
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier: P/5YvWfP3VhxbqEXWPE6ClLwyp83wXQbsJUInHSoiKA=
Subject key identifier: 5A:88:95:04:E7:A9:25:A9:99:3B:E0:A8:BC:67:94:E2:11:2B:2B:E8
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer: /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial: 01A03FA95B5C90645B362EE9F166FFE2EEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number: 01E5
Signing time: Wed 26 Aug 2026 20:00:58 +0000
Manifest this update: Wed 26 Aug 2026 20:00:58 +0000
Manifest next update: Thu 27 Aug 2026 20:00:58 +0000
Files and hashes: 1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: QoipuBcdnElWv//ek89FhlYljAGFoOYLS/jFHaosjss=)
2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:5b:5c:90:64:5b:36:2e:e9:f1:66:ff:e2:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Validity
Not Before: Aug 26 20:00:58 2026 GMT
Not After : Aug 27 20:00:58 2026 GMT
Subject: CN=5a889504e7a925a9993be0a8bc6794e2112b2be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:e7:91:dc:00:91:86:67:8e:18:36:ce:d7:
d2:4d:7e:f4:37:f2:1c:53:fc:22:97:5d:cb:ff:79:
0f:74:a9:31:09:66:c6:b4:df:cb:d8:2e:21:e9:c3:
44:80:f1:de:44:7f:af:67:92:9f:96:0a:bf:a3:a7:
a3:65:f0:99:2e:e3:fc:6a:ab:3b:ab:5b:5f:fc:5c:
ef:e9:16:39:c3:e0:18:88:59:8a:be:63:64:d3:7a:
c1:df:7e:1e:64:a9:f5:ec:8d:c7:8d:e7:c5:23:30:
47:03:73:8d:83:39:84:d1:eb:41:0d:03:13:60:66:
e9:ae:67:53:b3:ad:85:3c:af:0a:71:e5:56:ca:fd:
fa:a7:9f:ed:e1:d3:89:94:a8:b7:9e:d1:86:27:eb:
9d:7b:fd:94:d2:fd:77:19:d4:16:0f:c9:47:01:84:
ce:04:a2:24:c4:f2:2c:11:4b:45:79:5c:51:f8:5a:
3a:b3:3b:e6:ec:22:08:ae:19:69:58:13:13:6b:c8:
fd:79:cc:16:c1:fa:d0:69:90:b7:c5:82:76:31:98:
fb:46:0c:31:73:db:ea:2a:4b:b9:3d:e8:26:be:ba:
9a:31:74:09:a1:85:b4:a5:0c:28:01:58:48:d4:cd:
f2:c2:5b:e8:88:5a:48:95:9c:7d:94:92:7f:0a:38:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:95:04:E7:A9:25:A9:99:3B:E0:A8:BC:67:94:E2:11:2B:2B:E8
X509v3 Authority Key Identifier:
keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:56:54:78:83:31:d0:f8:d2:4a:f5:3e:f7:39:89:92:ba:5b:
9b:bb:94:79:cd:70:cf:3c:89:29:15:33:59:2b:f9:fe:7b:09:
75:1a:76:c2:2a:78:42:2a:2d:53:22:e2:37:0a:7e:45:d6:58:
b7:45:55:a9:64:66:56:ce:db:5f:a2:85:c8:48:0b:5f:a6:5e:
69:5b:12:e4:5d:bd:fc:d7:53:aa:8f:89:c5:f9:2e:15:3c:e7:
cf:72:db:72:1c:8e:0b:c3:3b:3f:79:15:bf:0b:fe:a1:45:b9:
fb:63:10:c0:5c:f9:4a:a7:1f:43:29:79:1a:a5:fc:e8:ce:8a:
ce:dd:8f:44:33:d3:bf:84:20:f2:2c:81:eb:dd:f1:13:a7:cd:
17:c9:a3:ac:09:c7:b9:c8:f0:29:65:37:02:1f:a0:79:ea:b6:
7d:20:5a:11:19:ed:aa:24:c3:53:4b:8a:1f:5e:58:9c:47:10:
34:27:ce:86:69:2a:fd:60:a9:7e:94:b7:71:0a:a7:05:fc:4b:
bc:19:c2:f4:80:cd:56:69:47:1c:b3:04:c0:c6:7b:18:53:77:
04:d7:55:c5:13:d8:1c:ca:5f:1b:c3:72:25:0f:03:fc:40:21:
d9:ec:60:b6:e3:83:56:85:c1:ba:21:ca:50:10:51:10:2d:40:
7b:0b:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:45 2026 by rpki-client