Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: AZ7W7k1gt0gJfcmOiZCFJblx6RI4BhFQYCT4oO5ZUkc=
Subject key identifier: 89:01:AB:52:8C:B3:79:80:31:E0:EE:CC:FA:5E:FE:AF:9F:DA:2D:CC
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 01A001DD7C95AC58E4BCFC861F351CFBB15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0965
Signing time: Fri 14 Aug 2026 20:01:27 +0000
Manifest this update: Fri 14 Aug 2026 20:01:27 +0000
Manifest next update: Sat 15 Aug 2026 20:01:27 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: eyU37zedVCqWlvgUnrRVYdDdeyMdD5vUBiXSR4EySFQ=)
2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:7c:95:ac:58:e4:bc:fc:86:1f:35:1c:fb:b1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Aug 14 20:01:27 2026 GMT
Not After : Aug 15 20:01:27 2026 GMT
Subject: CN=8901ab528cb3798031e0eeccfa5efeaf9fda2dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:ec:89:70:2d:cf:7d:05:86:81:46:b6:fb:
2c:4f:d8:8f:b1:2a:55:29:a7:09:66:8d:af:6b:a3:
9e:73:d2:d4:92:9d:26:f7:9f:11:67:c4:c8:51:f8:
b5:56:cf:ee:9f:fd:fd:70:e5:23:b6:77:b0:0d:fa:
54:2c:dc:56:aa:d2:a0:58:52:f8:9b:4e:30:95:d8:
81:09:3f:15:1e:17:64:61:45:61:4c:68:5c:4f:c1:
4d:72:2a:d8:c7:f8:98:0b:4f:67:8b:c2:03:44:58:
00:72:06:87:08:5c:4f:4c:fa:19:61:1e:ce:52:e7:
43:a1:4b:65:3c:2e:19:4f:de:c7:27:ac:4c:74:0c:
89:ff:79:c2:09:57:24:62:8c:71:a8:ee:f4:65:29:
67:29:81:89:97:90:c3:ca:91:0e:5e:af:b7:1b:c6:
d8:73:a1:84:88:72:c7:3a:5b:21:cc:7b:b3:5b:fd:
37:2b:63:76:1d:35:b1:70:dc:51:24:f6:2e:33:9a:
31:51:2a:42:4e:bf:61:93:3a:6a:65:20:b7:16:9d:
06:57:3c:93:da:4d:0a:fd:02:e7:5c:0a:c8:34:fa:
c8:fd:30:9b:da:82:84:bc:9d:9a:b0:65:3a:12:19:
4d:4c:a4:2b:91:77:70:2d:46:24:dd:2f:5f:65:06:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:AB:52:8C:B3:79:80:31:E0:EE:CC:FA:5E:FE:AF:9F:DA:2D:CC
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9f:30:a6:18:66:2e:3e:08:e0:4d:75:dd:e6:81:b9:00:87:
c8:a6:c7:a4:58:b0:62:71:f1:ad:4f:ca:ff:0e:ce:46:a0:73:
f0:bc:3f:d6:1f:bc:11:4b:b6:49:b9:82:86:85:c4:93:dc:90:
b4:dc:68:a3:be:e3:f0:bd:80:28:a8:fd:06:24:96:f6:df:82:
d1:aa:2f:5e:ab:c2:6d:7c:40:21:a5:bc:42:e9:e9:66:f3:3a:
e3:2d:38:c4:d9:26:60:30:2a:18:5f:d5:c0:2d:bf:96:38:44:
2d:3e:99:6c:1f:b9:98:77:80:2f:26:4e:55:2e:14:45:14:c6:
29:02:a1:34:32:85:5b:8e:6d:2f:c5:46:ee:6e:5a:62:20:c8:
0b:38:7b:c8:8e:97:62:53:36:6b:8c:cd:e0:e7:c9:80:9c:2c:
70:6f:a2:bb:f2:91:29:cf:ae:e1:99:5b:04:e3:fa:90:30:fe:
4c:9e:84:b2:50:a3:7f:32:49:59:6d:65:5e:6e:b2:78:d5:fe:
03:59:1d:b3:73:53:80:c7:36:92:76:ff:4a:43:f9:7d:e2:5f:
af:e3:be:66:f0:77:2b:8d:fc:dc:42:4f:1b:cb:ff:c7:a9:8d:
35:8c:94:93:e3:83:d3:d2:ea:42:4b:66:f7:3c:ea:5d:3d:db:
c5:57:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:14 2026 by rpki-client