Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier: ntNaElO4EQw+XgmatV9n2N2W4/uGx94lvsmo0yW6fog=
Subject key identifier: 8C:F3:0A:B0:F1:78:32:B5:E8:6D:AB:9A:5C:39:BF:94:38:A7:51:A4
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 019CADC796303CE1418D99927AF287CC4B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number: 08BD
Signing time: Mon 02 Mar 2026 09:01:04 +0000
Manifest this update: Mon 02 Mar 2026 09:01:04 +0000
Manifest next update: Tue 03 Mar 2026 09:01:04 +0000
Files and hashes: 1: 4rvg74R2gZlKQSt9MtPUhs19Sxs.roa (hash: aa4t3U7R1vbR/QCIG7/Vzi9UpwOLBuhEx3X56aBs6+Y=)
2: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: OWNku93NSpJLqqXezqhbqZjXyHAg4TP/tJNF5oUqw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:96:30:3c:e1:41:8d:99:92:7a:f2:87:cc:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Mar 2 09:01:04 2026 GMT
Not After : Mar 3 09:01:04 2026 GMT
Subject: CN=8cf30ab0f17832b5e86dab9a5c39bf9438a751a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:e0:74:82:28:5c:a0:bf:cb:9d:81:41:a1:
24:f5:99:13:2c:24:e4:b3:54:e2:97:98:1a:94:fe:
a8:ab:ad:c8:77:d4:d8:69:23:74:34:0d:38:45:14:
ca:91:e6:d6:97:c1:84:7a:2b:1f:99:70:72:79:b4:
39:37:f1:16:c4:0d:0e:63:27:08:f2:72:63:52:f1:
05:a1:18:ab:73:ab:de:1b:f3:9d:ba:70:41:23:9c:
11:95:9b:a1:19:63:ec:77:4a:fb:01:1a:c7:c7:f9:
e5:20:36:ca:9a:02:d7:86:f6:4b:b6:25:d1:b4:98:
26:90:70:4f:19:87:7e:70:7a:6a:71:f6:6b:68:04:
e1:09:de:9e:be:05:84:54:13:9a:3e:05:37:85:bc:
2e:71:c9:35:e4:4b:ae:40:c8:90:67:a0:30:32:8e:
fd:b2:1e:75:c6:a5:16:49:7c:65:30:56:ec:62:c0:
62:5b:d9:12:05:00:d3:92:8c:48:9d:42:30:e8:16:
0d:28:dd:9e:d2:ce:0f:26:84:e5:9f:2d:d6:f8:4b:
ca:f3:75:f0:09:38:0a:e6:be:bb:f9:09:1e:80:d2:
a8:cc:58:83:b7:78:75:15:42:fd:e0:ec:b0:7e:ad:
8c:79:57:d3:7a:9e:d8:9d:f5:40:93:ee:94:a4:c5:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F3:0A:B0:F1:78:32:B5:E8:6D:AB:9A:5C:39:BF:94:38:A7:51:A4
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:52:ac:8a:55:03:24:e1:5a:6e:e3:aa:89:af:ec:a1:9c:d7:
3c:68:7a:62:82:56:08:ee:3f:dc:d0:ab:e1:4b:9b:07:3e:a3:
4d:28:a7:58:98:09:e8:dc:77:3e:d9:32:bf:2e:ed:33:28:90:
a5:55:dd:c4:7c:8b:7b:f0:fc:91:cb:fe:9f:b4:93:e6:1d:a9:
92:00:02:e9:17:57:02:f5:2f:e4:e6:53:30:f1:54:48:24:a3:
c8:51:73:00:06:8e:a9:3e:bd:6f:2f:d4:74:a4:28:47:98:a9:
f6:ea:90:3f:b3:69:e4:f2:28:8e:d1:7e:a2:5e:49:03:7d:c8:
2b:9a:83:26:0d:fc:ac:3c:d6:2e:73:41:61:da:3b:e7:7a:24:
7f:43:ba:9e:9e:69:4d:23:6e:f5:bc:b5:1a:20:33:da:21:0f:
35:79:36:e5:f2:e2:e6:0f:e8:a5:98:ac:ea:99:6a:c6:a1:3a:
67:01:6d:0f:8c:bc:b1:20:95:e1:9b:ca:59:24:bd:8a:c4:fc:
0d:df:fc:2f:0f:a6:5a:d0:8e:57:a1:c8:95:ce:61:81:34:57:
24:96:9f:7f:87:e2:24:cd:b6:8f:c5:1b:9e:5f:14:c9:81:2c:
14:69:c0:0b:b8:06:0d:4e:0a:47:ad:53:c8:2f:6d:bd:f5:90:
d1:8f:c6:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx5YwPOFBjZmSevKHzEtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDlhYjA3NTFmZWE0YjI5MmE5YWZkMTRkYmVjM2I4M2Ew
Nzc4NzAwHhcNMjYwMzAyMDkwMTA0WhcNMjYwMzAzMDkwMTA0WjAzMTEwLwYDVQQD
Eyg4Y2YzMGFiMGYxNzgzMmI1ZTg2ZGFiOWE1YzM5YmY5NDM4YTc1MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTDgdIIoXKC/y52BQaEk9ZkTLCTk
s1Til5galP6oq63Id9TYaSN0NA04RRTKkebWl8GEeisfmXByebQ5N/EWxA0OYycI
8nJjUvEFoRirc6veG/OdunBBI5wRlZuhGWPsd0r7ARrHx/nlIDbKmgLXhvZLtiXR
tJgmkHBPGYd+cHpqcfZraAThCd6evgWEVBOaPgU3hbwucck15EuuQMiQZ6AwMo79
sh51xqUWSXxlMFbsYsBiW9kSBQDTkoxInUIw6BYNKN2e0s4PJoTlny3W+EvK83Xw
CTgK5r67+QkegNKozFiDt3h1FUL94Oywfq2MeVfTep7YnfVAk+6UpMUHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzzCrDxeDK16G2rmlw5v5Q4p1GkMB8GA1UdIwQY
MBaAFGwJqwdR/qSykqmv0U2+w7g6B3hwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEt
NDQ5NzNhNjAyZDlmLzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEtNDQ5NzNhNjAyZDlm
LzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVKsilUD
JOFabuOqia/soZzXPGh6YoJWCO4/3NCr4UubBz6jTSinWJgJ6Nx3Ptkyvy7tMyiQ
pVXdxHyLe/D8kcv+n7ST5h2pkgAC6RdXAvUv5OZTMPFUSCSjyFFzAAaOqT69by/U
dKQoR5ip9uqQP7Np5PIojtF+ol5JA33IK5qDJg38rDzWLnNBYdo753okf0O6np5p
TSNu9by1GiAz2iEPNXk25fLi5g/opZis6plqxqE6ZwFtD4y8sSCV4ZvKWSS9isT8
Dd/8Lw+mWtCOV6HIlc5hgTRXJJaff4fiJM22j8Ubnl8UyYEsFGnAC7gGDU4KR61T
yC9tvfWQ0Y/GJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:32 2026 by rpki-client