Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: U4bZR++TE3yPrUsaRObVdS+C4JC8l1TQt3BKyFi/PLo=
Subject key identifier: 64:A2:03:D7:95:5C:28:DC:48:CE:D2:F1:27:79:D7:71:3A:C6:EA:48
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019CAA217946E7F1B60B54243FAA3BF8DD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 1154
Signing time: Sun 01 Mar 2026 16:00:46 +0000
Manifest this update: Sun 01 Mar 2026 16:00:46 +0000
Manifest next update: Mon 02 Mar 2026 16:00:46 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: Ge8pEoi56zEfWFHbm+VweogYcL8bpYJCs9G0ZukuYbs=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:79:46:e7:f1:b6:0b:54:24:3f:aa:3b:f8:dd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Mar 1 16:00:46 2026 GMT
Not After : Mar 2 16:00:46 2026 GMT
Subject: CN=64a203d7955c28dc48ced2f12779d7713ac6ea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:86:75:59:88:03:a1:53:1c:3b:d4:a7:db:
8e:e0:48:a3:d3:b1:1e:ca:9d:fd:98:4a:3e:e4:a5:
a3:d8:bd:52:7d:49:ce:b7:46:df:d9:ef:40:b1:1b:
5a:3d:42:6d:36:b3:8c:59:61:0d:0d:a8:a9:6c:61:
d9:a9:ab:f5:b7:c4:5a:22:be:ed:c0:bb:c3:fc:92:
18:e4:78:7c:4c:60:8c:67:c7:3d:a6:4e:16:6a:de:
f9:c5:c5:aa:d3:19:0b:03:f6:91:e1:df:39:03:0e:
17:fa:b3:dc:96:94:e4:dd:e4:f0:a9:7c:88:17:81:
a5:ad:c0:26:e9:ab:06:4a:67:73:3e:3d:b5:e2:6d:
54:8b:02:dd:99:12:1f:4c:4b:ca:00:e0:06:4f:c0:
96:5a:48:1c:35:0e:72:ec:d6:6a:1e:21:46:dd:35:
58:2d:d8:68:88:17:f0:6c:a0:fe:24:8a:88:1e:19:
09:3c:b4:1f:db:6c:b0:5d:fa:db:5b:cf:c6:31:e1:
b8:98:b9:4e:69:a6:4d:97:22:2a:9d:ab:9a:5a:cf:
66:d8:8f:fa:a1:e2:13:0b:c1:95:20:2a:eb:a6:80:
1e:86:5e:15:d7:d9:62:ec:0f:88:ab:e8:e9:63:55:
82:1a:f6:29:29:de:79:a3:7f:12:2a:00:11:cb:30:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:03:D7:95:5C:28:DC:48:CE:D2:F1:27:79:D7:71:3A:C6:EA:48
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:79:ad:8d:9c:2a:f9:a0:e6:e5:97:bd:ab:e6:5e:65:92:
15:bc:a4:ee:52:ac:3b:13:17:60:eb:5a:6c:d1:38:5e:6f:32:
fd:91:8c:69:80:90:ec:6a:d8:4f:ae:c8:6f:49:4b:da:9a:3d:
b1:19:e0:b6:67:1c:03:de:b4:1e:d3:eb:cb:9f:4f:48:45:34:
59:e8:fc:b3:4e:73:c5:1a:46:1c:5a:3c:d6:61:f8:5d:f6:ce:
10:a8:59:77:ca:7a:46:9a:e9:45:ff:50:ea:5c:61:61:43:18:
ff:46:7e:11:a1:c2:6c:4c:e8:b6:76:02:9d:e9:ca:c8:60:ae:
50:81:89:cd:7b:69:1b:d2:ee:b2:2e:22:95:3d:85:ac:ec:2d:
38:a2:9a:1d:70:d5:eb:54:03:6d:89:66:69:1c:79:b6:86:4c:
7e:38:09:1f:e5:9c:c6:1a:ba:df:39:fd:7f:81:22:c2:39:be:
d0:a5:91:c8:17:fb:a4:89:1c:aa:53:62:7e:af:93:f3:4c:a5:
e0:c7:28:b3:b5:4e:eb:63:48:e2:78:24:00:bd:a0:4b:ab:32:
58:d2:f1:d8:c2:52:a0:17:ff:d9:27:3c:c6:15:f2:74:da:c8:
a3:bd:ad:4f:3a:e4:cb:87:03:c4:01:5e:46:bc:59:a0:06:ec:
58:de:83:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIXlG5/G2C1QkP6o7+N1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5
ZjdjZTcwHhcNMjYwMzAxMTYwMDQ2WhcNMjYwMzAyMTYwMDQ2WjAzMTEwLwYDVQQD
Eyg2NGEyMDNkNzk1NWMyOGRjNDhjZWQyZjEyNzc5ZDc3MTNhYzZlYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1CGdVmIA6FTHDvUp9uO4Eij07Ee
yp39mEo+5KWj2L1SfUnOt0bf2e9AsRtaPUJtNrOMWWENDaipbGHZqav1t8RaIr7t
wLvD/JIY5Hh8TGCMZ8c9pk4Wat75xcWq0xkLA/aR4d85Aw4X+rPclpTk3eTwqXyI
F4GlrcAm6asGSmdzPj214m1UiwLdmRIfTEvKAOAGT8CWWkgcNQ5y7NZqHiFG3TVY
LdhoiBfwbKD+JIqIHhkJPLQf22ywXfrbW8/GMeG4mLlOaaZNlyIqnauaWs9m2I/6
oeITC8GVICrrpoAehl4V19li7A+Iq+jpY1WCGvYpKd55o38SKgARyzDwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSiA9eVXCjcSM7S8Sd513E6xupIMB8GA1UdIwQY
MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt
MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk
LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXR5rY2c
Kvmg5uWXvavmXmWSFbyk7lKsOxMXYOtabNE4Xm8y/ZGMaYCQ7GrYT67Ib0lL2po9
sRngtmccA960HtPry59PSEU0Wej8s05zxRpGHFo81mH4XfbOEKhZd8p6RprpRf9Q
6lxhYUMY/0Z+EaHCbEzotnYCnenKyGCuUIGJzXtpG9Lusi4ilT2FrOwtOKKaHXDV
61QDbYlmaRx5toZMfjgJH+Wcxhq63zn9f4Eiwjm+0KWRyBf7pIkcqlNifq+T80yl
4Mcos7VO62NI4ngkAL2gS6syWNLx2MJSoBf/2Sc8xhXydNrIo72tTzrky4cDxAFe
RrxZoAbsWN6DZA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:06 2026 by rpki-client