Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: A8eefdCXH+qTaMxaEg8bZGeynV5bOJw6VLZ8HrIVEr0=
Subject key identifier: 29:4B:AA:6D:DA:8A:3A:9C:34:C0:AA:D9:4F:52:91:A1:B4:6C:C3:84
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 019D38D394F426C0F410C702E82E9C159320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: NS3B6Ctdp2PVS54j8QcjuEG7N28MqVpyrK3VAILZx0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:94:f4:26:c0:f4:10:c7:02:e8:2e:9c:15:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=294baa6dda8a3a9c34c0aad94f5291a1b46cc384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:51:de:b4:82:e3:36:c0:e6:36:78:36:f0:
79:f5:ff:01:a3:a3:46:75:3f:da:00:db:4b:5e:7e:
20:ed:36:ef:94:2b:22:af:28:3d:cf:19:4a:c8:35:
fc:9d:6e:4a:e0:16:83:92:5b:0f:0f:3d:0c:e9:94:
f5:60:98:4f:19:4d:46:1e:f4:0e:b9:9d:9f:e1:15:
24:cc:c2:6b:83:e1:e2:be:5b:e8:61:a0:99:d5:96:
55:0b:c7:8f:90:d1:de:2a:f9:4c:21:d0:c3:e1:2e:
20:f4:88:1d:6f:4e:30:a1:f1:e5:7b:bd:f5:e8:c2:
c0:29:37:01:76:2f:f2:4a:91:e6:f5:df:92:7d:da:
b1:6e:2b:7f:b9:cc:43:a5:fa:b9:9a:ab:0f:29:f4:
c0:e1:57:37:a0:61:7c:94:06:7f:21:2e:c1:e6:d5:
12:0f:10:5f:b9:ea:ba:dd:39:c5:6e:32:10:36:b7:
20:cb:e6:f8:44:bf:08:58:db:ca:32:9c:b8:90:b6:
bd:b3:6b:57:12:c4:46:f3:76:bb:65:bb:5c:58:e6:
c8:25:d3:27:76:1e:e5:73:19:bd:b9:74:87:f7:be:
8f:d7:3c:a3:dc:97:d6:83:6e:d9:b2:7c:63:23:b9:
1e:51:a2:2f:6d:12:a8:32:f8:22:44:15:2d:59:c5:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4B:AA:6D:DA:8A:3A:9C:34:C0:AA:D9:4F:52:91:A1:B4:6C:C3:84
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:22:0e:b4:1c:b4:29:f7:47:34:26:14:4b:39:b3:f6:4a:91:
83:65:01:e0:36:23:d3:4a:de:8c:84:39:77:e5:20:7d:41:66:
05:dc:a7:84:80:d3:82:28:25:39:a0:ca:f4:77:33:e2:9b:b0:
0b:9b:35:ae:4f:5c:42:cb:c8:d1:cd:52:3a:06:fb:a2:a0:3e:
ac:3f:4b:dc:98:90:3c:0c:24:0d:8f:d3:54:ca:bf:c4:67:f1:
45:60:97:f5:f1:e5:b1:ae:df:c3:51:c8:bd:67:ed:a6:13:df:
4b:7c:b3:0c:2c:04:f4:25:fc:a8:e4:3f:ab:fc:46:66:4e:26:
6e:3e:cb:ce:62:8a:d0:59:9c:38:f3:24:80:bd:ee:f4:79:70:
50:fd:4c:0d:f3:b4:3d:27:0a:ef:91:f9:b2:4a:60:4c:00:97:
93:55:69:f3:de:18:c5:c0:96:a1:3a:ea:b5:57:1f:ca:99:90:
c7:f2:59:ed:c2:c6:5e:d6:d4:c3:34:d2:ca:4b:51:cf:ac:38:
54:f4:ff:97:31:c9:46:5f:42:2b:fc:84:25:c8:d3:9c:f7:4f:
cb:3e:6b:f6:13:ff:79:ad:d0:7a:d8:8b:a3:c1:63:5c:5a:58:
2e:fc:1e:2e:9a:0b:60:36:e5:1e:7b:63:e9:d8:19:e7:e1:05:
69:d9:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:52 2026 by rpki-client