Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
File: BB71CB15135EC006B13635B36AA5A30446B52310.mft (raw, json)
Hash identifier: 1u8v7rzErrH5c6H+a5ocTiBm+e+emLRmpxV5DcWYQWY=
Subject key identifier: 28:9E:75:EE:9A:73:D8:2B:11:92:AC:F0:34:C2:DD:4C:45:27:97:68
Authority key identifier: BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
Certificate issuer: /CN=bb71cb15135ec006b13635b36aa5a30446b52310
Certificate serial: 1567A17780ECC02BA70BBB389B4B82A5C5C5D2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
Manifest number: 9B
Signing time: Sun 29 Mar 2026 07:53:06 +0000
Manifest this update: Sun 29 Mar 2026 07:48:06 +0000
Manifest next update: Mon 30 Mar 2026 10:31:06 +0000
Files and hashes: 1: BB71CB15135EC006B13635B36AA5A30446B52310.crl (hash: Hz/T4gmGKEyAUYQTnkTscckMwdnDkOi4d4dvAxzYr88=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.crl
rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:67:a1:77:80:ec:c0:2b:a7:0b:bb:38:9b:4b:82:a5:c5:c5:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb71cb15135ec006b13635b36aa5a30446b52310
Validity
Not Before: Mar 29 07:48:06 2026 GMT
Not After : Mar 30 10:31:06 2026 GMT
Subject: CN=289E75EE9A73D82B1192ACF034C2DD4C45279768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:04:a7:d9:eb:78:ec:7a:9a:b8:46:c2:82:
f6:2b:88:09:fe:fe:e9:09:b0:5d:ab:0c:9e:80:0b:
2d:51:31:2d:a0:5d:ea:09:60:e3:5e:48:a8:77:51:
47:5b:8a:65:98:9d:bc:64:6a:bd:73:4d:c1:f3:50:
4a:07:65:d1:c9:4c:ab:e1:ff:b4:fc:b5:db:8b:73:
4a:ea:1b:6b:93:bb:6a:40:08:45:3c:08:3b:10:48:
d7:10:39:99:a2:c1:3b:bf:6e:e4:4b:19:5b:0d:a0:
fd:7e:6b:9d:e3:e5:47:49:80:84:10:df:62:d8:32:
83:7c:f5:aa:3d:79:a2:0b:59:e7:9f:19:a8:06:9f:
a1:f8:8c:d8:91:2c:90:a5:1a:f8:5e:f9:7f:eb:88:
7c:44:b0:3d:89:0a:e1:e7:5a:ad:57:f5:8e:76:ae:
ee:67:35:c2:25:6b:ca:43:b4:5d:aa:0c:cc:e2:ba:
11:4a:cb:91:3e:0e:22:ae:c7:00:bb:fc:3e:fa:68:
6b:ba:b1:22:c5:cd:83:a3:5f:af:f3:08:42:64:37:
cd:17:bb:88:b3:37:46:7e:39:79:46:49:b5:8f:be:
bc:32:42:fd:08:40:6a:e2:9b:aa:1e:5c:bc:6e:d1:
68:bc:67:3e:16:27:9c:9b:f0:4a:e5:cf:b5:0f:8c:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9E:75:EE:9A:73:D8:2B:11:92:AC:F0:34:C2:DD:4C:45:27:97:68
X509v3 Authority Key Identifier:
keyid:BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:40:ca:22:5b:86:8e:e5:99:27:8f:e0:14:a3:9c:92:1b:2f:
59:19:b9:b0:70:dc:15:5e:b5:3c:2e:cb:c2:0d:af:40:7b:4f:
e4:e9:d2:f8:24:3f:9d:d1:e3:58:ee:5d:7c:2b:25:22:a2:1a:
4b:8d:92:6f:7e:e0:a1:ca:87:81:fe:16:93:f1:f7:c0:9c:bc:
a4:1a:a9:a1:b9:cd:33:6b:72:8f:f1:83:d4:1c:22:b0:6a:62:
b1:fe:04:09:1f:ca:2a:f5:cb:a5:4b:ef:6b:92:08:4f:68:35:
a9:48:82:6b:af:5c:cc:41:35:72:90:0f:19:d9:71:07:41:bf:
9c:dc:e1:5b:93:df:b7:f2:9c:a7:a6:ff:7f:08:16:fe:7e:f3:
5c:74:d1:ae:36:5b:72:73:a8:b6:74:b4:96:cf:12:56:fe:06:
47:3f:31:18:ff:cf:dd:31:aa:ba:17:d6:2a:e8:60:94:6f:6f:
26:4e:9f:7f:14:56:6a:86:ba:51:03:d2:00:97:3d:ff:b6:97:
26:fc:1d:ad:4f:46:42:5b:d9:7d:65:06:85:c9:22:f8:33:33:
b6:21:d3:b9:36:b3:90:d0:99:68:4f:4f:9a:4b:4e:db:a0:f1:
e0:d0:6f:ab:68:d8:70:a1:63:23:33:35:d4:87:75:18:6c:7b:
7c:e7:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:39 2026 by rpki-client