Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: QVy5PkAuO2H+k52KFakQshmgUBSMqeyQDqIuJ+frvQQ=
Subject key identifier: A5:6D:5B:01:58:87:40:98:C1:30:FA:E1:CF:EB:03:1A:2A:FF:1D:87
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019E3117CD0DD3DDA5956104EE7AE63F48F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 1038
Signing time: Sat 16 May 2026 14:01:43 +0000
Manifest this update: Sat 16 May 2026 14:01:43 +0000
Manifest next update: Sun 17 May 2026 14:01:43 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: JnBEY61w9bs0rYQjRDYKiEElbVktTA77t1sMrR2vDgM=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:cd:0d:d3:dd:a5:95:61:04:ee:7a:e6:3f:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: May 16 14:01:43 2026 GMT
Not After : May 17 14:01:43 2026 GMT
Subject: CN=a56d5b0158874098c130fae1cfeb031a2aff1d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:2d:7e:c7:03:0d:5e:c9:c9:40:df:58:f4:
74:37:8e:f8:b2:bf:21:43:47:3a:a9:be:69:c3:d5:
73:e6:68:30:9d:ae:e2:f5:fb:03:5e:a0:8c:58:6b:
ed:de:44:40:40:37:d9:44:4e:c0:34:f2:36:a2:d1:
5f:09:a7:75:84:8d:bc:c3:07:9e:8f:ed:1a:d6:6b:
32:3d:f1:bb:f7:20:bb:9f:bb:cb:0b:d8:bd:6d:dd:
88:7d:3f:c3:57:7b:ff:bf:29:3c:7c:c4:5e:ba:10:
8d:c4:d5:20:f5:f2:7e:0a:5f:cf:02:e3:db:4e:86:
d3:ea:29:bf:3a:4f:44:4d:46:91:ce:e4:39:f7:58:
79:c7:5f:d5:ee:ca:a3:48:3a:d3:05:3a:36:81:ec:
e6:16:ec:21:40:a2:b8:3a:92:5a:c7:02:c7:d8:b6:
57:49:ab:5a:46:f2:b3:ce:80:47:33:37:6d:fc:4c:
76:db:75:25:21:ea:93:03:33:51:60:b6:8d:84:ec:
ae:1c:2e:89:9f:50:07:09:cc:94:5b:4e:38:fd:f3:
dd:2e:31:d8:ac:52:c5:55:b6:29:9a:57:74:d3:5b:
97:36:ee:4e:7d:5e:22:1a:55:59:29:1b:55:85:81:
cd:76:a3:7f:d0:5e:70:fe:0a:97:fd:a6:e9:79:1b:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6D:5B:01:58:87:40:98:C1:30:FA:E1:CF:EB:03:1A:2A:FF:1D:87
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3c:78:92:25:8c:fd:7c:5e:6e:26:9c:a0:0f:7d:21:41:ed:
bc:e1:24:0f:eb:70:be:1e:c9:cf:5a:1f:6e:09:dc:04:fd:ee:
25:34:7e:78:f6:91:25:80:91:13:8f:8d:f1:17:ea:25:26:2c:
80:cc:ee:46:9e:a8:c4:e9:e9:7f:02:fd:ed:c7:45:f1:c7:67:
fb:ba:44:b6:4f:00:53:69:d3:82:00:3c:f0:5a:fe:ed:a8:4b:
af:da:4a:ca:d1:b1:d7:4c:32:28:ec:0f:00:94:49:c2:a1:46:
bd:ef:a4:b3:a2:d2:a8:f6:21:04:59:29:35:b1:43:2d:fc:2b:
bd:12:d4:8e:96:b4:be:9a:ad:ae:95:63:57:46:6a:3b:64:e7:
5c:ea:22:28:e8:b0:6e:05:58:9a:13:98:46:d2:f3:f7:f4:c5:
4b:f2:76:6d:e8:53:ca:f3:45:4e:42:e9:34:fa:0a:e3:a2:2c:
45:85:46:c0:9e:0d:8e:d6:7b:0b:85:c4:a1:34:f7:70:ad:f9:
cb:f6:27:d4:39:a6:79:1a:06:45:b9:f2:db:9c:5e:27:1c:76:
02:e9:2f:d7:2e:7c:07:d0:fe:ae:c6:95:b5:16:ec:ed:5d:51:
e2:ba:5f:d1:ef:cf:8d:b9:9d:17:e7:ba:60:d0:e1:0c:56:b1:
49:38:ab:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF80N092llWEE7nrmP0j1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTlmMTk3ZjE3MzExN2I3NTMxZmFjYjlhNjM4OTZhMjlk
OWE5YTAwHhcNMjYwNTE2MTQwMTQzWhcNMjYwNTE3MTQwMTQzWjAzMTEwLwYDVQQD
EyhhNTZkNWIwMTU4ODc0MDk4YzEzMGZhZTFjZmViMDMxYTJhZmYxZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XQtfscDDV7JyUDfWPR0N474sr8h
Q0c6qb5pw9Vz5mgwna7i9fsDXqCMWGvt3kRAQDfZRE7ANPI2otFfCad1hI28wwee
j+0a1msyPfG79yC7n7vLC9i9bd2IfT/DV3v/vyk8fMReuhCNxNUg9fJ+Cl/PAuPb
TobT6im/Ok9ETUaRzuQ591h5x1/V7sqjSDrTBTo2gezmFuwhQKK4OpJaxwLH2LZX
SataRvKzzoBHMzdt/Ex223UlIeqTAzNRYLaNhOyuHC6Jn1AHCcyUW044/fPdLjHY
rFLFVbYpmld001uXNu5OfV4iGlVZKRtVhYHNdqN/0F5w/gqX/abpeRthfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVtWwFYh0CYwTD64c/rAxoq/x2HMB8GA1UdIwQY
MBaAFAQZ8ZfxcxF7dTH6y5pjiWop2amgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEt
YjFjYjAzYTNmZDVjLzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEtYjFjYjAzYTNmZDVj
LzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezx4kiWM
/XxebiacoA99IUHtvOEkD+twvh7Jz1ofbgncBP3uJTR+ePaRJYCRE4+N8RfqJSYs
gMzuRp6oxOnpfwL97cdF8cdn+7pEtk8AU2nTggA88Fr+7ahLr9pKytGx10wyKOwP
AJRJwqFGve+ks6LSqPYhBFkpNbFDLfwrvRLUjpa0vpqtrpVjV0ZqO2TnXOoiKOiw
bgVYmhOYRtLz9/TFS/J2behTyvNFTkLpNPoK46IsRYVGwJ4NjtZ7C4XEoTT3cK35
y/Yn1DmmeRoGRbny25xeJxx2Aukv1y58B9D+rsaVtRbs7V1R4rpf0e/PjbmdF+e6
YNDhDFaxSTirAw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:37 2026 by rpki-client