Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: LOwqlcOdLqptsxuEOHd/NdAX3UOVVQkpPTFsokRMxZ4=
Subject key identifier: FF:6A:87:62:0C:42:09:09:7C:C0:1C:B5:7C:34:55:1E:85:BB:0A:64
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019E2F6000F20FE118A9CF8B603329815413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 17A5
Signing time: Sat 16 May 2026 06:01:21 +0000
Manifest this update: Sat 16 May 2026 06:01:21 +0000
Manifest next update: Sun 17 May 2026 06:01:21 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: YI3j8li7tpDHmfcmeA4EjSR/wPKoykbBV6Cu6kpkcXE=)
2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:60:00:f2:0f:e1:18:a9:cf:8b:60:33:29:81:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: May 16 06:01:21 2026 GMT
Not After : May 17 06:01:21 2026 GMT
Subject: CN=ff6a87620c4209097cc01cb57c34551e85bb0a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:e2:e1:79:35:68:c9:b4:da:f8:4d:7d:ef:
39:0c:f7:35:76:45:59:93:a5:77:3d:e3:e1:6d:03:
67:9d:ec:e6:c9:5d:c4:1f:ee:59:a5:9a:01:db:db:
ee:bf:1a:4e:59:0f:94:78:30:a7:d4:81:8f:95:20:
3a:9b:f1:aa:47:a5:9f:44:44:a8:7e:b3:68:3b:bc:
bc:0d:1c:50:33:3f:08:33:80:0c:25:48:45:01:35:
ea:e0:29:12:2e:ac:24:46:04:ed:cc:ed:49:5c:16:
fe:bb:87:95:ba:ba:7c:7b:b1:6e:41:fe:ff:a8:4f:
28:8f:be:14:ec:8b:f2:a7:a8:bb:82:59:d6:83:47:
d9:d1:76:51:8c:09:e2:16:5f:f0:79:61:c2:c4:d7:
1f:23:e0:80:02:16:80:28:9b:cf:bd:f9:03:3b:67:
84:7b:a3:b6:b4:42:a3:a1:22:dc:6e:de:f1:c4:5c:
48:fd:fb:86:08:2a:bc:6c:98:ce:53:69:83:a4:08:
a7:4e:fb:44:9c:71:9f:c6:5e:1d:58:dc:d5:9a:b1:
70:18:64:3e:62:32:a4:69:fd:6d:cb:38:0c:08:fa:
4a:93:45:a6:55:75:48:8c:bd:7f:28:29:4e:d6:9c:
41:82:96:9d:15:ca:e9:9e:83:f2:dd:a6:69:76:26:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6A:87:62:0C:42:09:09:7C:C0:1C:B5:7C:34:55:1E:85:BB:0A:64
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:67:e2:52:8e:db:f0:6b:82:ce:36:27:4d:92:e0:a9:69:
27:7f:bc:79:13:ea:af:a1:03:65:85:63:1e:ab:0c:36:eb:ff:
52:95:36:41:cd:2a:e8:79:cd:c9:34:59:10:27:ae:4e:16:16:
f1:f9:58:78:55:ae:14:34:38:7a:2c:e9:c9:76:81:cd:fe:ff:
34:b2:2d:4e:ac:34:6f:86:39:ef:93:7a:ac:ce:b3:c1:ac:0f:
03:ef:c4:32:92:d7:d0:e7:0c:3a:2c:62:a1:18:02:08:48:fb:
88:3c:c2:67:11:2f:2d:a5:0d:c1:53:9f:87:03:d6:57:50:ab:
a6:fe:36:cc:05:c7:48:3f:3a:1e:b9:6f:2e:91:17:75:bf:37:
e3:7f:2a:09:8d:7b:d3:0d:aa:c5:e7:ec:52:bb:31:5f:87:21:
18:68:d1:59:1c:ce:32:a9:06:0b:8b:bc:3b:d4:30:9b:33:cd:
eb:33:64:79:b2:43:00:ce:ad:da:1c:87:84:a5:c4:1d:cd:2b:
fd:cb:7e:9b:49:d3:78:40:42:a5:88:12:e4:61:73:8b:05:71:
a5:d3:b2:b3:ae:77:fe:c1:82:6f:8b:06:21:14:5c:1d:a5:1c:
38:0e:70:42:aa:71:5b:73:d2:e2:16:ce:3c:f6:b4:60:5f:f8:
50:26:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:07 2026 by rpki-client