Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: zBVGErxL770ZVfCMrpEgktU8dLSyQp/ASPom+nZovZQ=
Subject key identifier: 65:3C:E1:96:C7:01:4E:DB:00:92:93:2F:23:BE:11:3E:64:8C:38:FF
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019D9999669E0B3B5F3DA42FC555CE9F059E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 11D0
Signing time: Fri 17 Apr 2026 04:01:00 +0000
Manifest this update: Fri 17 Apr 2026 04:01:00 +0000
Manifest next update: Sat 18 Apr 2026 04:01:00 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: ZrFKd33rUe6cPurFZ3xfO+qL4pW8EwECnUOGFMOaUz4=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:66:9e:0b:3b:5f:3d:a4:2f:c5:55:ce:9f:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Apr 17 04:01:00 2026 GMT
Not After : Apr 18 04:01:00 2026 GMT
Subject: CN=653ce196c7014edb0092932f23be113e648c38ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:e3:9d:60:4e:dd:fa:ab:c5:dd:e2:4e:30:
63:da:9c:8e:10:16:83:ce:2e:72:40:2d:3d:17:5e:
ac:e9:a4:ed:00:1c:e9:d3:bb:02:ee:ed:fa:03:cb:
ec:16:24:7a:fa:76:f8:6c:e4:96:e6:ad:85:21:02:
88:93:6d:61:28:05:46:c0:b4:13:c3:ba:60:f6:cf:
48:73:cd:66:d5:34:9b:f0:e6:c4:79:54:3d:47:77:
c5:c7:49:4c:e6:32:80:e6:5b:5d:80:45:31:2f:36:
16:e5:85:c3:97:02:41:6d:d0:a3:54:dc:ea:36:ca:
33:ba:32:5e:eb:ac:cc:f3:51:07:06:1a:5f:b0:1b:
39:50:ae:70:8c:6a:73:52:18:9d:b5:90:b2:bb:5e:
58:e2:bc:f8:6d:89:de:ec:c2:db:da:d2:b5:30:c1:
d1:81:9c:78:23:53:ae:5e:b9:a5:13:e3:b4:ea:96:
8f:f1:2a:07:8c:94:07:b4:07:66:ac:1f:53:f3:96:
61:c6:4b:26:95:38:12:d2:f9:66:bf:91:09:0f:31:
83:c3:33:62:26:9d:88:e5:be:45:3a:2e:ca:d8:a4:
bd:57:17:f2:3f:9c:49:99:34:eb:ce:fb:05:d4:cb:
eb:ec:dd:d3:05:fc:22:ec:d8:d4:13:16:ff:99:db:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:E1:96:C7:01:4E:DB:00:92:93:2F:23:BE:11:3E:64:8C:38:FF
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:73:aa:ad:cc:8e:b4:df:aa:d9:10:97:b9:58:89:7d:19:
d4:3b:90:80:c7:73:51:1c:26:cc:12:c3:b6:4b:48:7b:83:f8:
c9:e4:4d:52:5b:72:df:9a:46:0a:8a:2a:7c:f5:35:f9:e2:06:
22:9c:81:6e:8d:01:36:6d:19:22:6a:eb:4f:18:89:dd:be:32:
2f:65:05:94:97:68:0f:35:88:ed:94:22:1b:73:49:54:06:02:
1a:7b:9e:76:02:99:ae:16:4c:87:64:92:26:14:d3:9b:ae:ce:
d0:9e:15:88:be:a8:c3:3e:22:64:59:ce:49:b7:ff:23:14:9a:
25:a6:a6:51:56:23:c3:26:72:49:c1:a3:98:10:4c:83:a0:d5:
e5:04:4e:48:81:40:89:bf:cd:5a:ec:8e:84:29:7e:d4:ff:26:
ee:56:d2:ef:8e:0e:31:29:42:7f:6a:96:d6:81:7e:05:e6:22:
ba:67:4a:16:f2:45:bf:48:40:ac:0f:45:b6:61:30:b0:48:cc:
c4:4d:84:60:3d:8a:b9:ec:66:72:91:85:ea:4d:96:0a:36:b6:
b7:87:44:e8:aa:32:65:63:e0:c7:3a:66:5e:d8:09:04:fd:be:
3d:94:f6:1d:91:d3:07:d9:d2:ad:e9:fa:f5:92:35:4c:6b:7e:
85:5a:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:22 2026 by rpki-client