Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File: rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier: ABDoCa623ZvYfQwaGRc4tpIiDl0lbOtLVWLNXWm+KLY=
Subject key identifier: D8:22:65:19:F2:7E:14:1A:A6:60:8E:60:1D:F4:23:38:24:8F:1D:C7
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial: 019CA9EB5BA72FADB6A9A5CC72C1CEDEE65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number: 0BEE
Signing time: Sun 01 Mar 2026 15:01:39 +0000
Manifest this update: Sun 01 Mar 2026 15:01:39 +0000
Manifest next update: Mon 02 Mar 2026 15:01:39 +0000
Files and hashes: 1: mfv_sdF7JkrnlQLBP04nKDAckMY.roa (hash: buDLKj8SbGldH/UZVSAAKpuobU5YXqMLtN+FcDKjF3E=)
2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: 9HFBv4LQLdiKbSpYi4opjQzS5/9m6rrVs0KQ3R62dP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:5b:a7:2f:ad:b6:a9:a5:cc:72:c1:ce:de:e6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Validity
Not Before: Mar 1 15:01:39 2026 GMT
Not After : Mar 2 15:01:39 2026 GMT
Subject: CN=d8226519f27e141aa6608e601df42338248f1dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:3d:a2:e3:55:a7:6b:9c:05:78:c6:ac:e5:
1f:c3:6d:6e:70:0c:86:f8:3a:10:fc:44:75:23:be:
37:ea:23:19:a1:ad:ee:1f:3b:11:55:6a:fb:48:65:
53:5b:a8:25:6a:41:6d:5d:86:24:4e:b6:31:73:f9:
42:ae:53:2f:8a:70:4b:29:32:bd:30:a0:9b:d7:fb:
d6:9a:5a:29:8f:29:d0:b9:ed:23:90:80:4a:71:54:
d1:51:2d:b1:2b:82:1f:4b:b8:bf:bf:43:9d:2b:ab:
93:37:42:46:cc:e7:66:a3:b4:49:1e:22:f3:3c:2c:
67:5c:d3:90:e9:38:0d:bb:af:ef:10:49:7d:3b:12:
93:b0:29:cd:15:b1:8d:35:60:f5:5f:51:4f:85:8c:
ef:a5:dd:90:08:e5:80:b1:58:79:dc:16:3b:19:c9:
5f:81:83:a1:17:a4:e9:a3:df:6d:9e:fb:cb:77:9b:
69:3d:bb:94:d2:ac:a2:43:00:5a:24:d0:cb:fa:55:
3f:ac:e5:2b:19:fe:72:44:a7:40:10:ce:cb:a4:ef:
6a:e9:6d:60:20:33:4c:e6:b2:4d:41:e3:26:ff:cc:
63:2b:43:d2:37:81:ff:af:a9:8f:4b:20:25:bc:ad:
7e:86:72:f7:56:0d:bc:0f:88:2a:37:84:76:2b:bd:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:65:19:F2:7E:14:1A:A6:60:8E:60:1D:F4:23:38:24:8F:1D:C7
X509v3 Authority Key Identifier:
keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f6:4d:de:74:cb:18:9c:7e:80:9a:68:5c:e1:0e:69:04:ff:
5a:bc:e2:df:44:d7:6e:ce:29:15:41:cf:58:d5:d7:9f:a8:c6:
14:da:ce:1e:0b:1c:a0:50:5c:18:a0:f9:84:14:0d:77:a5:0f:
c8:fc:18:2d:e8:36:df:10:84:99:6c:fe:2e:f9:5f:13:cf:66:
1d:eb:d0:65:13:79:f3:24:00:5f:a8:bc:3d:af:c7:38:db:03:
a8:cc:da:1d:ba:42:60:b0:dd:df:34:2d:eb:d7:66:20:88:89:
f4:56:64:a3:b9:04:02:65:33:09:d0:74:e1:21:bc:c5:04:25:
7b:14:21:f4:e9:86:2c:89:a9:f4:97:e0:a4:18:a5:68:03:a1:
1a:ec:b0:fc:96:15:c5:61:ee:e9:61:df:c1:cd:d6:46:40:a9:
15:a5:62:96:45:8e:ba:cf:71:c2:dc:52:05:9d:71:2e:d4:34:
19:79:ee:38:40:42:d2:a7:72:1f:c6:27:ad:92:4d:4c:49:e7:
be:49:84:6e:03:35:dd:4e:e5:91:d2:05:7e:86:4f:ef:1a:0d:
b7:64:32:ff:2b:89:a1:b3:1e:16:a1:9c:88:2a:a2:d8:df:7a:
4a:47:ed:c9:77:01:81:1e:2e:5c:17:9d:56:3e:82:6a:0a:ce:
5d:5a:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:52 2026 by rpki-client