Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: 3Z+bIQaIF0/otBaJkd57M+zHSWUENutAt5xF0ROcSuc=
Subject key identifier: 43:5C:2D:06:35:77:9F:B9:37:B0:6F:71:B8:9C:C5:15:52:B0:A0:6D
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 4FDAF2199ABFA51C5B898D50A5A49D3407F6228A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: 0191
Signing time: Mon 05 Oct 2026 09:32:12 +0000
Manifest this update: Mon 05 Oct 2026 09:27:12 +0000
Manifest next update: Tue 06 Oct 2026 12:29:12 +0000
Files and hashes: 1: AS201386.asa (hash: OYRXpkyxncvi2a2N61iwOFYtIw9TA6/nEOruPTD6Q+k=)
2: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: Kgr+irxHp2jZ9nG3tVwXtpeDtJpKYw0VusTywo49CIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:da:f2:19:9a:bf:a5:1c:5b:89:8d:50:a5:a4:9d:34:07:f6:22:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Oct 5 09:27:12 2026 GMT
Not After : Oct 6 12:29:12 2026 GMT
Subject: CN=435C2D0635779FB937B06F71B89CC51552B0A06D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:86:7b:fe:4e:88:73:cc:9a:19:45:6f:74:
f6:bc:48:92:a9:88:19:4f:06:09:db:f1:eb:c9:c8:
89:17:ec:80:7b:5a:1b:98:98:bc:de:ae:7c:c7:ab:
d4:68:33:89:1e:cb:1b:90:c3:57:79:b8:c3:36:2f:
65:52:6a:23:f5:54:1c:b0:20:e5:b6:25:59:70:1f:
d2:d1:8a:a8:d2:e8:25:ea:2d:73:47:02:a1:01:f9:
cc:80:67:38:3d:b1:b1:47:bf:7a:86:53:ed:2e:a9:
db:04:5b:49:33:1e:d1:55:52:64:6b:48:ed:27:80:
7c:e4:7b:4a:f0:14:3c:ae:f0:8c:84:b7:b5:63:d7:
b3:87:6c:9d:12:4f:89:71:0e:eb:90:c5:bd:58:6a:
3e:dd:77:a6:a4:16:48:00:80:5f:39:1e:04:c3:cc:
b6:4f:c6:54:a5:31:43:d2:bd:36:5c:0b:cf:7c:f3:
f6:7b:3a:8a:c1:d6:1a:19:ad:92:8d:17:d6:7c:dd:
46:5e:69:5c:20:33:97:e0:99:20:e6:1b:c7:32:51:
04:9b:1b:e0:42:dd:0e:29:03:f1:06:d9:28:53:8d:
a8:f5:91:53:e5:5a:54:d5:5e:ca:8a:d0:2b:c8:21:
ca:8d:00:86:b4:64:5c:85:a7:71:b6:64:de:d4:e7:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:2D:06:35:77:9F:B9:37:B0:6F:71:B8:9C:C5:15:52:B0:A0:6D
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bb:20:13:9c:b9:86:c5:42:8c:cc:08:6a:0a:c6:d7:98:51:
a8:55:c1:61:fd:b0:3b:0e:e6:21:88:20:95:cd:74:b5:21:95:
e1:91:48:6f:bf:54:70:78:56:78:ae:d4:0f:8b:91:bf:7b:30:
ee:c3:a9:c0:bd:68:4a:64:08:f7:21:44:37:a7:22:86:6f:e8:
68:c1:74:c1:0e:d8:f6:49:75:e2:96:86:60:e3:00:0d:da:11:
95:9d:02:ff:ff:2c:70:5b:7a:1b:ef:b4:f1:56:1f:66:9d:63:
32:0c:03:9b:d3:29:e3:65:a9:ee:ab:b8:24:e3:a2:76:f2:04:
24:cd:a1:c4:af:06:0d:c0:34:64:de:c8:11:f0:19:98:8a:ff:
b2:6c:10:cb:de:e3:0f:df:47:82:6c:da:90:34:46:cb:77:2e:
90:a3:47:47:c2:98:d3:57:28:30:11:e6:b3:ee:87:a1:8c:6c:
ce:0f:e1:92:a9:52:e9:ac:0a:c0:e2:74:81:40:3a:9f:c2:27:
5b:00:dd:1d:69:4a:28:01:9d:27:88:61:7d:9a:17:e1:06:ac:
62:b8:74:e6:a5:9a:b4:d4:47:37:5b:69:cc:8a:3a:7e:03:7a:
ec:8e:7e:c7:3c:36:ce:b3:a0:62:26:34:27:01:ac:ab:90:db:
7e:10:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:29 2026 by rpki-client