Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: fH7uzrCCWkmxuOWPTLN4On3FbltlPDT2ZGoWvkQ35G0=
Subject key identifier: 76:F8:64:D0:AC:76:84:59:D5:4F:7C:5E:3B:0A:43:28:03:4C:6B:C3
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 019D39407824F028F6974CD7B1EF4A38D5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 07F4
Signing time: Sun 29 Mar 2026 11:00:19 +0000
Manifest this update: Sun 29 Mar 2026 11:00:19 +0000
Manifest next update: Mon 30 Mar 2026 11:00:19 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: Lw3PzJRAVILzDf3xNvQgIHWAuOvDH4i1aPXb9Ac+Ers=)
2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:78:24:f0:28:f6:97:4c:d7:b1:ef:4a:38:d5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Mar 29 11:00:19 2026 GMT
Not After : Mar 30 11:00:19 2026 GMT
Subject: CN=76f864d0ac768459d54f7c5e3b0a4328034c6bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:26:02:c4:25:fe:b3:2c:f5:52:d4:9b:31:
58:c8:57:ff:70:79:46:f3:54:6c:3d:aa:65:0b:cc:
2c:ed:84:cd:a1:87:18:61:67:1d:21:fa:65:7e:43:
3e:ac:4a:62:1c:2f:78:a8:a2:b7:82:3d:23:80:3a:
45:d2:fd:3d:b4:1d:cb:d3:bd:48:91:c6:67:67:bf:
e4:8f:fb:89:61:73:b5:41:cb:f3:e3:bf:84:d5:e1:
f9:8b:9d:1c:5a:db:db:2c:9f:dd:6d:6c:e0:d8:be:
2d:05:12:45:a1:8d:45:c8:5f:7e:39:66:f3:45:bc:
41:0b:b8:61:65:05:aa:06:3d:87:78:c6:51:60:85:
b7:18:0b:2c:67:5f:09:76:52:63:e7:96:be:b5:f5:
58:aa:6c:9f:e3:7f:95:c8:0d:0d:55:92:57:6e:da:
58:e1:c2:06:bf:8c:98:bb:1f:82:8e:00:6f:c1:22:
d0:aa:47:48:d4:c4:25:18:31:4d:51:f9:d6:7b:b0:
04:ef:54:15:2b:c1:55:3e:73:54:4e:dc:c0:f0:f5:
d0:30:cb:ec:cd:b5:a0:d4:c9:fa:65:d5:85:3c:ab:
da:5d:bf:59:3f:88:20:a7:e9:70:2f:40:37:2c:e1:
b2:fb:30:26:6f:0f:24:27:64:97:85:26:5f:e6:5d:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:64:D0:AC:76:84:59:D5:4F:7C:5E:3B:0A:43:28:03:4C:6B:C3
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:aa:20:48:0a:db:d7:88:1c:77:9f:a4:af:31:55:18:ba:54:
f1:3d:bd:ac:ea:a7:8d:e0:56:86:03:e8:43:1c:4e:a4:21:1a:
96:ac:96:9f:b4:f2:c1:d9:64:f7:f1:03:26:16:a6:7e:7e:f9:
ac:f1:6b:61:57:7c:58:07:d2:af:8f:9b:12:e3:89:49:e2:31:
37:1f:44:4c:dd:f6:85:21:d1:16:b0:6c:ba:c5:7a:ce:8e:a2:
38:b1:af:1c:18:d0:0a:50:42:ad:78:09:07:67:c3:db:8e:fe:
05:0f:36:60:ca:7b:41:eb:f5:2a:ba:30:ee:4d:cd:33:df:c9:
2e:75:cc:24:e6:3a:b5:4c:76:bb:8b:ed:27:49:76:70:42:93:
f4:62:9b:26:5e:e8:3b:04:6f:3b:fa:91:5b:47:86:da:93:fb:
fd:bd:ca:80:53:dd:7c:a1:f3:fe:59:cb:af:ea:ec:e3:5b:ce:
96:0b:7a:cb:6d:91:8d:d1:fd:28:18:16:82:d6:d9:63:c5:4c:
ea:ec:a2:3a:50:67:65:2b:32:0a:7b:8e:f1:31:08:be:60:91:
cd:b1:3b:ef:27:7d:dc:c8:1b:07:da:13:3d:9e:35:41:e8:9d:
dc:9b:9c:5c:4e:b7:03:3f:16:ce:77:43:51:c5:73:fb:0f:e4:
98:91:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:36 2026 by rpki-client