Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File: b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier: vAA3m9yx+qVTeb4KeSZE5f3Ist3oS0qy4Pd1WlePdrs=
Subject key identifier: 04:39:CA:DB:1B:D3:68:23:E1:A3:2B:07:70:CB:8F:B2:3B:88:B3:7B
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial: 019CAD2240E4099F1A176ACC8D21EA19C50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number: 0396
Signing time: Mon 02 Mar 2026 06:00:28 +0000
Manifest this update: Mon 02 Mar 2026 06:00:28 +0000
Manifest next update: Tue 03 Mar 2026 06:00:28 +0000
Files and hashes: 1: Qiay74MbBLJX0CXXaOcyKRwu1oE.roa (hash: kahuToIQXEZrrTaByaYWat/npZL3xVVcTJ88XatdcNg=)
2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: qj+Q1rj7l2KBg8ADn2Vrc6k1hlEDXYsf1Xdh/orUoRw=)
3: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (hash: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:40:e4:09:9f:1a:17:6a:cc:8d:21:ea:19:c5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Validity
Not Before: Mar 2 06:00:28 2026 GMT
Not After : Mar 3 06:00:28 2026 GMT
Subject: CN=0439cadb1bd36823e1a32b0770cb8fb23b88b37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:f8:21:95:c9:d5:19:3b:8e:1e:a1:3c:5d:
19:94:11:2e:dd:15:51:42:80:48:2c:d1:21:50:14:
df:da:03:ae:31:4f:f1:e8:5e:a3:bd:00:60:0b:5b:
5b:9a:79:c9:3c:90:8f:25:58:f1:b1:29:8c:24:59:
07:ea:ab:7b:24:0c:9a:fe:49:eb:00:ac:c4:0a:15:
c8:31:0c:14:8e:e9:a6:87:ac:80:63:0b:c3:46:a8:
4f:40:2a:71:16:fb:73:f1:31:f6:6e:5f:97:42:ea:
57:02:7b:17:da:2e:04:a3:74:02:59:1f:8f:39:5f:
52:6e:20:10:de:eb:fc:05:91:a9:ab:d5:f0:1d:b0:
c3:24:75:b4:93:1b:7b:3e:3b:d7:b8:2d:59:46:7d:
23:fd:05:b0:a8:f4:bc:1c:17:d7:bc:35:7b:e8:63:
56:4f:a7:bd:5f:c1:aa:12:f0:b9:67:f2:bf:e7:6a:
67:df:a0:97:4e:3e:fe:15:36:ab:50:11:a3:af:6d:
d8:3b:9f:f5:92:37:83:4a:e4:b2:b2:2a:0b:45:05:
d6:e8:d0:24:18:71:0c:8e:e6:8b:c4:18:2d:b3:75:
46:fb:07:98:e9:c1:88:a9:b8:62:90:b9:e8:f1:08:
f8:6b:b8:ff:45:11:3b:5d:8a:ef:16:79:1f:aa:71:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:CA:DB:1B:D3:68:23:E1:A3:2B:07:70:CB:8F:B2:3B:88:B3:7B
X509v3 Authority Key Identifier:
keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f7:b3:63:dd:0f:b6:a3:30:e8:aa:76:35:d0:dd:f8:aa:80:
86:25:a6:be:da:cb:92:7a:98:45:c7:6f:e3:33:23:0a:3e:30:
0c:c8:00:25:82:80:a3:94:cd:5c:09:0c:5e:07:aa:2d:46:a3:
3c:76:c5:3e:7e:12:d8:b0:f7:21:05:cc:f0:15:32:7a:79:e7:
ff:89:be:12:20:29:97:3d:36:4e:77:2b:ae:19:f0:24:fc:d0:
ce:ab:aa:86:cd:c5:21:8e:54:7f:2b:60:47:32:dc:c6:2c:13:
bd:02:c5:50:bf:c5:78:f0:58:49:ee:c2:93:61:d2:0b:05:31:
aa:39:e1:88:a5:d7:2c:97:6a:92:01:bf:40:2c:2d:de:4c:61:
83:c5:5a:27:e4:0d:f6:cf:d6:83:97:7d:90:fa:97:58:7e:c8:
93:d0:08:6d:0e:16:f4:77:f5:08:5d:eb:ce:01:ec:5a:4a:4d:
65:19:7a:54:f0:03:85:af:15:83:18:d6:9d:63:96:46:91:95:
67:09:34:7f:1f:6b:72:84:c6:d7:2b:34:63:b8:58:20:4e:82:
b7:c0:42:58:fe:6f:9c:f7:ad:ef:c8:6a:c7:db:d4:54:8e:2c:
85:17:98:47:38:93:3f:a3:fe:28:58:04:07:56:f1:52:f9:99:
d1:45:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:52 2026 by rpki-client