Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: XRSUEYI3Ab711OWWcdSo/XBLR2SawpQCnM5T6ClLRM0=
Subject key identifier: 9F:AA:48:66:83:5C:FB:72:AF:9A:34:D0:37:BF:BA:E0:6E:1F:0A:5D
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 01A14CBDBE1F62C431014382BF0D85C93F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 11D4
Signing time: Sun 18 Oct 2026 02:01:05 +0000
Manifest this update: Sun 18 Oct 2026 02:01:05 +0000
Manifest next update: Mon 19 Oct 2026 02:01:05 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: bWolpfSRGO0Q1nRoDvEMtoqf6bkvdcyidpDAGgE+AS4=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:bd:be:1f:62:c4:31:01:43:82:bf:0d:85:c9:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Oct 18 02:01:05 2026 GMT
Not After : Oct 19 02:01:05 2026 GMT
Subject: CN=9faa4866835cfb72af9a34d037bfbae06e1f0a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:df:93:b8:65:01:96:ea:53:98:28:5c:c0:
5a:82:f2:ae:21:f8:89:93:b8:a6:53:6f:fa:89:f7:
6b:33:c9:31:86:10:ab:71:7c:4c:7b:3d:a9:5f:ab:
fa:f1:c6:0a:02:7b:9e:fd:61:4b:66:ed:0f:07:27:
1a:48:c8:2b:51:ca:8b:68:9d:63:18:b7:46:ab:3b:
96:01:d1:96:74:da:0f:66:3e:57:1b:2c:18:c9:76:
eb:22:b5:1b:d9:9f:55:7f:d9:be:7a:7d:c9:e9:f7:
47:7c:1e:0f:f6:b1:c0:9e:cf:87:71:35:7e:6c:37:
75:8b:9e:8e:fd:39:d4:3a:c0:36:b3:21:4f:0e:6f:
48:12:f9:49:24:c5:30:af:f6:ef:21:47:4c:36:4c:
ac:af:9f:ef:42:de:44:1b:9f:c4:49:2a:f2:c4:e3:
9a:54:00:5c:ab:de:ff:10:90:16:08:c0:f3:82:9d:
c6:47:46:06:ac:0d:b7:5e:b1:d1:56:ce:24:a5:b4:
ca:de:1c:84:fb:5b:3e:26:34:b3:d8:89:c4:95:08:
fe:73:f6:57:9f:78:ad:61:c3:57:7c:80:e2:f1:15:
22:29:90:0e:6d:ec:99:6f:1f:2d:54:cd:99:6e:f4:
18:65:05:86:1b:cd:7e:d1:2d:b1:b1:07:ec:94:de:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:48:66:83:5C:FB:72:AF:9A:34:D0:37:BF:BA:E0:6E:1F:0A:5D
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:12:d4:14:d0:15:e9:1b:ce:6a:78:18:9b:6e:b1:e8:b0:1b:
29:e8:48:77:ce:e4:24:e0:fb:ed:21:7a:a2:5a:80:cc:4c:88:
c6:7e:18:63:b7:89:67:87:bd:ac:62:1f:79:dd:d3:1f:5d:46:
3d:d8:5d:01:aa:6e:d4:e4:29:8b:b4:d2:b2:72:06:d2:70:cd:
c9:aa:45:d7:a9:62:0d:ea:ac:d0:a9:02:a7:6d:cd:41:55:96:
90:2c:48:26:ac:62:3e:80:aa:30:4f:5a:71:f0:40:03:bf:91:
6a:5c:06:90:74:45:c3:35:4b:82:b9:2e:76:1f:50:57:c0:05:
7f:8e:6c:8b:bb:ea:37:bb:a3:76:5e:37:88:9c:32:30:51:1d:
76:22:58:56:38:15:88:8c:82:f6:c4:19:4d:7a:58:06:b7:e9:
90:bd:42:fe:8b:71:e4:33:c3:5f:9e:ff:6c:54:0c:40:32:e3:
75:67:3d:a2:05:48:ad:9f:1c:20:88:6a:72:cd:7b:77:26:18:
0a:6a:1c:51:32:e2:d8:3f:9b:c9:8b:6e:60:a1:68:4d:0e:e1:
41:a2:7b:92:95:3f:e9:6e:37:50:e9:c9:bc:d3:69:01:78:c2:
69:8b:0a:81:df:6a:a7:96:74:e1:cf:e0:7b:3a:e2:e0:4e:8c:
06:a4:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:13:12 2026 by rpki-client