
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: ESMivao3xD1vaRrRzXQK3Ezq+pE2V3bbU6DufzxmPGs=
Subject key identifier: 5A:84:A8:53:B1:30:7E:0E:B6:AC:36:9F:64:90:CC:63:E6:38:9C:61
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 01A0D012777994AC25D81186CB0BBF0A6E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 21:01:06 +0000
Manifest this update: Wed 23 Sep 2026 21:01:06 +0000
Manifest next update: Thu 24 Sep 2026 21:01:06 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: 35CDEJdj3ArzX/ymSGvc4E0Ezq3+eKaPIXVQuc7Tovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:77:79:94:ac:25:d8:11:86:cb:0b:bf:0a:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Sep 23 21:01:06 2026 GMT
Not After : Sep 24 21:01:06 2026 GMT
Subject: CN=5a84a853b1307e0eb6ac369f6490cc63e6389c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:fd:1e:56:b9:61:52:ae:8e:24:0c:ba:c4:
c7:86:3c:00:3a:13:97:ce:95:db:f2:3c:3b:7f:b7:
03:da:85:88:21:db:3c:5f:b5:1d:ed:87:ce:c5:58:
78:76:bd:c9:23:20:3f:ff:f1:33:2d:1c:e2:3d:6f:
6e:9c:91:82:21:d1:e9:f8:3e:3e:6d:9d:ae:d3:0f:
cf:91:fd:06:f7:2a:e2:f5:36:72:63:c7:26:72:35:
a4:07:8e:ca:ac:a7:c1:a4:41:29:75:04:05:f4:42:
2b:e5:ee:8c:44:95:39:de:6f:c9:bd:c9:8d:94:21:
d0:08:da:6f:58:a9:d2:81:3c:cf:b0:82:7b:df:36:
11:3c:c1:0e:ca:b9:a7:a2:2a:cc:8c:e0:88:8d:46:
96:5f:3e:89:d2:0c:3b:bb:0c:44:5d:b3:55:35:e8:
ff:59:2d:a7:7e:98:48:13:bf:31:97:ef:34:1a:60:
15:8b:c9:4b:44:b8:92:1f:0b:01:74:ef:a8:ef:95:
bc:68:68:5d:22:42:00:c5:27:15:99:7d:d3:00:58:
76:de:a4:0f:21:7d:44:d8:ce:f4:47:26:f8:e0:c8:
13:e6:4d:2c:e4:ea:1e:b8:62:4c:60:ed:e1:52:a9:
ca:6d:35:fa:2f:d8:5b:17:31:c0:7c:81:d5:73:45:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:A8:53:B1:30:7E:0E:B6:AC:36:9F:64:90:CC:63:E6:38:9C:61
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6c:ba:79:a0:74:fa:08:51:6f:9f:aa:1f:e4:8d:41:49:27:
ba:dc:0e:df:63:79:95:24:2c:94:20:90:f2:7b:cc:f0:31:e1:
ea:5e:72:01:21:cd:fc:5e:b1:2e:cb:1a:4f:db:83:c8:71:86:
f5:2c:70:08:0f:0a:76:df:fe:75:c5:73:ab:d5:19:93:a3:8d:
5a:d9:e0:02:84:07:a2:87:22:0d:a4:d6:a9:61:98:0e:d0:bd:
77:eb:23:5f:31:eb:4e:1f:74:89:d6:41:b3:20:c7:35:1d:18:
36:68:83:5f:07:5c:f4:c1:f5:d1:5c:06:44:0d:5c:9f:92:75:
9a:6b:52:85:02:43:82:2a:61:db:21:c9:aa:68:94:c0:ea:89:
21:bf:77:2e:9d:74:5e:89:3d:d8:da:29:94:c8:fd:9b:63:8c:
ef:32:4a:ae:b8:d7:f2:72:8a:99:50:c2:35:0c:29:f0:23:bc:
0f:8b:a8:69:b1:57:e7:79:a2:83:73:a0:e9:53:16:7c:8a:3c:
30:cd:44:b0:53:97:36:e8:20:81:b2:20:1e:14:26:a2:0e:34:
cd:0c:97:b8:42:f0:30:94:d8:44:4b:5d:1c:87:4a:8c:f1:af:
8b:d6:f5:b8:a0:0d:72:75:87:f1:da:ee:3f:2d:6c:1c:59:25:
b6:52:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:32 2026 by rpki-client