Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: MyqifdSUQ5NGrlVtlIvmzJoRuIrVdqJFU8RTRRbRap4=
Subject key identifier: 61:03:D9:06:E9:6E:58:5F:2F:36:62:78:4B:B5:C9:6C:11:11:89:79
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 019CB05AEC395C8879EF2B3443A0591710B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 1049
Signing time: Mon 02 Mar 2026 21:01:14 +0000
Manifest this update: Mon 02 Mar 2026 21:01:14 +0000
Manifest next update: Tue 03 Mar 2026 21:01:14 +0000
Files and hashes: 1: R1-sQ-aIXEFJT-93CGHyULWdzGI.roa (hash: wTAnQ3p13dmuTH6bJb6Zb4Pwzwq21wLmg4ze6Go9HJA=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: 6F0UQ/MjkqICJbxcCaH2P5alSrV50cVGuLAdVedbWyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:ec:39:5c:88:79:ef:2b:34:43:a0:59:17:10:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Mar 2 21:01:14 2026 GMT
Not After : Mar 3 21:01:14 2026 GMT
Subject: CN=6103d906e96e585f2f3662784bb5c96c11118979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:86:00:65:28:af:b0:4b:0f:da:70:24:3e:
65:1b:88:fb:90:fa:73:27:8d:32:8e:03:b0:35:04:
d7:3e:7e:58:66:6c:fd:86:d4:b2:92:43:f7:e7:14:
45:b3:28:43:9a:56:74:ae:33:47:ae:79:41:68:a6:
23:f2:d2:87:2d:75:8e:a8:73:57:71:a5:c4:14:54:
b7:fe:77:4c:93:9f:95:86:c3:79:00:a6:32:96:10:
ca:c6:fc:48:1d:99:aa:2f:b3:4f:0a:80:9e:4c:c7:
d1:ec:19:85:94:17:03:73:d9:3c:16:bd:f5:13:a9:
97:90:a1:29:3f:91:17:c5:45:41:6a:78:19:e7:54:
48:48:e5:34:a3:1d:76:6b:39:e5:bc:57:3f:88:81:
09:46:3d:6e:ff:c1:85:66:7a:4c:ce:a8:fd:7d:06:
ef:32:51:42:5d:02:3f:7f:19:cf:4d:e7:4a:4a:3d:
88:a9:4c:2c:e4:33:2c:e9:0e:bb:81:9f:5d:05:b6:
da:41:62:e0:eb:dc:6a:3d:c6:da:45:4a:bb:01:aa:
28:97:bb:3a:d6:ca:82:61:19:af:c9:05:3d:f5:f9:
7c:db:1e:5c:d0:c5:8c:78:0a:ad:83:a9:6d:9d:f3:
d6:b7:39:ca:e7:56:41:01:af:ee:eb:6a:62:e4:bb:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:D9:06:E9:6E:58:5F:2F:36:62:78:4B:B5:C9:6C:11:11:89:79
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f6:07:d7:4f:25:ff:8f:a1:60:f2:60:4e:b0:98:89:23:0b:
81:eb:6a:98:a4:ba:98:b7:f2:a6:3c:da:36:af:e2:af:eb:ec:
5e:4e:a6:60:6b:1c:2f:af:5e:2e:22:f0:25:ff:2a:d8:67:e1:
56:a7:8c:ee:55:c9:80:17:10:39:e6:2e:6b:30:b0:ef:1c:1b:
7d:11:ee:31:b6:b7:c7:be:cc:3d:61:e1:6b:bb:89:2b:da:20:
98:92:ae:c3:da:2e:51:8d:46:15:4d:93:a9:80:42:6d:f2:51:
26:b5:cb:8d:8b:d9:3a:52:05:23:ef:4d:ce:f1:3c:1e:d5:c7:
fb:26:a8:7e:7c:79:3b:77:2b:a4:b9:bc:6a:fd:5b:a5:cb:d5:
92:cd:c4:6f:aa:3c:4b:15:a6:59:4d:ad:ae:f3:66:91:8d:ad:
c6:ed:6e:76:6a:19:22:c6:e8:57:83:67:15:3a:9c:a6:40:70:
67:65:94:55:db:50:10:9f:32:cb:ca:2a:fa:af:21:3e:e4:c1:
63:77:40:6f:6c:55:fa:30:c0:ed:95:e9:67:f0:4c:d7:64:57:
68:b5:26:0e:1c:ee:eb:5a:7e:e7:1f:53:29:ce:5b:63:45:d7:
9a:fc:97:00:46:62:e8:9c:a1:37:25:75:b4:23:97:9d:d7:8d:
55:53:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:57:52 2026 by rpki-client