Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: 7WtkAtKcigekeAavbs93krjZiW/IEOMwzM0zyDs0XKM=
Subject key identifier: 73:A4:C3:94:8A:56:E5:CD:BD:0D:82:D4:EC:FE:01:A9:4B:5A:7A:89
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019CAD5A44985C24C7E0C54EAAE1D5E0B3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0E22
Signing time: Mon 02 Mar 2026 07:01:39 +0000
Manifest this update: Mon 02 Mar 2026 07:01:39 +0000
Manifest next update: Tue 03 Mar 2026 07:01:39 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: 1YMoFaSazLmtZniTxhrMA9dLIcHCdEsA0GoBAn2WVOM=)
2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:44:98:5c:24:c7:e0:c5:4e:aa:e1:d5:e0:b3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Mar 2 07:01:39 2026 GMT
Not After : Mar 3 07:01:39 2026 GMT
Subject: CN=73a4c3948a56e5cdbd0d82d4ecfe01a94b5a7a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:af:4b:0e:2e:b6:1d:38:9d:2b:0b:46:86:
03:b7:1d:ec:bc:bd:bc:18:90:86:2a:1a:55:1c:e3:
c5:c8:a4:dd:1e:a2:9b:bb:43:ea:36:ed:40:2a:95:
8d:e9:41:72:61:af:95:d0:0e:e1:dc:b8:be:f2:e8:
e4:2b:d7:41:b8:48:39:a4:8a:31:05:82:0f:8d:88:
ca:26:36:d5:7d:41:23:d6:09:ca:59:90:59:70:cf:
c2:04:14:f3:1d:07:20:91:2f:27:0c:40:96:8c:3b:
b0:13:20:f7:39:b6:65:6b:ac:91:d1:be:f7:88:85:
65:39:3d:e2:89:bd:db:9d:f3:c6:d1:0c:c7:ef:86:
b5:fa:34:22:c1:30:6c:22:76:58:f5:2c:f9:09:95:
b6:dc:f5:16:4a:ae:07:3c:51:15:42:8a:e6:48:6c:
98:20:5c:49:2c:5c:fc:74:3c:2f:1b:b6:fd:e3:46:
bf:ce:67:99:a3:e7:1d:69:15:cf:a1:c9:9e:c5:f7:
80:0b:f0:9c:d4:b9:94:e8:13:c7:b9:b5:06:98:f6:
6f:21:12:13:d2:31:05:18:6e:39:07:6b:68:68:f6:
a8:17:6f:52:f6:53:2c:72:0f:33:b1:ae:74:8c:2d:
b4:fa:f8:34:2c:73:8a:79:4e:c5:21:fe:c4:29:97:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:C3:94:8A:56:E5:CD:BD:0D:82:D4:EC:FE:01:A9:4B:5A:7A:89
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:03:80:eb:6f:9d:54:15:05:97:a1:82:ad:23:15:eb:14:f7:
80:6a:65:fe:43:97:65:a6:54:7f:78:e5:f2:d7:dd:68:cd:77:
5b:d3:08:f5:82:0c:9b:42:42:dc:13:87:9d:61:f9:7b:7d:c2:
82:43:fd:47:d9:8b:88:26:55:10:5b:9f:95:95:bc:a0:9a:2b:
4b:21:f5:b1:60:14:2a:77:da:93:b3:8a:90:11:90:9e:cf:82:
f7:96:74:59:b9:2a:97:92:38:2d:dd:e8:ed:68:f3:36:12:9b:
b6:05:5c:8b:ae:85:ff:69:ab:20:7b:ba:a1:2c:ea:4d:9a:3a:
dc:7b:35:6f:ea:c6:68:6f:48:24:2b:d4:cc:87:3c:ad:9a:c2:
2a:f2:aa:e0:4d:cb:55:6d:e6:68:7a:db:63:1d:7d:07:d1:93:
8b:54:f1:bf:2c:df:44:c5:ad:1b:5c:79:53:92:d7:ca:1e:e8:
24:6f:b6:22:46:10:79:fa:4e:5e:e0:1b:66:f7:58:ca:29:ff:
92:ae:8e:58:b9:c2:4d:f2:22:25:fe:6e:89:21:77:60:51:02:
23:f4:fc:3a:84:d2:0c:0d:5e:76:23:79:97:7f:60:27:77:5c:
fc:d5:2c:f4:c0:89:41:31:1a:dc:9e:e9:db:49:b3:57:aa:e6:
95:27:13:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWkSYXCTH4MVOquHV4LO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjYwMzAyMDcwMTM5WhcNMjYwMzAzMDcwMTM5WjAzMTEwLwYDVQQD
Eyg3M2E0YzM5NDhhNTZlNWNkYmQwZDgyZDRlY2ZlMDFhOTRiNWE3YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUmvSw4uth04nSsLRoYDtx3svL28
GJCGKhpVHOPFyKTdHqKbu0PqNu1AKpWN6UFyYa+V0A7h3Li+8ujkK9dBuEg5pIox
BYIPjYjKJjbVfUEj1gnKWZBZcM/CBBTzHQcgkS8nDECWjDuwEyD3ObZla6yR0b73
iIVlOT3iib3bnfPG0QzH74a1+jQiwTBsInZY9Sz5CZW23PUWSq4HPFEVQormSGyY
IFxJLFz8dDwvG7b940a/zmeZo+cdaRXPocmexfeAC/Cc1LmU6BPHubUGmPZvIRIT
0jEFGG45B2toaPaoF29S9lMscg8zsa50jC20+vg0LHOKeU7FIf7EKZcNxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOkw5SKVuXNvQ2C1Oz+AalLWnqJMB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQOA62+d
VBUFl6GCrSMV6xT3gGpl/kOXZaZUf3jl8tfdaM13W9MI9YIMm0JC3BOHnWH5e33C
gkP9R9mLiCZVEFuflZW8oJorSyH1sWAUKnfak7OKkBGQns+C95Z0Wbkql5I4Ld3o
7WjzNhKbtgVci66F/2mrIHu6oSzqTZo63Hs1b+rGaG9IJCvUzIc8rZrCKvKq4E3L
VW3maHrbYx19B9GTi1TxvyzfRMWtG1x5U5LXyh7oJG+2IkYQefpOXuAbZvdYyin/
kq6OWLnCTfIiJf5uiSF3YFECI/T8OoTSDA1ediN5l39gJ3dc/NUs9MCJQTEa3J7p
20mzV6rmlScT9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:49 2026 by rpki-client