Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: vxrftaIYYn3Y/bCaWuHC+QU+3MHbsJGHnwxksJU7qYw=
Subject key identifier: 0B:CA:F4:2E:A8:87:D2:2F:36:38:51:02:04:05:91:EA:60:1D:F2:04
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 019CAAC63032F0C4CEDD5ABAC85301EF03EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 0B9F
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: ayUQJpGfU9UJ4P5nCzYmM0TgRJr2A46LiNt2kKJNtBk=)
2: m-qku06qLY3rNaPKQ1zTMaIhHCk.roa (hash: P9Yy6mUhYd/ctFDm/ApbuzO2/tM/hkjnZVv/yiJ9K9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:30:32:f0:c4:ce:dd:5a:ba:c8:53:01:ef:03:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=0bcaf42ea887d22f36385102040591ea601df204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:fe:49:28:3e:b1:5c:b8:7d:13:30:f2:57:
06:10:2a:2b:2f:08:92:5c:d8:bb:81:d2:03:69:6c:
b0:82:bf:64:5e:b9:0c:9a:a7:20:e0:a0:40:dd:df:
1e:43:01:9d:03:2a:7c:68:26:fe:6d:fc:06:9e:af:
3a:f8:db:bf:11:36:89:83:b4:70:db:bc:6f:36:77:
c6:41:1d:0b:91:d8:56:ed:44:34:c1:29:26:e1:07:
48:d7:73:0d:cc:ed:09:1b:17:d2:0d:fb:d0:d7:c7:
b0:9e:3b:d6:ac:10:30:05:1c:40:33:88:38:14:2f:
ae:68:2d:72:fd:d8:a3:ad:95:cc:86:eb:ba:ba:a7:
5c:b8:99:e7:d9:07:56:3e:17:d1:3d:8c:1f:03:98:
3a:53:28:6b:79:91:1a:35:4c:f0:f1:2b:cc:2b:c4:
f6:62:10:38:74:55:39:8a:67:b7:6b:3a:64:7d:cd:
5d:0f:de:8f:d8:79:2f:61:a8:c3:9a:6b:e9:55:54:
12:8c:fb:95:31:ed:6c:47:d7:7a:cb:58:03:d5:16:
62:a1:67:43:65:29:3f:ef:38:e4:db:2e:73:c0:0c:
2c:0b:58:37:a7:8f:d6:50:7d:f3:76:2e:04:ea:d3:
c2:80:b9:32:f7:c0:48:e2:29:9e:d1:90:1a:e3:9e:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CA:F4:2E:A8:87:D2:2F:36:38:51:02:04:05:91:EA:60:1D:F2:04
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:9a:42:a0:cb:c9:bc:76:73:c4:06:e0:f3:93:94:b1:61:18:
a2:9d:dc:a3:b2:aa:bc:35:6f:ad:95:09:61:0d:df:d2:84:58:
df:15:be:35:19:4d:11:67:a7:c0:9c:df:e7:13:79:67:61:41:
7e:ca:aa:e2:36:e1:27:d8:67:bc:b8:f6:bd:75:43:ca:b0:b1:
e0:e0:76:01:eb:3b:7f:a5:b0:ff:6a:37:78:c0:07:44:37:99:
da:de:1a:f2:0b:34:e3:74:e3:73:0d:a9:a3:62:d5:6c:22:86:
6f:92:18:ed:0b:eb:77:35:ce:a1:85:c0:43:fc:bc:a8:70:59:
b5:56:0a:60:d1:3e:cc:ad:37:61:2e:e1:0b:4b:8e:c2:93:00:
62:80:56:76:33:a2:f7:5a:0e:23:f4:2e:35:16:f5:de:92:c9:
ea:a0:a6:8c:0f:0d:16:f1:66:ec:05:7d:b4:f1:46:4d:14:b9:
25:41:c0:ac:8b:9f:da:fb:be:18:bf:76:33:22:07:75:9c:42:
ac:36:ff:7b:ef:a5:a5:1c:75:46:fe:8f:ac:e5:77:2d:24:c2:
51:bc:af:02:34:ba:19:04:86:ff:ff:e6:8c:96:ad:58:db:99:
21:87:d4:17:23:9b:4b:06:ab:44:5b:32:2a:fe:6b:f8:e0:d7:
dc:9c:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:00 2026 by rpki-client