Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier: l6YAnV8dN9dysN25jw9n9YTDNBvb/EXnZE3HjXG7su4=
Subject key identifier: 9D:39:9F:67:AA:02:E7:6B:F2:D3:EF:F0:88:68:F3:2C:A9:4F:EE:2E
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 01A0A294FE0CB17B8EB4FE383C8DFA7A2B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number: 0EB8
Signing time: Tue 15 Sep 2026 01:01:08 +0000
Manifest this update: Tue 15 Sep 2026 01:01:08 +0000
Manifest next update: Wed 16 Sep 2026 01:01:08 +0000
Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: dHrY4gLI9mhWNVspj0ykdrZfkxo+jtusn1Dk8vSB4+M=)
2: g9ARekBVcGhcdV1yDxzPFfg3FSA.roa (hash: CrdyMkeoZOTfj+RdiOHlPBQWgx83YTO1C282t0kyBq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a2:94:fe:0c:b1:7b:8e:b4:fe:38:3c:8d:fa:7a:2b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: Sep 15 01:01:08 2026 GMT
Not After : Sep 16 01:01:08 2026 GMT
Subject: CN=9d399f67aa02e76bf2d3eff08868f32ca94fee2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:4b:96:da:72:9f:af:5c:e5:73:e7:73:80:
4c:34:bd:3b:97:c2:b6:95:3c:dc:33:ee:12:16:43:
4e:9f:80:27:13:c3:7b:0e:27:4d:5c:49:2c:35:57:
40:f0:aa:7a:fa:c3:d5:be:da:ac:00:9b:7d:c6:70:
38:ee:69:a9:b9:e7:a7:41:a7:d6:68:e4:2f:1e:44:
b8:34:3f:86:88:96:d2:54:aa:41:21:3d:2b:60:8b:
02:5c:7d:5a:99:0a:5e:41:a3:2f:c8:5b:41:3b:84:
58:af:4d:6d:f9:8e:88:6e:2a:03:de:39:3c:48:15:
cd:80:bc:1d:bf:bb:11:96:d1:85:bc:39:e6:9c:5f:
77:f2:dd:79:18:b7:1c:c4:ab:45:63:4c:0b:58:b5:
46:d4:1e:61:85:79:8f:de:76:05:f2:c9:64:d0:d4:
96:7d:58:c1:e8:c1:af:63:da:57:dd:bf:dd:de:e2:
5e:8d:cc:56:23:8c:ea:1b:61:31:13:fe:7a:4d:e2:
a8:e8:0f:4f:7f:3c:e2:29:8d:b1:bd:34:7b:e6:05:
e2:f5:d0:18:f9:6d:e6:0f:40:c8:41:35:0e:6f:b3:
b4:fa:d8:d2:ad:19:ee:fe:ff:72:27:90:c2:34:58:
74:e7:74:57:70:3e:61:e0:60:94:6f:89:43:2e:78:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:9F:67:AA:02:E7:6B:F2:D3:EF:F0:88:68:F3:2C:A9:4F:EE:2E
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:76:3d:ec:9b:5d:26:64:bc:89:4c:9a:b3:cc:d5:89:62:
2c:e9:32:b6:1b:2a:4e:a0:78:24:ce:b0:5c:82:74:d3:f8:9d:
99:13:f1:e8:92:2d:fd:68:71:66:14:65:2f:51:b6:f4:da:fd:
c1:1e:6d:1f:2b:b0:2a:b9:b2:45:53:e6:60:11:f1:67:dd:ef:
cd:7e:a3:b6:8d:3a:62:07:29:26:6c:c9:84:d0:1c:1e:cb:21:
de:0f:6d:17:51:ff:33:3f:76:06:26:34:d3:e1:22:1b:e0:64:
74:90:ce:e5:4b:ab:64:86:e2:f2:7d:f8:4e:ab:96:df:7e:04:
24:1d:40:d7:5e:e9:91:b2:0c:bd:61:fc:11:58:6e:b9:ae:ad:
9d:b4:79:e4:49:8e:e2:af:5e:16:5c:db:38:94:24:ca:c7:b9:
a6:93:a0:44:4e:bc:5b:ff:99:eb:b5:dd:78:c9:c7:e9:c9:03:
e1:09:e5:84:27:81:cc:40:6d:06:b1:71:23:5b:99:8c:84:a7:
cb:2a:45:01:c6:d0:9c:80:b0:fd:40:37:69:ef:8b:15:0f:ac:
c7:f3:3f:49:11:6b:24:82:78:80:c6:b8:ad:79:dd:a5:7d:3e:
c0:82:1b:22:fc:00:8f:b7:3c:b0:08:20:e6:7e:4c:fa:b2:36:
2e:56:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:12:36 2026 by rpki-client