Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: segNog1G81b6vpuIeq6gBkOQ+5sHdonToQPiO1vbR2E=
Subject key identifier: 99:86:BE:B0:6C:25:D3:C3:1C:95:D0:15:8B:8C:82:D4:B7:69:22:13
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 01A0C88FEF10C0E24011CB6DF3E224535EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 1376
Signing time: Tue 22 Sep 2026 10:01:11 +0000
Manifest this update: Tue 22 Sep 2026 10:01:11 +0000
Manifest next update: Wed 23 Sep 2026 10:01:11 +0000
Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: Ztp/fPLvZc2rJn7FoSYiaaqxt0/uWnAzzgbtTZ02MP0=)
3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:ef:10:c0:e2:40:11:cb:6d:f3:e2:24:53:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Sep 22 10:01:11 2026 GMT
Not After : Sep 23 10:01:11 2026 GMT
Subject: CN=9986beb06c25d3c31c95d0158b8c82d4b7692213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:77:50:f7:77:e2:e4:89:d5:3e:ca:4a:f6:
97:37:2f:1b:c7:83:bf:e9:ba:9b:c1:a8:9c:10:04:
ed:c5:d4:f3:20:7a:24:b5:31:84:75:56:df:fd:c9:
ea:96:09:db:c0:9d:f5:37:f0:13:7d:80:ba:e8:aa:
58:45:26:6d:d5:d5:1f:c6:4f:c3:1c:35:3a:11:7d:
40:40:7b:7f:24:48:01:8b:97:db:e1:8e:80:38:3c:
38:a7:ab:ce:f2:5e:87:24:d3:48:d3:3f:97:41:cd:
3a:ba:5c:df:e9:30:fc:2a:20:d6:8c:38:8a:78:e7:
4d:8f:3d:18:28:ec:e7:d9:f0:ef:41:6a:2f:b7:ca:
de:c0:58:53:26:f3:9c:4b:1b:07:9e:3a:5c:f6:f1:
78:a2:bb:e7:87:07:be:1d:5d:1a:62:ed:b6:a2:a5:
03:76:ab:38:21:eb:af:90:8a:c7:27:3a:84:59:54:
54:a3:8c:ba:ef:19:ca:f7:9a:89:68:bf:e7:aa:19:
47:e7:b6:71:8d:d2:7d:ee:e3:37:05:d2:0b:31:bf:
ef:ff:b6:d1:5f:1d:32:1a:2b:26:05:49:05:24:98:
06:bd:ba:c9:0a:8c:72:54:2d:2b:92:9c:5e:b0:54:
48:85:3a:91:11:5b:91:46:19:88:89:c7:62:7f:d3:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:BE:B0:6C:25:D3:C3:1C:95:D0:15:8B:8C:82:D4:B7:69:22:13
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f9:d9:c0:23:63:28:59:c6:33:94:22:3c:ed:02:90:c0:2f:
04:86:62:91:37:8a:71:23:e7:2f:de:aa:28:56:d8:88:07:d9:
94:bc:3a:a2:93:ed:fe:95:2e:42:14:71:4c:65:7a:bc:8b:9b:
44:08:57:27:c4:80:64:fa:74:5b:a2:98:5c:ed:1e:34:d8:72:
a4:1b:e5:49:da:15:30:26:9b:56:af:80:ba:26:9f:53:ea:75:
ec:f3:90:af:87:65:16:3e:67:ea:2e:1e:8a:59:b1:fc:b6:14:
7e:0e:53:39:45:66:cd:db:4a:cd:01:02:d6:7b:65:42:3e:63:
76:81:b5:5a:ff:81:45:b4:ad:77:d3:a8:2b:ed:8e:f7:90:90:
79:f5:7b:25:9f:9c:0f:13:cd:dd:78:b0:06:ff:bf:40:15:de:
fd:20:7c:c8:3d:8d:91:55:3d:6e:04:8d:27:1b:9e:e1:41:56:
8d:ab:65:96:25:35:e7:b9:e9:e8:fb:e1:a2:3f:b2:0c:d9:aa:
e7:e7:8c:da:c1:22:39:e2:d4:dc:11:91:74:0c:5e:9f:14:79:
67:73:b4:f7:59:a0:44:e8:67:9c:f8:9e:18:ac:9f:5b:49:8a:
f9:9e:55:af:87:49:b6:d0:b6:05:63:f6:7a:8d:bc:8b:4d:84:
d4:7d:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:54:36 2026 by rpki-client