Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: qeEJi3l+Z0upYLvSF6pZmT7XgmUf9GLgA9AcRPrssnw=
Subject key identifier: 8E:7B:F0:AC:D7:6E:45:C5:E5:B9:1F:75:0E:37:43:37:EC:D7:C5:B2
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 623AD74E584687C0B25C143BFF425AD92E83860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: 72
Signing time: Wed 11 Mar 2026 03:21:20 +0000
Manifest this update: Wed 11 Mar 2026 03:16:20 +0000
Manifest next update: Thu 12 Mar 2026 04:29:20 +0000
Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: AfQpJ0q+KBl9o9zNIlab9CLXZRrWpR3A118nyY7MQXg=)
2: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3a:d7:4e:58:46:87:c0:b2:5c:14:3b:ff:42:5a:d9:2e:83:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Mar 11 03:16:20 2026 GMT
Not After : Mar 12 04:29:20 2026 GMT
Subject: CN=8E7BF0ACD76E45C5E5B91F750E374337ECD7C5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:81:fc:0a:65:7a:b0:d3:35:07:36:23:5c:
d7:a3:a6:da:b6:6f:0c:1a:a1:cd:06:63:66:bc:e1:
de:24:97:12:94:d7:b4:16:10:d5:c2:35:ee:f3:d9:
9b:ea:28:73:51:c6:ab:c2:ae:c9:95:25:ac:1d:f6:
6d:54:86:27:f1:27:eb:d4:03:29:44:ca:f8:e3:a0:
53:80:01:00:10:8d:8d:db:c7:ee:61:ec:07:38:27:
17:fa:e8:e8:27:16:67:2c:43:b1:b6:2f:d1:22:da:
cb:94:24:f0:c6:bb:07:fe:fa:25:62:8f:ce:7e:15:
93:99:3f:9a:73:06:59:84:4b:a5:f5:b1:f5:5c:95:
d1:7f:fd:c2:2d:82:d9:9a:a1:18:65:ae:37:db:16:
7b:86:cf:32:13:37:7b:7f:32:87:df:0a:50:ee:e5:
31:b8:43:a8:ac:76:3b:76:5f:ea:d9:db:bd:bb:b9:
07:fc:5e:bf:04:1c:88:83:f0:1e:48:54:a5:fc:55:
10:0c:32:e8:ad:f4:e4:c5:6f:2e:ff:59:85:93:55:
b8:14:3e:93:73:67:b9:63:42:b1:c9:15:d0:c1:22:
aa:d4:c0:61:04:d9:1e:4d:5a:72:ae:46:f3:c8:58:
e3:d8:c0:27:d1:2d:4b:0d:aa:f4:67:d4:9a:7f:fc:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:F0:AC:D7:6E:45:C5:E5:B9:1F:75:0E:37:43:37:EC:D7:C5:B2
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:6a:a4:ae:8c:2b:92:31:97:b4:c8:0d:4b:3e:ef:45:a1:
7b:72:e9:2a:e7:5e:6b:10:ed:e2:88:68:b9:b8:37:a0:aa:d3:
52:13:93:4b:73:27:ab:15:e1:79:6d:bf:5c:fc:95:c0:5c:d9:
b7:aa:bc:5b:b5:34:94:2c:78:a3:71:65:38:e8:6e:17:42:9e:
cd:50:18:9d:19:b6:e1:80:64:d6:f3:e8:eb:a9:64:c7:a6:7d:
de:1c:65:11:18:3a:33:c8:f0:11:37:d5:67:9e:da:ae:c6:d9:
af:98:e7:e1:01:a4:3a:80:3e:1d:cb:b6:cf:62:3d:32:a1:78:
91:c0:81:5e:6c:74:f3:4c:0e:11:27:09:44:81:95:64:cc:d8:
7f:f1:a6:23:6f:49:c0:b7:23:0a:5e:e2:96:8b:54:bb:db:32:
f6:de:6f:f8:ee:87:da:a7:77:e6:58:f2:b4:45:b0:07:02:a5:
91:76:57:0b:a0:c8:79:f1:ab:8d:3d:f9:c2:ba:1d:da:46:51:
63:f3:c6:9a:32:1a:46:6b:f9:d8:16:21:37:73:ce:7d:58:b8:
11:d4:64:61:d7:85:0d:2f:98:3d:50:9c:64:13:69:6c:cf:44:
39:14:5f:81:22:4e:9f:45:3e:74:19:3d:d8:5d:39:e5:6c:1b:
ed:61:eb:d4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYjrXTlhGh8CyXBQ7/0Ja2S6DhgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4ZTg3ZjM1MzEyN2NjOTIzYjFjYzFmOTc4Njk5NTM3
ZWZhZDY2ZDAeFw0yNjAzMTEwMzE2MjBaFw0yNjAzMTIwNDI5MjBaMDMxMTAvBgNV
BAMTKDhFN0JGMEFDRDc2RTQ1QzVFNUI5MUY3NTBFMzc0MzM3RUNEN0M1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+oH8CmV6sNM1BzYjXNejptq2
bwwaoc0GY2a84d4klxKU17QWENXCNe7z2ZvqKHNRxqvCrsmVJawd9m1UhifxJ+vU
AylEyvjjoFOAAQAQjY3bx+5h7Ac4Jxf66OgnFmcsQ7G2L9Ei2suUJPDGuwf++iVi
j85+FZOZP5pzBlmES6X1sfVcldF//cItgtmaoRhlrjfbFnuGzzITN3t/MoffClDu
5TG4Q6isdjt2X+rZ2727uQf8Xr8EHIiD8B5IVKX8VRAMMuit9OTFby7/WYWTVbgU
PpNzZ7ljQrHJFdDBIqrUwGEE2R5NWnKuRvPIWOPYwCfRLUsNqvRn1Jp//EERAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUjnvwrNduRcXluR91DjdDN+zXxbIwHwYDVR0j
BBgwFoAUu46H81MSfMkjscwfl4aZU3761m0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzAvQkI4RTg3RjM1MzEyN0NDOTIzQjFDQzFGOTc4Njk5NTM3RUZBRDY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0Nkg4MU1TZk1ranNjd2ZsNGFaVTM3
NjFtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMC9CQjhFODdGMzUzMTI3Q0M5MjNC
MUNDMUY5Nzg2OTk1MzdFRkFENjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6hqpK6MK5Ixl7TIDUs+
70Whe3LpKudeaxDt4ohoubg3oKrTUhOTS3MnqxXheW2/XPyVwFzZt6q8W7U0lCx4
o3FlOOhuF0KezVAYnRm24YBk1vPo66lkx6Z93hxlERg6M8jwETfVZ57arsbZr5jn
4QGkOoA+Hcu2z2I9MqF4kcCBXmx080wOEScJRIGVZMzYf/GmI29JwLcjCl7ilotU
u9sy9t5v+O6H2qd35ljytEWwBwKlkXZXC6DIefGrjT35wrod2kZRY/PGmjIaRmv5
2BYhN3POfVi4EdRkYdeFDS+YPVCcZBNpbM9EORRfgSJOn0U+dBk92F055Wwb7WHr
1A==
-----END CERTIFICATE-----
Generated at Wed Mar 11 08:14:56 2026 by rpki-client