
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: jbQnH61O3glVIh3PimgELxW3UdXDXMgkrEKokOtVMAo=
Subject key identifier: 29:96:91:81:91:8B:6D:88:7B:0E:D5:56:E9:76:A0:36:EB:B5:4E:DB
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 019D3AC1229776C6AD45AC8318D8985F0CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0E80
Signing time: Sun 29 Mar 2026 18:00:28 +0000
Manifest this update: Sun 29 Mar 2026 18:00:28 +0000
Manifest next update: Mon 30 Mar 2026 18:00:28 +0000
Files and hashes: 1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: RKt7iJH5n0H/J7HbmbUktavXjNnIBJmtQXQ9YSI86Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:22:97:76:c6:ad:45:ac:83:18:d8:98:5f:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Mar 29 18:00:28 2026 GMT
Not After : Mar 30 18:00:28 2026 GMT
Subject: CN=29969181918b6d887b0ed556e976a036ebb54edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:16:3b:c4:d1:20:b1:bb:a8:24:b4:14:63:
37:41:7b:03:eb:56:5b:f0:e8:23:90:b9:62:15:50:
fa:7d:65:d0:d7:7b:7c:94:d7:d7:9c:8f:26:e8:6b:
bf:b2:4b:3b:4f:04:5a:27:13:fe:80:73:a1:1e:bb:
b7:f3:14:74:8d:e8:c6:0c:61:6d:d9:b7:bc:99:40:
1b:71:6e:a2:ad:e2:10:bd:41:1e:32:f2:fe:0d:5a:
6a:d2:f7:09:14:81:12:79:2e:08:95:75:04:fb:93:
03:bb:7f:de:2e:af:76:b3:fd:72:11:38:c7:2a:35:
38:67:dc:93:a1:f1:5d:5f:25:9f:b6:3f:46:17:ea:
1c:ed:c4:61:09:2e:c5:21:9e:96:69:9b:81:48:20:
85:7f:e7:ce:dd:6c:24:3b:06:51:2b:82:76:37:6d:
f6:60:a2:6e:79:ab:01:8f:46:f3:ac:66:cb:96:35:
82:06:cb:4f:a1:c6:8b:77:79:b2:b8:d0:7f:a4:a1:
ec:24:a5:31:5a:10:1e:40:c9:b3:52:ee:28:09:95:
10:b4:78:4c:14:2e:73:f2:53:8a:51:84:83:5e:ab:
39:0c:d3:61:e8:21:c4:ee:e4:01:df:75:b4:a4:9d:
21:2b:72:ee:e8:6f:54:d8:d0:e3:d6:ea:3d:c2:04:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:91:81:91:8B:6D:88:7B:0E:D5:56:E9:76:A0:36:EB:B5:4E:DB
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:39:ff:e7:c3:71:33:07:81:79:6b:90:bf:7d:51:ae:66:95:
00:44:f1:0e:99:9c:0e:04:21:8c:d6:dd:4f:ed:83:a7:23:4b:
b7:ff:e5:6b:5e:db:4d:d8:35:c4:47:4a:cc:7d:8b:15:40:0c:
ae:10:b6:d9:9d:8f:e0:c1:7e:9d:92:96:56:29:ca:5d:c3:a5:
d9:dd:61:90:fb:db:5c:a3:87:70:63:5f:57:9d:04:07:f0:d4:
92:5a:e9:d2:b0:8b:d5:d9:5a:51:c8:c4:a9:89:1b:8b:13:e2:
78:05:3b:ba:73:ba:d8:98:db:77:aa:9d:1f:30:9a:24:8d:0a:
a4:1f:53:e4:ed:02:f4:1a:d2:41:ea:ea:34:46:66:e9:c4:46:
5e:7e:c4:b8:8b:c5:1c:16:b5:fd:d5:0c:66:18:80:69:b0:a2:
08:4c:bb:b6:f2:8e:32:b7:12:28:42:9d:4d:fb:e7:ca:23:01:
c4:aa:ad:58:ee:b8:66:7f:2e:0c:0d:70:ef:c0:f3:0d:f9:59:
21:a4:10:e8:b8:3c:db:d0:d5:bd:f9:19:b4:33:6f:b8:3d:ac:
52:e7:e5:c8:d0:d6:53:74:a6:48:8f:fd:03:17:36:7b:cf:26:
de:67:c0:df:28:19:c6:e0:ec:11:bb:eb:0f:a0:79:d4:25:6b:
a2:35:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:43 2026 by rpki-client