Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier: EeiV+tugHXjB1mrV6OLJeh4AI5fd2068rOTDSxzSPds=
Subject key identifier: C0:10:5B:3D:C4:1A:7D:16:55:E4:0D:AE:FD:72:73:10:3B:B2:0B:21
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 019CB136550597120BF0F66C950FEBCD0181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number: 0265
Signing time: Tue 03 Mar 2026 01:00:53 +0000
Manifest this update: Tue 03 Mar 2026 01:00:53 +0000
Manifest next update: Wed 04 Mar 2026 01:00:53 +0000
Files and hashes: 1: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: 3ZrEO7oTcmc9QFIUfllEF12PV4b62Ww8wPCASmFVBG4=)
2: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (hash: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:55:05:97:12:0b:f0:f6:6c:95:0f:eb:cd:01:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Mar 3 01:00:53 2026 GMT
Not After : Mar 4 01:00:53 2026 GMT
Subject: CN=c0105b3dc41a7d1655e40daefd7273103bb20b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:c9:a7:5c:c4:00:9b:b4:cd:c2:7f:88:73:
ce:c0:b7:83:00:48:69:a5:49:0f:3f:ed:1b:ef:aa:
55:9f:3b:76:6c:d8:34:24:e2:04:24:08:b6:a8:f6:
71:74:27:93:7f:09:d0:e6:4a:4a:c4:ae:16:a5:ab:
30:61:78:70:3a:de:07:2f:9b:c9:93:e9:79:7f:83:
7f:20:5c:dc:e5:01:29:91:40:9c:a7:28:fe:96:d7:
53:06:56:ab:62:f6:db:6b:65:aa:f1:c8:2d:40:17:
28:a4:5d:c5:c8:d2:ae:8e:a8:b7:c4:52:45:ed:73:
ea:f1:a8:3e:06:f0:01:9f:74:2c:9f:00:38:09:2d:
c8:58:a9:97:99:f1:77:b8:14:15:e5:f8:ea:ec:61:
93:3e:e4:29:75:64:b8:35:a9:85:a0:95:4b:1a:0c:
34:51:95:d6:4f:73:66:95:c4:27:3d:5f:17:6a:1a:
16:bf:8f:f2:b9:a5:d7:e4:b4:03:52:fe:ad:85:0e:
42:e4:e5:4d:ae:f0:c1:84:cf:a2:fa:be:5b:5c:59:
b2:dc:a4:9f:34:b0:f7:46:94:ba:52:67:dd:63:05:
fd:f1:6e:a0:29:7d:f7:dc:62:c6:69:5b:db:c8:bc:
77:70:22:7b:f8:d5:fd:ff:57:ba:50:f2:aa:8f:56:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:5B:3D:C4:1A:7D:16:55:E4:0D:AE:FD:72:73:10:3B:B2:0B:21
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:47:e9:64:30:32:06:26:1c:94:58:68:63:cd:6e:7c:9c:ea:
eb:6e:b5:84:05:fd:3e:2b:22:09:1e:6f:a5:ce:2b:19:b4:43:
d4:25:89:17:53:f8:83:b9:0a:b8:9a:68:18:25:6a:aa:70:2c:
ab:0a:f5:dd:41:34:61:4a:d7:34:78:96:3c:04:de:a8:aa:85:
2e:54:34:29:b1:69:03:76:a2:02:e9:46:e3:23:5b:67:f1:4c:
d0:e6:87:53:07:95:b6:43:02:f1:95:84:ac:aa:ef:ad:3c:ca:
81:ca:cf:d3:59:33:5f:d9:5d:a2:f1:7d:60:17:39:0e:8d:80:
40:3a:0c:02:a1:54:44:7c:30:a6:07:37:20:48:5d:92:ef:96:
2c:c0:c7:0a:eb:58:dc:30:c3:b5:8f:32:90:11:ec:ba:03:be:
46:3e:bf:cf:d2:27:6c:81:ba:9d:dc:c2:87:4a:e9:9f:f6:9c:
1c:87:32:e1:d4:27:16:38:69:24:11:0e:8a:56:29:61:33:48:
34:bd:08:dd:70:04:00:b7:ef:d8:94:04:a0:c6:20:d7:a8:e0:
b3:58:9b:ac:8f:c8:3a:c2:4b:3a:a9:5c:be:27:79:b9:59:5f:
5c:2a:ab:98:94:15:db:5d:7f:e2:52:a2:ab:9b:b2:ef:df:33:
6a:fe:9c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyxNlUFlxIL8PZslQ/rzQGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdkMDZkMTRiYTRlMjc4MDk3ZjM1YTgwYzcxNTY4NGNh
YzI2NjEwHhcNMjYwMzAzMDEwMDUzWhcNMjYwMzA0MDEwMDUzWjAzMTEwLwYDVQQD
EyhjMDEwNWIzZGM0MWE3ZDE2NTVlNDBkYWVmZDcyNzMxMDNiYjIwYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9zJp1zEAJu0zcJ/iHPOwLeDAEhp
pUkPP+0b76pVnzt2bNg0JOIEJAi2qPZxdCeTfwnQ5kpKxK4WpaswYXhwOt4HL5vJ
k+l5f4N/IFzc5QEpkUCcpyj+ltdTBlarYvbba2Wq8cgtQBcopF3FyNKujqi3xFJF
7XPq8ag+BvABn3QsnwA4CS3IWKmXmfF3uBQV5fjq7GGTPuQpdWS4NamFoJVLGgw0
UZXWT3NmlcQnPV8XahoWv4/yuaXX5LQDUv6thQ5C5OVNrvDBhM+i+r5bXFmy3KSf
NLD3RpS6UmfdYwX98W6gKX333GLGaVvbyLx3cCJ7+NX9/1e6UPKqj1a+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAQWz3EGn0WVeQNrv1ycxA7sgshMB8GA1UdIwQY
MBaAFAdH0G0Uuk4ngJfzWoDHFWhMrCZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEt
MGQxY2JmY2QzYmMwLzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEtMGQxY2JmY2QzYmMw
LzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUfpZDAy
BiYclFhoY81ufJzq6261hAX9PisiCR5vpc4rGbRD1CWJF1P4g7kKuJpoGCVqqnAs
qwr13UE0YUrXNHiWPATeqKqFLlQ0KbFpA3aiAulG4yNbZ/FM0OaHUweVtkMC8ZWE
rKrvrTzKgcrP01kzX9ldovF9YBc5Do2AQDoMAqFURHwwpgc3IEhdku+WLMDHCutY
3DDDtY8ykBHsugO+Rj6/z9InbIG6ndzCh0rpn/acHIcy4dQnFjhpJBEOilYpYTNI
NL0I3XAEALfv2JQEoMYg16jgs1ibrI/IOsJLOqlcvid5uVlfXCqrmJQV211/4lKi
q5uy798zav6cDg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:35 2026 by rpki-client