Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: QH26Fz6zC7VuDcw37X+dD9uqW/ShFY+OPb9J+EZHgXU=
Subject key identifier: BF:F1:2C:4E:45:44:6D:4A:BD:00:22:8B:77:49:F9:C0:E0:1D:12:85
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019E311756728D91C3161E976AA86B2D6B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1921
Signing time: Sat 16 May 2026 14:01:13 +0000
Manifest this update: Sat 16 May 2026 14:01:13 +0000
Manifest next update: Sun 17 May 2026 14:01:13 +0000
Files and hashes: 1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: 8gHCBbQXoA984oVz8iVnQpB/9j83fnRKj7UFY/U1f+s=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:56:72:8d:91:c3:16:1e:97:6a:a8:6b:2d:6b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: May 16 14:01:13 2026 GMT
Not After : May 17 14:01:13 2026 GMT
Subject: CN=bff12c4e45446d4abd00228b7749f9c0e01d1285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:7e:40:58:6b:22:44:3f:67:80:9f:04:2d:
80:54:ce:9d:b3:97:02:3f:22:7a:52:4a:39:65:d1:
8c:9b:d9:9b:c5:b0:79:b3:87:28:3f:68:12:6f:ae:
d0:44:86:75:8f:4e:19:95:52:ab:ca:69:69:10:f8:
34:18:3f:b1:8d:b8:a8:e4:be:7c:37:92:cf:e0:a4:
52:27:69:cc:77:2a:68:7c:04:da:bf:f5:3f:7a:a0:
53:0d:5b:bd:11:07:db:cf:18:eb:7f:a7:8f:f9:b8:
60:8c:a0:75:4f:1e:98:be:e1:9a:a5:b2:b9:55:0d:
7c:97:09:4b:cd:d2:46:4a:3a:6c:b7:b9:74:ba:63:
e9:57:52:f3:33:22:d3:ea:9e:e0:fd:e3:0b:70:16:
88:22:fa:6a:88:a2:ec:1a:2c:6d:5f:d8:0f:8f:07:
4c:7b:76:f8:b4:39:9c:42:ff:73:b3:27:cb:ab:27:
bf:68:f5:02:33:b7:71:a0:9f:cb:e8:48:ab:1f:c8:
0b:5d:55:0f:41:ac:5f:9e:0f:ab:15:27:ae:98:14:
c2:99:f9:e8:8d:2a:86:75:2f:6b:eb:5d:50:95:7e:
0b:97:5d:08:c4:35:87:1d:a0:b4:3a:bc:b5:15:9a:
22:7d:01:93:be:c4:20:91:41:8b:d7:d9:f0:0b:e6:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:2C:4E:45:44:6D:4A:BD:00:22:8B:77:49:F9:C0:E0:1D:12:85
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d7:cf:d8:16:57:6d:92:e8:e9:9b:5f:85:3d:1f:51:c6:ed:
fb:bb:3d:df:f1:78:bf:42:ca:d5:db:9e:56:46:04:86:5f:30:
2f:7a:63:5f:e7:0c:c7:8e:9f:cd:f2:77:98:85:b2:80:ab:0a:
02:af:bf:86:80:e1:7e:49:1a:13:66:d0:b8:91:9a:3c:35:b1:
62:a2:7c:79:67:f9:b7:7e:4e:38:67:26:44:2a:4d:d0:2c:e0:
44:d5:3a:95:a1:72:a5:70:95:45:c3:b5:70:20:1f:0f:71:63:
ff:fc:02:37:87:1c:13:d8:df:27:72:34:d4:88:0d:2a:17:7c:
6a:d3:2f:2b:4d:60:4d:62:19:e6:f9:98:13:42:e4:ec:ac:1b:
77:ef:45:7e:7d:dd:f8:0b:57:dc:9d:f4:3d:6f:37:6a:7d:9c:
02:1d:4e:a3:57:74:0b:a2:77:e3:62:49:bd:cd:11:73:6a:99:
da:e6:52:fd:35:e0:d3:d9:6b:cf:ca:9b:bc:84:11:8d:7a:d6:
c9:ba:cb:2c:63:55:13:ec:27:32:14:45:18:0c:9b:6f:8f:1a:
ab:ab:09:34:cb:cc:fe:cc:24:47:d0:1d:72:03:d8:fe:63:f3:
6a:1e:5d:a1:81:60:83:f6:13:31:b1:d3:f0:5c:5f:4f:4a:91:
ed:3f:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:03 2026 by rpki-client