Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: BgRJdmh9xR7j5RBkXwSYuPgVp4U+Ju2PkF3vKldb0Zs=
Subject key identifier: 4A:E9:A2:8A:E9:B9:A0:4A:CA:42:A1:3B:74:42:55:A0:7F:34:63:74
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01A13C6ED5C6EC8B2BCC861475D7B36943E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1AB6
Signing time: Wed 14 Oct 2026 22:00:58 +0000
Manifest this update: Wed 14 Oct 2026 22:00:58 +0000
Manifest next update: Thu 15 Oct 2026 22:00:58 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: XZC9CsCh+UCDwN9eEBdFsL7SdJXqapMImZafx3hJ3/0=)
2: _l4YjibNL4tMMVqIwdmfRf9vXqI.roa (hash: P9JOmxd5QUs3HnQ33b/0KwXQ8MA8bLPVK9YMxcnjWHU=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:d5:c6:ec:8b:2b:cc:86:14:75:d7:b3:69:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Oct 14 22:00:58 2026 GMT
Not After : Oct 15 22:00:58 2026 GMT
Subject: CN=4ae9a28ae9b9a04aca42a13b744255a07f346374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:34:6b:dc:f3:fd:92:d1:24:d2:8b:ee:02:
a1:94:87:75:82:f4:85:be:be:5e:c3:4f:f2:04:9c:
46:7a:6c:34:3c:ce:ca:8d:c4:39:1d:c2:40:9b:09:
e2:1d:9c:73:e5:9b:4d:c7:40:2f:6f:44:fa:09:46:
85:f2:dc:b1:6c:59:eb:9f:e7:d9:8c:1f:bf:a9:d7:
af:76:86:c8:23:fe:48:dd:c9:67:55:58:d3:0a:2d:
d9:de:7d:6f:34:fa:dc:43:04:19:a4:d6:1f:43:54:
1c:44:76:75:fe:4d:a3:94:79:a7:57:8c:55:44:fa:
2b:f0:79:2c:df:2b:34:14:3e:32:2a:7d:08:74:6c:
ae:5a:e7:2f:51:0b:3f:2c:f4:7a:a5:08:dd:fe:bf:
d3:c8:e9:65:e8:72:86:c6:63:d4:99:2b:41:c4:89:
48:1b:89:42:06:48:51:9f:10:91:d5:86:a8:e1:03:
b3:fa:06:0d:96:d0:fc:e9:20:a7:16:bf:68:98:bc:
67:d1:f6:f7:30:cc:0f:89:0f:72:54:03:29:8c:90:
95:f3:be:fa:92:f9:cb:1a:6d:99:c6:10:b9:f8:39:
98:5f:e2:4c:29:62:2c:8d:b4:b0:58:73:41:a2:38:
ab:6f:35:24:64:ce:9a:db:82:6b:4b:98:36:4d:c1:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:A2:8A:E9:B9:A0:4A:CA:42:A1:3B:74:42:55:A0:7F:34:63:74
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:80:f2:9e:e1:bc:91:8c:1d:15:bf:37:3a:03:65:a6:5f:08:
fd:ab:29:93:4e:52:bf:11:72:a1:a5:55:c2:05:23:39:e9:38:
cd:94:38:26:7f:e1:4f:d2:03:7f:19:ce:3f:ad:eb:54:c5:21:
14:25:2c:9c:8e:44:60:77:d3:b6:07:84:e8:91:47:38:2c:28:
aa:81:29:40:d6:32:c6:22:08:1a:16:a5:9a:f7:2c:48:76:3a:
10:89:89:fd:34:aa:d3:89:31:25:ee:40:f5:c8:a0:c1:dc:9e:
14:98:20:89:a3:53:da:8d:83:81:8d:f6:89:b9:87:97:c1:8c:
00:22:e9:35:25:37:6c:14:20:49:08:34:26:a0:68:53:c3:0b:
92:5b:67:98:0f:13:24:de:e0:c1:85:a6:08:ea:fb:af:56:6e:
01:ea:b1:d5:5f:dd:dc:f9:8e:5b:03:ae:da:38:8f:37:3b:ca:
96:ba:7b:a0:01:df:7e:01:30:e4:50:2f:94:d7:e1:57:05:d0:
fb:dc:9c:11:25:10:bd:a7:5d:af:54:d9:80:05:da:f6:a0:de:
4b:bf:03:a8:62:e1:75:fb:1d:9e:7a:06:5c:4b:29:5c:7f:f3:
6a:c6:a9:2d:ee:a1:b9:d9:8f:86:73:7b:2b:f0:7b:6b:71:dc:
4e:cd:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:12 2026 by rpki-client