Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: d6sKfcUbSnZuRgSx2CjWVkHOGV5lZr5XpgJc71NXqmw=
Subject key identifier: EF:8B:15:E4:77:73:82:48:A9:8B:63:26:6C:8C:A4:EB:2C:52:FB:F5
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019D37F74BE2BE5274A860C40B61ED58A95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0FB7
Signing time: Sun 29 Mar 2026 05:00:46 +0000
Manifest this update: Sun 29 Mar 2026 05:00:46 +0000
Manifest next update: Mon 30 Mar 2026 05:00:46 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: zG0nm1FG+klxve8+SM6z57F4QO7R+4w9xlmHxjTtois=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4b:e2:be:52:74:a8:60:c4:0b:61:ed:58:a9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Mar 29 05:00:46 2026 GMT
Not After : Mar 30 05:00:46 2026 GMT
Subject: CN=ef8b15e477738248a98b63266c8ca4eb2c52fbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:a0:a7:b0:a8:5a:c1:2f:79:d7:b5:02:48:
e0:42:b8:d6:a7:ea:6d:b4:ca:2b:e6:bb:d8:4d:3c:
d5:2e:ca:80:c7:5d:bd:2f:1d:f3:8b:d2:a8:3c:89:
bc:83:3f:45:2b:52:b5:c8:a5:17:59:51:fc:c9:4d:
9d:b4:1b:13:0f:5a:e0:24:77:da:c8:03:f3:a2:f9:
71:b0:55:b7:8b:bc:17:49:e7:8e:77:d4:96:61:de:
74:d2:6c:6b:61:df:10:98:a7:75:3a:18:fb:6a:8e:
f1:80:5f:f9:84:6e:91:90:60:ea:1f:ea:1c:24:c1:
d3:85:90:9a:34:5a:ee:0f:f3:af:b5:32:61:57:23:
9a:23:91:9c:5c:20:8a:88:bc:aa:a2:55:ba:26:15:
94:c9:b6:c4:28:72:f1:12:9c:0a:e3:db:5e:ac:73:
27:9e:9e:a9:1a:9d:65:38:4a:fe:37:63:45:70:02:
ce:d4:d5:06:d0:b6:fe:f3:bb:d9:ac:f2:b3:0a:6b:
f1:62:9c:4a:56:9f:5c:79:5b:c7:d7:75:30:91:cf:
c2:62:d7:c1:54:5f:c0:d0:84:f6:d4:cd:3d:76:d9:
e0:8d:4d:6c:68:b3:14:c9:44:61:b6:89:63:91:0b:
9f:d7:11:b9:e8:20:1f:b1:67:72:a3:81:cd:8b:9d:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8B:15:E4:77:73:82:48:A9:8B:63:26:6C:8C:A4:EB:2C:52:FB:F5
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9f:aa:0f:58:08:b5:db:99:35:6d:3d:4a:6e:6b:13:34:0e:
e6:e7:ef:01:aa:f9:52:4c:51:db:28:8b:01:7d:87:c9:7c:96:
2c:27:fd:10:cf:9e:28:fd:6f:82:24:78:4b:60:a5:39:3e:11:
6c:e6:01:ef:53:9b:ab:b9:51:ad:70:1b:2e:dc:57:5c:3e:b6:
dd:1a:14:18:24:3c:9f:5e:ae:65:79:17:22:be:f1:9d:49:b0:
c1:6b:3a:35:70:b3:9d:57:29:d0:93:76:0d:49:e4:72:2c:dc:
f1:75:50:50:3c:79:75:2f:24:ea:fc:2d:ee:58:b2:02:97:d4:
a0:30:f1:c3:74:6d:ed:0d:1f:6a:77:99:c0:e1:21:c3:e3:10:
ef:97:e1:78:8f:16:1b:ca:d2:d0:d8:9e:cf:13:9d:0b:eb:b2:
db:35:cd:b6:4c:51:06:cd:c5:8d:48:3d:53:25:b9:76:ec:07:
e1:1b:5a:c1:1b:ca:38:41:7e:a0:84:71:bb:5f:e8:3e:f7:f8:
7e:42:11:cb:69:c2:ce:57:29:5c:7e:11:00:8b:a9:db:a0:3f:
6e:c8:a2:5c:9b:61:a2:52:2b:8c:7b:bd:b5:10:eb:03:99:e0:
ae:a3:ae:3e:d7:95:63:36:90:ff:60:4e:94:d9:0d:46:e3:97:
87:e2:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:51 2026 by rpki-client