Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: fmC+9TAGMNfC2/+RIDg4XHvWDO2B+MNKBpjCXRZYmBY=
Subject key identifier: EB:05:D4:56:BE:6A:BB:63:F8:95:6A:AA:67:80:A8:BC:F9:69:3D:44
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01A000935A0978BB41542BE64C5C6FC5174C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1A11
Signing time: Fri 14 Aug 2026 14:00:51 +0000
Manifest this update: Fri 14 Aug 2026 14:00:51 +0000
Manifest next update: Sat 15 Aug 2026 14:00:51 +0000
Files and hashes: 1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: JTMNbsf3dHWzEid13+mLSXH06bJ/2Mtv1XzlSrCcRHE=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:5a:09:78:bb:41:54:2b:e6:4c:5c:6f:c5:17:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Aug 14 14:00:51 2026 GMT
Not After : Aug 15 14:00:51 2026 GMT
Subject: CN=eb05d456be6abb63f8956aaa6780a8bcf9693d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:c8:0d:ed:e4:42:64:44:29:70:d4:3a:a8:
78:3f:d9:9a:10:1b:60:d1:41:4c:29:f8:be:3f:cf:
f2:e3:c6:f0:b9:d8:09:6c:3f:96:25:c1:dd:c5:22:
63:e3:b7:8d:1c:b8:d5:2a:07:3e:f9:d4:e8:60:30:
11:88:71:85:d3:f3:85:a7:54:0b:73:41:13:97:fe:
b3:05:a4:0c:2d:8e:c3:19:69:8d:ba:50:10:ec:bf:
c8:7f:70:28:58:bc:a2:f8:e4:f6:43:22:31:f7:cd:
44:ce:ad:1d:8f:a7:03:a8:08:61:19:ba:c4:75:27:
63:a6:8c:d4:94:8b:4a:10:17:5b:c9:f2:e2:c5:ad:
fe:d9:23:e6:6f:15:cc:62:4d:0d:f5:52:31:4d:d6:
1f:7d:75:c8:41:0e:29:26:db:d9:e7:07:f9:96:ba:
11:7b:c6:fa:b7:e8:e0:f2:e1:32:4a:8a:61:84:5c:
32:b5:4d:8d:d6:82:9e:ff:96:4b:cc:d2:ec:de:34:
9a:96:e2:dd:9a:56:73:36:16:f8:1e:89:be:a1:28:
91:85:37:8a:2e:f4:f8:e1:a9:c4:ac:06:60:68:6c:
d6:7e:f4:74:e0:d5:a3:96:70:7a:38:4f:96:50:f8:
90:7a:e7:6c:1c:f8:cd:ba:ec:db:a1:d2:4b:e7:03:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:D4:56:BE:6A:BB:63:F8:95:6A:AA:67:80:A8:BC:F9:69:3D:44
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:91:f6:c4:11:9b:40:04:ef:cb:af:14:ea:e3:2c:97:a5:2f:
9a:dc:18:71:74:15:4c:84:de:83:83:67:1c:06:01:9a:12:19:
2b:f2:c9:cd:d0:9e:f3:f7:0f:32:c6:a2:4e:55:1a:c6:55:19:
b7:0b:0a:03:d0:fa:7d:51:34:75:ab:d1:11:da:3b:ea:9f:47:
54:0b:dd:96:a1:e9:2e:67:dd:f0:e5:e3:a1:b9:b3:dc:55:76:
78:74:40:f0:d7:e1:12:f4:5e:76:ab:30:26:19:42:e3:1a:d6:
5f:8d:ad:8b:58:15:84:08:42:75:68:1e:fb:fc:31:d7:26:31:
59:67:e3:a4:26:67:b1:d9:95:3f:0c:c9:b2:27:d4:a4:7c:e5:
19:93:dd:12:ad:49:0c:e1:92:4f:14:87:05:69:a8:79:1f:99:
f6:f0:4b:05:e5:7b:e3:a6:f2:d2:ba:3d:8c:0c:1a:35:90:1e:
ad:64:27:c3:d4:9b:39:c4:17:c5:ed:dc:10:78:4c:82:2c:0e:
5a:75:22:ac:89:e8:83:9b:94:1e:12:5d:1f:93:4f:16:57:dd:
cc:2c:48:53:7e:46:b7:96:a9:9e:d7:37:08:65:9a:f6:e8:d5:
a7:ba:46:34:11:fc:2e:52:52:3a:73:4d:44:eb:f5:c3:91:12:
e2:c2:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:19 2026 by rpki-client