
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: i9YO5ULfSkbPlSfJ1vJLKe2wVVBBW8ltQHjYi32letc=
Subject key identifier: 7B:16:6B:CD:45:84:8B:3A:22:EC:E0:66:E1:E6:06:E6:F8:29:09:0D
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 01A13E25FEBAA6349B8E73E76DE21C364107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 06:00:39 +0000
Manifest this update: Thu 15 Oct 2026 06:00:39 +0000
Manifest next update: Fri 16 Oct 2026 06:00:39 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: shQL6b61LefdTVZpbwW9BO4gPXH9qCw2E1TPJtF4KQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:fe:ba:a6:34:9b:8e:73:e7:6d:e2:1c:36:41:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Oct 15 06:00:39 2026 GMT
Not After : Oct 16 06:00:39 2026 GMT
Subject: CN=7b166bcd45848b3a22ece066e1e606e6f829090d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:4b:c8:c4:4f:bd:12:e4:a7:24:6b:9a:a6:
54:d2:2a:f2:c1:5c:99:0f:89:8d:8f:cb:a4:a2:41:
63:fd:bc:47:ab:2c:f0:51:b6:4f:86:09:e7:e7:59:
f0:0f:c7:26:95:6c:c0:03:f3:06:de:51:e6:be:52:
10:50:28:18:75:96:60:9e:2a:bc:10:b7:cf:2d:73:
62:03:66:dc:bb:39:fd:61:3f:3c:cf:82:02:83:58:
31:eb:fe:4e:7f:7d:ab:7b:66:b8:07:a0:cf:58:fa:
39:47:0a:6a:6a:bc:10:fa:67:ce:06:05:a8:fc:f6:
53:64:97:0c:ef:63:2a:47:ad:3f:93:01:23:f2:03:
8a:24:df:a0:c9:a5:98:6e:5c:e0:5a:57:6a:ed:6f:
6c:c0:d6:39:78:1a:3a:50:93:dd:d1:36:2f:d3:aa:
86:d0:d0:31:68:e8:01:2c:f8:76:3b:94:42:a1:9d:
30:dc:2a:aa:e6:c9:4a:5f:92:4f:41:67:64:60:e7:
fc:52:b6:c5:ec:14:d0:84:75:24:2f:b8:d5:01:e3:
2e:e1:d4:18:37:38:a1:c2:58:13:d9:7c:e7:ae:45:
bd:c2:e3:2e:cf:c0:75:f0:34:b4:ed:0b:5a:61:23:
a8:e9:70:93:24:97:84:ec:bb:23:d0:e4:7e:6d:e8:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:6B:CD:45:84:8B:3A:22:EC:E0:66:E1:E6:06:E6:F8:29:09:0D
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b1:72:53:e6:ed:27:fa:2d:5d:db:f4:9b:7c:1c:0a:1a:d6:
6d:c9:9c:b6:ec:64:9c:ce:e2:3b:9b:27:d8:c0:e2:f6:b6:5d:
9f:f5:a6:e6:65:68:6f:15:37:19:ef:92:a6:0a:5c:77:ac:95:
e0:7d:ce:1a:59:f7:dd:00:95:4a:3d:5c:4d:76:f0:36:da:d0:
bf:5d:c1:09:fc:b0:8d:62:61:95:37:53:2f:e0:c7:1b:39:8e:
33:fd:8a:f6:af:5e:03:73:e7:a6:1c:02:fc:eb:36:28:64:95:
c9:8a:36:5b:a1:79:39:bb:b4:84:dc:1a:1b:a1:56:fe:02:99:
b1:88:0d:43:5d:bd:4a:8d:20:cf:ef:ca:36:28:40:b9:86:d3:
bc:d7:29:90:ad:6e:ea:e4:99:98:69:a3:62:51:1c:5e:db:2e:
54:c2:7e:42:9a:e3:da:81:4c:11:b9:f5:b1:15:a1:00:2c:51:
d1:81:80:5d:af:b5:bc:74:de:fe:e9:e7:22:44:b4:46:54:e5:
ed:ca:e8:11:74:f4:fd:80:e1:a4:37:22:12:5c:8d:b2:a6:34:
31:a7:aa:65:e5:07:5c:92:c9:91:26:ba:76:fd:bf:e5:e0:ca:
c2:b9:7b:7f:a3:22:28:75:39:58:99:7a:ec:bd:4a:0f:95:3e:
9a:c1:e7:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jf66pjSbjnPnbeIcNkEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjMzYTY2NzAxYjJjNjVkNDk3ZmUwNGM1YmEzMDFiZGNl
Y2I2ZDkwHhcNMjYxMDE1MDYwMDM5WhcNMjYxMDE2MDYwMDM5WjAzMTEwLwYDVQQD
Eyg3YjE2NmJjZDQ1ODQ4YjNhMjJlY2UwNjZlMWU2MDZlNmY4MjkwOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoVLyMRPvRLkpyRrmqZU0irywVyZ
D4mNj8ukokFj/bxHqyzwUbZPhgnn51nwD8cmlWzAA/MG3lHmvlIQUCgYdZZgniq8
ELfPLXNiA2bcuzn9YT88z4ICg1gx6/5Of32re2a4B6DPWPo5RwpqarwQ+mfOBgWo
/PZTZJcM72MqR60/kwEj8gOKJN+gyaWYblzgWldq7W9swNY5eBo6UJPd0TYv06qG
0NAxaOgBLPh2O5RCoZ0w3Cqq5slKX5JPQWdkYOf8UrbF7BTQhHUkL7jVAeMu4dQY
NzihwlgT2XznrkW9wuMuz8B18DS07QtaYSOo6XCTJJeE7Lsj0OR+behosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsWa81FhIs6IuzgZuHmBub4KQkNMB8GA1UdIwQY
MBaAFAWzOmZwGyxl1Jf+BMW6MBvc7LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTct
MWJmOTRhMjUwMTRlLzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTctMWJmOTRhMjUwMTRl
LzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbFyU+bt
J/otXdv0m3wcChrWbcmctuxknM7iO5sn2MDi9rZdn/Wm5mVobxU3Ge+Spgpcd6yV
4H3OGln33QCVSj1cTXbwNtrQv13BCfywjWJhlTdTL+DHGzmOM/2K9q9eA3PnphwC
/Os2KGSVyYo2W6F5Obu0hNwaG6FW/gKZsYgNQ129So0gz+/KNihAuYbTvNcpkK1u
6uSZmGmjYlEcXtsuVMJ+Qprj2oFMEbn1sRWhACxR0YGAXa+1vHTe/unnIkS0RlTl
7croEXT0/YDhpDciElyNsqY0MaeqZeUHXJLJkSa6dv2/5eDKwrl7f6MiKHU5WJl6
7L1KD5U+msHn+w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:21 2026 by rpki-client