Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: MHoLaqagNN0MCTKW20WBj2TZp13h+DlMR68mZOY4XgQ=
Subject key identifier: CC:33:B0:20:D1:A4:CD:DD:E9:14:AA:19:DE:F6:19:43:5C:39:61:58
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 019CAB33D97931023357A29FC971F828939B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 0AD6
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: F1HfHskuYXSdWsLEiLHenZ2CZK56QZthCCAg50mER5k=)
2: lm3OTOwIvXSXM9pioR3a9JAWpbo.roa (hash: jQABbYTjEwoFiegPBkd7R4azYt9ZrDtGw7Anzr3WHlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d9:79:31:02:33:57:a2:9f:c9:71:f8:28:93:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=cc33b020d1a4cddde914aa19def619435c396158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:54:59:d9:df:84:b7:c4:df:80:5e:c5:f2:
7c:22:0f:d7:f5:20:00:5e:30:6a:fd:33:a6:aa:de:
92:d4:77:42:63:64:67:e9:42:7a:be:9e:fe:ad:92:
d4:be:a0:2a:c7:0d:63:c7:ac:a8:ef:cb:5b:51:ab:
67:04:f6:49:02:0a:82:1e:e9:1a:97:83:53:52:c0:
c7:32:c4:90:6d:7f:9f:6e:9e:f4:f5:88:42:18:b3:
5a:73:38:a5:a0:3d:d9:87:da:49:1f:6f:91:0f:2d:
6d:c4:42:0e:24:f4:65:47:a9:d1:93:71:56:da:0f:
bf:33:12:d3:d4:5a:56:02:98:9b:56:0e:2f:36:82:
ec:b0:1e:3a:33:02:7e:2a:60:5f:ab:94:37:ef:d1:
50:ad:a0:da:6e:41:f8:31:a6:a4:e5:79:34:9e:5c:
7e:21:fc:e1:a7:a5:e7:a2:7d:2c:03:0a:08:79:77:
3d:6c:43:e6:85:cd:67:eb:73:4f:71:07:ae:ac:50:
02:ff:cb:1c:8c:c2:0d:3e:82:aa:43:e6:06:ca:11:
c0:cf:e9:3f:0e:45:f4:45:95:69:59:12:92:13:a8:
7a:cb:c5:bb:9f:a3:ee:2d:f4:cd:6a:26:05:ef:53:
bd:80:43:ed:13:9a:42:9a:07:1c:7b:33:73:fa:0e:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:B0:20:D1:A4:CD:DD:E9:14:AA:19:DE:F6:19:43:5C:39:61:58
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c8:e7:c7:97:d8:95:c9:1a:45:92:05:08:98:31:2d:91:64:
e5:4c:e8:b3:83:49:42:2c:9f:e4:b3:8b:d3:a3:3e:75:f1:99:
6d:d8:ab:a1:de:17:a7:ff:07:f7:2c:b8:14:aa:27:a5:c8:2d:
db:7f:6e:7d:c8:e0:a3:74:8f:07:ed:87:72:c5:b6:ae:56:96:
05:0f:72:ef:68:9e:33:e3:0a:ef:1a:0c:ac:84:c6:49:99:aa:
d2:c7:11:21:b7:fe:67:db:be:ca:19:05:ef:0a:ae:29:5d:28:
f8:a9:4d:d9:7d:25:43:8b:d7:7b:e5:5e:14:12:a3:ce:7c:5c:
03:05:7f:2a:a8:77:c5:c7:96:ee:81:a0:42:df:59:ad:12:c0:
47:46:4b:bf:c1:ca:93:90:f9:1a:9a:4a:99:e8:5e:58:ed:00:
6b:34:8b:fe:af:1c:35:fc:90:73:94:7f:77:89:9b:6d:10:05:
10:55:f8:2c:bf:06:47:18:61:89:77:89:2b:21:8d:d5:08:1e:
bf:c9:31:1c:8a:49:e8:2d:fb:05:9f:54:3a:36:b4:1b:80:c7:
a9:cd:36:51:6d:48:0a:fe:12:58:48:da:94:56:cf:7d:ce:ef:
8f:a1:49:72:cd:aa:51:cd:da:a1:8d:7f:e6:15:59:57:e3:3a:
1e:77:21:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM9l5MQIzV6KfyXH4KJObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTdlYjQ5MTk2ZGQyZTA2MDZkNTk3N2MyYjc0YjEwMWI3
OWJjMGIwHhcNMjYwMzAxMjEwMDI3WhcNMjYwMzAyMjEwMDI3WjAzMTEwLwYDVQQD
EyhjYzMzYjAyMGQxYTRjZGRkZTkxNGFhMTlkZWY2MTk0MzVjMzk2MTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJVUWdnfhLfE34BexfJ8Ig/X9SAA
XjBq/TOmqt6S1HdCY2Rn6UJ6vp7+rZLUvqAqxw1jx6yo78tbUatnBPZJAgqCHuka
l4NTUsDHMsSQbX+fbp709YhCGLNacziloD3Zh9pJH2+RDy1txEIOJPRlR6nRk3FW
2g+/MxLT1FpWApibVg4vNoLssB46MwJ+KmBfq5Q379FQraDabkH4Maak5Xk0nlx+
Ifzhp6Xnon0sAwoIeXc9bEPmhc1n63NPcQeurFAC/8scjMINPoKqQ+YGyhHAz+k/
DkX0RZVpWRKSE6h6y8W7n6PuLfTNaiYF71O9gEPtE5pCmgccezNz+g6ThwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwzsCDRpM3d6RSqGd72GUNcOWFYMB8GA1UdIwQY
MBaAFG9X60kZbdLgYG1Zd8K3SxAbebwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jN2JmNGEtZGE5Ny00YjViLTg3MTkt
MzdiM2UyNDRjMDYzLzEvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jN2JmNGEtZGE5Ny00YjViLTg3MTktMzdiM2UyNDRjMDYz
LzEvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8jnx5fY
lckaRZIFCJgxLZFk5Uzos4NJQiyf5LOL06M+dfGZbdirod4Xp/8H9yy4FKonpcgt
239ufcjgo3SPB+2HcsW2rlaWBQ9y72ieM+MK7xoMrITGSZmq0scRIbf+Z9u+yhkF
7wquKV0o+KlN2X0lQ4vXe+VeFBKjznxcAwV/Kqh3xceW7oGgQt9ZrRLAR0ZLv8HK
k5D5GppKmeheWO0AazSL/q8cNfyQc5R/d4mbbRAFEFX4LL8GRxhhiXeJKyGN1Qge
v8kxHIpJ6C37BZ9UOja0G4DHqc02UW1ICv4SWEjalFbPfc7vj6FJcs2qUc3aoY1/
5hVZV+M6HnchQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:09 2026 by rpki-client