Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier: aWxeLUsF4dCaBx5FmBVn009ebLT6O/s+/4Yla9u2Yjw=
Subject key identifier: B8:76:A7:22:39:82:21:FE:19:39:5C:84:AF:C8:B5:33:28:25:F4:C7
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 019CA9EB2645789EAD12E24292531F2A9E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number: 0BC9
Signing time: Sun 01 Mar 2026 15:01:26 +0000
Manifest this update: Sun 01 Mar 2026 15:01:26 +0000
Manifest next update: Mon 02 Mar 2026 15:01:26 +0000
Files and hashes: 1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: JZg5YVNkhEw3t8CvWhr5Y1u3go/Eb7wLPvcB/6ttWDA=)
3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:26:45:78:9e:ad:12:e2:42:92:53:1f:2a:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Mar 1 15:01:26 2026 GMT
Not After : Mar 2 15:01:26 2026 GMT
Subject: CN=b876a722398221fe19395c84afc8b5332825f4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:0c:4f:f4:d6:ef:c6:27:6f:48:13:fe:30:
6b:ac:3b:91:f6:cf:6c:cd:1c:ba:57:9e:f5:2d:17:
c4:7c:0a:df:6a:9b:7d:f4:ee:da:00:7c:4f:46:7e:
1e:9d:95:c0:b6:3c:56:0c:8b:41:aa:30:db:60:f9:
05:ce:f9:1b:8d:26:da:b0:22:d1:1b:34:13:41:c8:
73:e6:dc:8d:1d:d4:3d:e5:67:3b:ea:ad:b7:6a:23:
35:54:61:ef:a6:8e:96:8a:4b:cb:ed:72:70:0d:2c:
a5:94:7c:85:f5:e8:21:6f:b6:0c:e4:6e:26:c7:b8:
d2:2f:28:af:54:5d:40:c6:88:32:88:50:f6:ee:ce:
d4:1b:97:1c:fe:1a:4e:0f:11:dc:02:9d:b6:df:a5:
f5:c7:fe:6c:bf:23:94:dc:a2:51:75:3d:4d:60:1b:
4a:0c:f3:6b:ab:4c:ab:08:91:64:df:12:ec:fb:5c:
4a:19:75:f1:60:d0:fd:a1:3a:66:64:ef:4b:df:0b:
f0:43:8c:2c:69:10:2a:59:7d:18:7f:df:32:ee:72:
68:56:f5:29:13:9b:52:46:e5:67:d2:88:e2:2b:71:
7c:8c:64:9b:5f:b5:f2:52:d7:b2:bb:b3:e8:11:6f:
1c:c5:5a:d2:cb:bf:c3:a9:56:e2:16:2f:06:2a:32:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:A7:22:39:82:21:FE:19:39:5C:84:AF:C8:B5:33:28:25:F4:C7
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:13:e0:92:41:74:ca:d1:4c:19:a7:97:d7:e9:23:ee:17:ec:
0d:bb:3c:47:07:0b:24:76:8e:16:62:7d:9b:10:fe:0d:14:93:
32:aa:6a:87:6c:ae:21:14:26:93:ae:12:1e:7b:fb:29:2e:8c:
e9:a0:ab:58:29:e4:f3:7b:8e:df:47:1b:99:f4:dd:aa:ca:dc:
8f:b3:1f:53:cb:19:a1:d9:a4:20:25:61:60:30:09:33:48:d3:
03:b9:7d:16:b1:0a:af:93:28:d7:19:4b:05:3a:86:53:43:f7:
d8:73:41:cd:1b:3b:5a:71:27:ef:a4:ea:47:ba:0b:b4:ec:8c:
74:1e:4c:5c:cb:10:22:51:21:93:e1:52:de:07:7c:22:20:a8:
fa:cd:8d:d6:bc:c0:af:bb:24:54:54:18:1b:20:34:87:05:8a:
20:e8:7a:8c:d5:21:44:c5:06:8a:bd:7d:61:23:9f:e1:fb:3d:
01:6c:09:88:e2:4f:7a:ff:38:c5:12:57:81:83:ef:34:42:3c:
43:da:1b:f2:3a:3a:a8:3c:af:9a:7c:25:16:1d:5e:3e:2c:ab:
e1:6a:97:9f:71:14:8d:f3:4f:7f:4c:e3:d9:fb:6e:b2:2c:c2:
f5:ce:08:0a:2a:ea:9e:9c:eb:12:c0:3f:72:f0:bd:1b:9f:84:
84:00:80:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6yZFeJ6tEuJCklMfKp43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My
MzgxZTIwHhcNMjYwMzAxMTUwMTI2WhcNMjYwMzAyMTUwMTI2WjAzMTEwLwYDVQQD
EyhiODc2YTcyMjM5ODIyMWZlMTkzOTVjODRhZmM4YjUzMzI4MjVmNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2kMT/TW78Ynb0gT/jBrrDuR9s9s
zRy6V571LRfEfArfapt99O7aAHxPRn4enZXAtjxWDItBqjDbYPkFzvkbjSbasCLR
GzQTQchz5tyNHdQ95Wc76q23aiM1VGHvpo6WikvL7XJwDSyllHyF9eghb7YM5G4m
x7jSLyivVF1AxogyiFD27s7UG5cc/hpODxHcAp2236X1x/5svyOU3KJRdT1NYBtK
DPNrq0yrCJFk3xLs+1xKGXXxYND9oTpmZO9L3wvwQ4wsaRAqWX0Yf98y7nJoVvUp
E5tSRuVn0ojiK3F8jGSbX7XyUteyu7PoEW8cxVrSy7/DqVbiFi8GKjKsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh2pyI5giH+GTlchK/ItTMoJfTHMB8GA1UdIwQY
MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt
Nzk3ZjRjYzRiNTAwLzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw
LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphPgkkF0
ytFMGaeX1+kj7hfsDbs8RwcLJHaOFmJ9mxD+DRSTMqpqh2yuIRQmk64SHnv7KS6M
6aCrWCnk83uO30cbmfTdqsrcj7MfU8sZodmkICVhYDAJM0jTA7l9FrEKr5Mo1xlL
BTqGU0P32HNBzRs7WnEn76TqR7oLtOyMdB5MXMsQIlEhk+FS3gd8IiCo+s2N1rzA
r7skVFQYGyA0hwWKIOh6jNUhRMUGir19YSOf4fs9AWwJiOJPev84xRJXgYPvNEI8
Q9ob8jo6qDyvmnwlFh1ePiyr4WqXn3EUjfNPf0zj2ftusizC9c4ICirqnpzrEsA/
cvC9G5+EhACA0w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:09 2026 by rpki-client