ad:37:60:f0:92:d2:d8:a7:36:3b:13:11:c8:74:
8f:71:89:3d:6f:f0:9c:da:73:46:a3:bf:a2:3f:ca:
55:09:fa:77:a6:5c:a8:9e:81:ab:1a:4d:58:c6:18:
4f:a8:81:ef:65:57:72:e2:72:ae:ca:37:61:b0:4e:
b2:14:64:59:e3:73:4d:8b:bc:f5:b6:ff:4f:ff:a7:
25:7f:95:33:f0:84:78:cc:b5:c3:60:df:7e:0e:a6:
c9:a9:84:b2:10:7a:55:56:47:f4:c8:be:32:e7:6e:
2a:c3:15:9f:b6:49:e4:3d:90:03:37:0c:a0:84:53:
40:f1:0b:4e:d7:1b:07:d6:e2:5f:fa:84:8d:44:29:
b9:2f:12:d8:4e:8b:4b:dd:2c:0c:c5:9a:24:fa:de:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:57:6B:2B:50:66:72:5D:74:E6:1F:1F:4B:71:C1:06:D6:20:83:BC
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6a:ee:29:d2:cf:f2:b3:0a:16:5a:56:77:b0:b6:e5:af:cb:
13:a4:6f:a7:00:4d:7e:a8:37:0d:23:17:5f:61:fd:78:e4:52:
a5:47:c2:24:28:47:96:be:79:21:30:d1:20:fc:f6:ec:bd:60:
fb:81:2e:f4:f2:70:b5:5b:e6:44:3d:51:dc:bd:bd:18:4d:52:
f8:56:17:f2:fe:34:88:f5:eb:0a:24:d7:3e:e6:77:67:d3:d6:
f3:d5:09:ee:3f:6b:9f:c0:1b:aa:68:98:f4:3e:bb:31:08:e9:
2e:e7:6b:28:db:8b:88:16:34:48:d8:92:cc:9c:84:fb:8c:56:
9e:6f:7c:0c:65:4c:dd:34:5b:c6:55:5d:a2:67:f2:67:32:44:
2f:f6:3d:43:a0:bf:b7:c0:6e:d7:4d:5f:8b:d2:4f:85:10:85:
16:33:a8:66:a7:c0:c4:ec:e0:20:df:a4:2c:f8:42:49:7a:89:
98:3e:24:62:23:8f:64:7d:05:22:88:b2:55:e4:b4:8d:43:29:
7e:bb:34:21:44:27:af:8a:c9:2a:e2:68:d1:5a:da:86:48:b1:
ea:b1:5d:e4:7d:51:1c:51:9b:71:a4:0c:42:fe:8c:45:f6:e5:
8e:c9:ca:77:71:75:f7:09:c4:ee:be:f4:92:15:63:52:00:8f:
fd:a1:05:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZbRESpsIhpcfg+EhmMq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdkMDZkMTRiYTRlMjc4MDk3ZjM1YTgwYzcxNTY4NGNh
YzI2NjEwHhcNMjYwMzI5MDcwMTIyWhcNMjYwMzMwMDcwMTIyWjAzMTEwLwYDVQQD
EyhhOTU3NmIyYjUwNjY3MjVkNzRlNjFmMWY0YjcxYzEwNmQ2MjA4M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz1bKyO5G6mD2W1OWFiwJrSVd/0j
JHIhZ4hFVer6uK2AapQwNk0DI+WLQ5v0d2f9+9/fc1uN3VjYkW1vNnnbHHxw94Us
yIsqHy/SZdYhPJA7MWaQsZLJ203PXx2+aG020pti0aFrqA4ArTdg8JLS2Kc2OxMR
yHSPcYk9b/Cc2nNGo7+iP8pVCfp3plyonoGrGk1YxhhPqIHvZVdy4nKuyjdhsE6y
FGRZ43NNi7z1tv9P/6clf5Uz8IR4zLXDYN9+DqbJqYSyEHpVVkf0yL4y524qwxWf
tknkPZADNwyghFNA8QtO1xsH1uJf+oSNRCm5LxLYTotL3SwMxZok+t6EpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlXaytQZnJddOYfH0txwQbWIIO8MB8GA1UdIwQY
MBaAFAdH0G0Uuk4ngJfzWoDHFWhMrCZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEt
MGQxY2JmY2QzYmMwLzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEtMGQxY2JmY2QzYmMw
LzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimruKdLP
8rMKFlpWd7C25a/LE6RvpwBNfqg3DSMXX2H9eORSpUfCJChHlr55ITDRIPz27L1g
+4Eu9PJwtVvmRD1R3L29GE1S+FYX8v40iPXrCiTXPuZ3Z9PW89UJ7j9rn8AbqmiY
9D67MQjpLudrKNuLiBY0SNiSzJyE+4xWnm98DGVM3TRbxlVdomfyZzJEL/Y9Q6C/
t8Bu101fi9JPhRCFFjOoZqfAxOzgIN+kLPhCSXqJmD4kYiOPZH0FIoiyVeS0jUMp
frs0IUQnr4rJKuJo0Vrahkix6rFd5H1RHFGbcaQMQv6MRfbljsnKd3F19wnE7r70
khVjUgCP/aEFdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:36 2026 by rpki-client