Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier: ZjVNyETLX54im45OqM2/Sup0qiXPP6z5KqVd2HcxHDc=
Subject key identifier: 2B:C7:5B:22:F4:87:EE:50:C0:3A:C0:E7:ED:E7:DA:76:48:2B:01:26
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 019D37C09E8E8C399867B467E0E3ACD5FE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number: 0CF3
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: 0SGkld4vf5dS6wJIXVk/C48RD0NNo3tXzDLJ9asEPaU=)
2: g9ARekBVcGhcdV1yDxzPFfg3FSA.roa (hash: CrdyMkeoZOTfj+RdiOHlPBQWgx83YTO1C282t0kyBq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9e:8e:8c:39:98:67:b4:67:e0:e3:ac:d5:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=2bc75b22f487ee50c03ac0e7ede7da76482b0126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:7b:61:d1:b2:c2:6a:de:d0:94:4a:9c:de:
b7:11:93:dc:23:2e:2a:0e:35:5e:b2:b5:0f:09:0c:
a4:b2:09:d4:85:a3:f6:3c:96:37:0a:c4:ee:35:c5:
d5:0a:d0:98:4f:44:b4:41:c9:c0:6a:2d:f4:98:c6:
54:5e:2c:04:9e:c5:86:4a:76:42:b1:cd:cc:4b:43:
6c:fa:5f:1f:2a:f1:56:9f:d4:81:18:85:ac:ae:3e:
55:ba:9d:f0:61:dd:5b:2f:53:72:c9:da:1b:54:4b:
f8:8c:69:34:5d:05:70:31:96:b5:4b:ed:20:8e:08:
85:48:aa:d1:d1:e0:95:65:bb:2c:0c:f4:62:2c:2a:
27:69:83:80:d8:07:ec:f3:c8:8a:d6:37:54:fd:9e:
7d:1a:8a:a8:3e:a3:03:e4:c9:d5:bf:3b:0a:8e:63:
7a:59:50:bd:5d:11:4c:5e:b1:38:17:e2:0b:20:4a:
df:df:ed:53:e3:5b:22:51:59:8f:22:0c:13:06:10:
c1:da:05:09:58:40:69:b4:b2:fa:e4:9e:76:73:5b:
ac:dd:6c:55:e0:d8:78:58:ef:bc:b0:07:38:e8:8c:
4b:d8:e7:0e:ab:8a:df:52:07:99:0a:2a:c8:ae:d3:
be:18:03:18:07:80:fb:c7:f8:30:53:f3:75:5f:b2:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:5B:22:F4:87:EE:50:C0:3A:C0:E7:ED:E7:DA:76:48:2B:01:26
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:0f:11:9b:34:01:33:83:08:04:88:08:0e:97:50:67:52:
80:a7:bf:0f:c5:55:88:ee:5e:1d:c2:36:04:96:9a:e3:f6:ed:
3c:86:62:a0:27:98:c7:d4:d0:27:7f:30:09:14:a5:79:0d:0b:
47:c4:0a:4e:f4:e7:b8:f7:7f:cb:5b:83:01:0d:3c:ef:6c:8b:
03:a1:ed:5d:8e:bb:9c:17:9f:57:bf:6b:e0:8c:3a:32:f7:3b:
6f:80:ca:09:d5:87:2e:b0:f0:c0:62:4a:74:76:f7:73:f8:cb:
4a:11:2b:14:5c:18:59:c0:96:9e:65:a1:ee:28:63:5d:99:6c:
b1:57:3c:b7:94:53:f4:b5:ee:d8:71:32:12:b7:a3:68:3c:5f:
5e:14:6e:5c:b4:d4:44:cc:f7:68:ce:ea:48:b8:d7:ee:c8:05:
45:63:fb:3b:37:24:4a:d0:c5:1d:45:f9:20:3c:46:1a:b9:cb:
6d:60:c7:79:e9:77:ff:0f:61:bd:b2:a5:86:35:b5:3a:d1:c2:
ed:fd:e4:f3:9d:f8:83:d9:e4:3c:46:6d:f2:a6:2a:08:73:31:
19:53:00:f3:c7:d5:6f:f1:8f:a1:f3:50:fd:33:fd:74:d6:e4:
f1:57:2c:1d:e5:d1:72:7c:c8:f5:a5:1d:93:5d:89:87:a7:8c:
6f:3b:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:07 2026 by rpki-client