Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/e20584-b349-4f65-bfe9-ec6140ffb7d4/1/BbORBzd6SJFe-uqWW5iuEH6pgsc.mft
File: BbORBzd6SJFe-uqWW5iuEH6pgsc.mft (raw, json)
Hash identifier: vPu0GXzMuOuI850MZsrp0XjlP+x3a011hhB+izdm5cs=
Subject key identifier: 86:32:C7:F0:D7:D4:47:1C:93:FC:56:22:9B:1A:00:4F:58:87:4F:EC
Authority key identifier: 05:B3:91:07:37:7A:48:91:5E:FA:EA:96:5B:98:AE:10:7E:A9:82:C7
Certificate issuer: /CN=05b39107377a48915efaea965b98ae107ea982c7
Certificate serial: 01A03F72D3393172923FF89FA0092C2B84B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbORBzd6SJFe-uqWW5iuEH6pgsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e20584-b349-4f65-bfe9-ec6140ffb7d4/1/BbORBzd6SJFe-uqWW5iuEH6pgsc.mft
Manifest number: 4D
Signing time: Wed 26 Aug 2026 19:01:24 +0000
Manifest this update: Wed 26 Aug 2026 19:01:24 +0000
Manifest next update: Thu 27 Aug 2026 19:01:24 +0000
Files and hashes: 1: BbORBzd6SJFe-uqWW5iuEH6pgsc.crl (hash: tk94CJxVDcQOFu3ODFHYTerpvEgD00lmAJewXkFXme4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e20584-b349-4f65-bfe9-ec6140ffb7d4/1/BbORBzd6SJFe-uqWW5iuEH6pgsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e20584-b349-4f65-bfe9-ec6140ffb7d4/1/BbORBzd6SJFe-uqWW5iuEH6pgsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbORBzd6SJFe-uqWW5iuEH6pgsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:d3:39:31:72:92:3f:f8:9f:a0:09:2c:2b:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b39107377a48915efaea965b98ae107ea982c7
Validity
Not Before: Aug 26 19:01:24 2026 GMT
Not After : Aug 27 19:01:24 2026 GMT
Subject: CN=8632c7f0d7d4471c93fc56229b1a004f58874fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:44:49:a7:4d:6a:7a:11:00:fa:48:e2:c1:
dd:dd:ec:43:bc:66:b3:3f:dc:c4:37:58:42:1f:2c:
15:27:3d:b2:2f:b7:08:d0:f3:88:39:a3:45:5f:cb:
bf:fc:0e:d6:51:53:32:04:5c:f9:3c:b1:b6:30:0c:
8c:42:05:46:b6:12:2f:b0:2b:b0:fa:84:87:97:ec:
6d:70:06:f5:e0:f2:7b:d8:3f:df:ee:fe:cf:53:95:
08:cb:1f:c3:8e:6f:26:44:87:02:64:29:1e:0d:4a:
44:41:3b:06:85:56:6f:6c:74:fb:31:03:19:2a:d9:
4e:f4:8e:d7:57:76:2c:0f:4b:22:3c:10:4d:fe:92:
56:c4:bb:9c:bf:a7:9d:f2:2c:de:83:81:c8:76:5a:
bc:ff:14:f1:7a:ad:4d:62:94:69:4b:3b:ca:1d:16:
0f:7f:06:64:5e:1d:dc:05:58:01:32:34:74:e5:34:
e5:26:aa:7e:84:75:cc:c5:c6:ae:59:f1:10:28:af:
ff:f6:ec:8e:1f:41:e8:4f:07:9c:58:0f:2f:a3:ea:
03:19:f7:e4:9a:f0:cc:40:27:87:5a:87:ab:5a:45:
22:2c:30:56:db:23:d8:53:62:7f:ba:2f:85:4d:66:
6e:ad:fc:99:20:67:71:41:b8:d4:89:70:68:40:57:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:32:C7:F0:D7:D4:47:1C:93:FC:56:22:9B:1A:00:4F:58:87:4F:EC
X509v3 Authority Key Identifier:
keyid:05:B3:91:07:37:7A:48:91:5E:FA:EA:96:5B:98:AE:10:7E:A9:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbORBzd6SJFe-uqWW5iuEH6pgsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e20584-b349-4f65-bfe9-ec6140ffb7d4/1/BbORBzd6SJFe-uqWW5iuEH6pgsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e20584-b349-4f65-bfe9-ec6140ffb7d4/1/BbORBzd6SJFe-uqWW5iuEH6pgsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:11:5b:13:8a:cc:a1:cc:47:59:93:0d:58:23:81:c4:e1:f3:
f3:6a:c0:b0:b0:4e:8c:da:7d:c0:73:53:00:17:69:d4:92:bb:
6a:48:2c:d8:80:19:94:38:ad:fb:3b:cc:af:02:10:43:a1:f1:
c0:ba:9d:30:31:4c:43:a2:f3:e5:fe:63:ac:8e:bf:46:ef:06:
6d:b2:a5:5e:38:e3:a5:33:43:cb:54:a3:68:30:50:2d:51:5d:
22:c9:4a:f4:64:fd:c0:db:22:0b:0f:2c:51:ae:84:0e:f7:2f:
c7:b1:37:39:50:7d:47:d3:2d:f7:3e:28:bb:b0:1e:5d:3b:01:
c8:78:b9:c4:cd:9f:6b:0a:87:9c:fe:45:ec:db:4c:c6:52:2e:
8f:78:b2:b0:34:5a:75:7f:5d:8b:ef:98:d2:fc:bc:af:e9:95:
1a:16:cf:f7:12:54:9d:ca:be:18:41:08:c8:fb:29:89:80:4a:
00:d8:ab:6a:43:22:05:8a:e0:e5:7a:95:aa:0a:8e:00:55:99:
36:32:06:bc:62:fa:23:32:54:b9:60:0a:5e:ed:85:eb:d5:5c:
ce:f4:02:bc:9d:0f:dd:ed:2e:2a:63:88:1e:0a:47:3c:03:6f:
3a:d3:1f:6b:60:7a:3e:d5:87:ec:10:2d:a6:09:3d:12:4b:3b:
ff:c0:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:23:13 2026 by rpki-client