Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: COMRBvF7cX4IiJpXJr1kXKjizS5iAVuelRf8TGzosmU=
Subject key identifier: 1D:9B:21:3E:27:FD:FC:18:51:1A:0F:33:7A:D8:2E:AE:B5:F4:13:86
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 01A13CA5320DA9F69ADF849F9C6D1C6C19B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0A08
Signing time: Wed 14 Oct 2026 23:00:21 +0000
Manifest this update: Wed 14 Oct 2026 23:00:21 +0000
Manifest next update: Thu 15 Oct 2026 23:00:21 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: AQwp9NwgY3f/bqcVP3N2toPsnxGTACLy8EyKmln1v0I=)
2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:32:0d:a9:f6:9a:df:84:9f:9c:6d:1c:6c:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Oct 14 23:00:21 2026 GMT
Not After : Oct 15 23:00:21 2026 GMT
Subject: CN=1d9b213e27fdfc18511a0f337ad82eaeb5f41386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:4c:a9:0c:12:6a:b2:80:82:80:26:a7:5d:
7a:42:8a:5f:3c:37:f4:8e:e7:de:a5:53:d7:8a:0a:
7c:61:4c:90:d4:d8:31:fb:60:e1:20:f2:ab:93:0c:
92:a9:10:49:77:57:a4:24:45:4d:d6:a3:74:c1:12:
5b:76:51:7d:66:a4:9f:4e:7a:d9:09:64:5b:fc:bd:
12:91:08:84:a4:29:26:df:6b:78:e3:64:5a:80:68:
71:af:10:54:0f:7c:53:83:f5:b2:51:34:9b:0f:cb:
98:45:93:70:45:1d:e0:c4:e9:26:dc:df:be:11:47:
ee:50:8c:b1:ad:92:d9:84:5b:13:75:11:d2:ed:77:
03:10:72:41:68:69:fb:f2:9d:a3:f0:0a:6a:31:5d:
d1:07:3f:88:4d:19:c5:0d:cc:d9:e3:e8:14:be:c4:
e4:a2:c9:1c:00:d6:15:f4:0e:63:82:66:1b:eb:b0:
3e:22:f2:90:90:4f:02:10:b9:df:ae:be:12:81:db:
dc:cb:26:e9:0c:5c:25:55:07:78:b6:68:f0:f4:37:
ee:78:53:d9:84:4d:49:99:b0:28:1e:44:24:dc:2c:
cb:21:59:6e:8b:72:5e:86:51:d9:6d:49:23:f1:e8:
07:22:ab:50:39:ca:b5:34:ee:d3:ea:e7:0e:ec:82:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:21:3E:27:FD:FC:18:51:1A:0F:33:7A:D8:2E:AE:B5:F4:13:86
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c5:db:16:54:e1:7a:47:4d:43:57:b6:2f:25:2e:67:37:33:
48:2a:c1:15:52:e1:da:5a:9e:ad:7d:a0:a5:b1:45:da:4a:cc:
57:05:80:c5:7c:32:cd:e5:eb:d8:79:57:40:e5:14:ee:a0:36:
ff:23:86:56:97:a0:2a:94:9b:fd:51:4d:57:ac:ea:ad:04:35:
f1:0c:7c:f0:bf:99:f6:d6:d0:ef:ae:4d:e6:b9:ee:21:0b:c4:
22:9c:3e:0b:e4:f2:5a:ee:37:d6:a4:db:6d:88:5b:06:71:e0:
0b:53:e5:03:0d:57:b9:7e:e8:ac:e6:71:37:fe:3c:18:a3:01:
0d:06:22:70:ed:19:a1:57:28:6b:18:78:09:bd:a8:03:0a:7c:
ed:fb:a3:02:eb:95:58:f3:12:b4:29:47:5e:3e:7d:53:07:09:
17:42:57:3c:c4:40:2d:f9:1b:e1:20:c6:c5:ce:d0:9f:5d:c7:
95:6e:a4:7e:bf:73:09:20:24:03:42:c1:09:86:cd:a4:48:e2:
c0:a8:12:b4:04:39:83:91:9b:e2:19:f5:72:58:6b:f5:b5:87:
c3:b5:4b:21:ad:e1:63:04:d7:11:2a:ba:5b:e0:a2:ff:7e:37:
77:2b:e5:66:9a:8a:b1:53:a9:e3:e7:e1:6e:2d:84:2c:fe:34:
b2:1a:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:56 2026 by rpki-client