Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: lvW6utxxXO5oMvA9xPcPoX2XD+MCFQB9+OGRvmcLB10=
Subject key identifier: E9:42:35:B9:02:21:9B:D4:A8:56:82:5A:61:4C:7F:27:04:BA:4D:07
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 37392D0B668DDE22AE106A3800878265921654F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: B5
Signing time: Wed 29 Apr 2026 18:55:52 +0000
Manifest this update: Wed 29 Apr 2026 18:50:52 +0000
Manifest next update: Thu 30 Apr 2026 22:44:52 +0000
Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: hRqcxRBauX0g1WDQndP1pL90mMvNav8j/hAMnbKmULc=)
2: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 22:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:39:2d:0b:66:8d:de:22:ae:10:6a:38:00:87:82:65:92:16:54:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Apr 29 18:50:52 2026 GMT
Not After : Apr 30 22:44:52 2026 GMT
Subject: CN=E94235B902219BD4A856825A614C7F2704BA4D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:fe:8c:59:b0:46:dc:95:1d:49:2d:cd:0d:
85:b1:83:92:29:27:71:28:c9:cd:dc:5e:eb:f0:18:
b8:eb:52:ae:0a:8a:33:48:57:30:e1:4a:a0:43:ca:
0c:84:cc:10:a8:c1:1e:44:3d:b3:35:eb:ea:16:64:
94:39:00:b4:74:d9:4b:a3:c6:54:c3:28:84:3c:88:
35:13:d8:e9:a0:fc:94:31:36:e2:9b:a6:93:bf:58:
6a:c6:9d:75:a1:79:ff:85:5f:6c:9e:dc:8a:e4:38:
13:50:9e:41:cd:7b:a7:4f:bb:f2:9a:1c:9f:76:55:
46:31:c4:2b:60:e4:62:d4:5a:15:0c:65:3c:5e:95:
01:e1:6e:e1:8d:f5:db:1f:3e:a9:0d:c5:aa:d4:b5:
c5:bb:5c:62:c5:5d:42:4d:ce:f1:24:e5:6d:dd:49:
40:cd:8f:3e:fa:67:77:f0:c9:4f:01:98:b0:50:a6:
26:8c:e5:81:bf:9d:47:93:91:e3:78:a2:a4:09:b7:
7d:05:5c:c0:93:bd:72:85:47:cf:44:1b:c3:a7:b2:
13:83:2f:c2:d0:79:48:01:9b:47:dc:21:b9:c7:3c:
f0:e4:13:c4:3c:46:e4:ef:09:9a:a7:f6:b7:43:87:
de:de:6e:c1:3d:06:5b:c3:33:b2:50:21:d5:00:83:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:35:B9:02:21:9B:D4:A8:56:82:5A:61:4C:7F:27:04:BA:4D:07
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:9a:f5:c1:2f:73:24:c1:b8:6f:bb:bf:9b:d6:48:df:81:
ec:0c:0e:1d:47:4f:ef:61:94:11:bf:d6:24:f0:cc:7c:da:1a:
c9:48:6c:f1:fe:37:fa:58:42:78:43:a1:38:21:15:eb:b4:5b:
e6:f5:f0:e1:56:2b:73:a5:29:76:cc:0d:a9:d1:21:b6:f2:29:
3e:d3:84:8a:6f:74:86:80:4d:50:a9:ce:97:48:da:df:52:da:
bb:3f:67:28:a0:04:14:08:42:e4:fc:84:7a:ad:9e:10:b3:c4:
57:2d:0b:eb:00:55:a1:55:f6:6d:ed:1d:fe:38:5c:e2:fe:af:
cf:a1:c8:fd:ea:07:bd:58:7f:29:f9:36:65:34:34:92:e4:78:
5d:9d:fd:c9:72:9d:c4:ec:d9:a7:c5:18:56:fd:0a:10:ec:42:
32:dc:91:21:b0:33:e0:cf:92:10:56:d7:da:84:c7:9e:88:49:
60:73:a0:35:fb:61:a3:e0:10:e4:c6:0b:e4:2a:74:b4:83:05:
6e:96:a8:03:32:a5:c3:fb:22:04:5a:a5:91:0a:84:e7:94:8f:
d0:27:9b:2e:46:90:b8:32:c8:b3:e8:5f:29:d4:1f:8f:65:44:
a0:28:b6:12:f4:43:01:d7:13:af:e0:9f:7f:1d:db:18:41:f0:
18:30:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:56:21 2026 by rpki-client