
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: dA7+cEViTTdx1GH/KZONFJeT/D8jQFCw9E/rx7eBFfk=
Subject key identifier: C1:4F:48:90:35:72:4E:C9:D8:60:71:AE:99:30:7E:F4:E3:A0:72:2C
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019E1DC7810219F0B5EC6FBFACAE1D7D52FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1917
Signing time: Tue 12 May 2026 20:01:14 +0000
Manifest this update: Tue 12 May 2026 20:01:14 +0000
Manifest next update: Wed 13 May 2026 20:01:14 +0000
Files and hashes: 1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: a4GJO03XfBtBswtU7TkTeWQjUSjiZ7sfStawDr0MkEY=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:81:02:19:f0:b5:ec:6f:bf:ac:ae:1d:7d:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: May 12 20:01:14 2026 GMT
Not After : May 13 20:01:14 2026 GMT
Subject: CN=c14f489035724ec9d86071ae99307ef4e3a0722c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:38:05:82:3f:78:a8:ce:c5:01:91:0e:21:
1f:9f:46:13:85:da:4b:e8:da:c0:06:79:c2:d2:83:
d1:ab:44:ed:61:12:c7:8a:72:96:4b:e9:31:89:46:
52:de:3e:19:4f:36:f1:8f:48:0a:cd:e7:8b:d8:df:
1f:6e:e3:d2:02:22:ed:a7:f6:f9:b1:1c:83:8a:01:
d8:38:5d:e4:ab:37:d1:19:f9:ae:2d:ef:8f:b2:d9:
0e:eb:41:01:be:43:f3:1b:20:c8:77:98:59:56:79:
18:f9:08:6b:12:c7:fa:16:86:0b:85:a2:2a:7e:75:
7c:ef:cf:8d:fe:83:f2:f5:45:6f:9f:9b:35:37:65:
94:81:dd:4f:df:2d:f4:ef:64:d8:e4:7d:af:04:f4:
4d:41:c4:f5:6d:14:58:bd:d2:bb:ed:ce:d3:3a:83:
fd:18:e6:88:27:3f:e6:82:50:3f:8d:f8:43:3d:b3:
43:f2:36:10:6a:88:4d:d2:23:d2:bc:1c:20:26:d8:
ef:42:76:47:e7:4a:bd:e0:33:23:a3:6c:9a:9c:0a:
31:2e:9d:fb:23:13:81:e3:bb:7e:38:3d:19:45:49:
89:8f:93:d3:c2:f5:66:e0:79:c4:2b:45:89:8d:81:
56:5c:54:52:b2:fd:2e:12:25:ab:ab:4c:23:91:43:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:48:90:35:72:4E:C9:D8:60:71:AE:99:30:7E:F4:E3:A0:72:2C
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:78:fb:3f:1d:1e:02:4a:55:12:37:33:38:ac:ee:97:0f:10:
40:ea:c1:41:f9:86:a5:16:1b:49:50:9c:6f:4b:c3:fe:22:3c:
77:db:87:41:31:f0:66:91:e1:fd:b0:9a:6c:4f:06:76:db:fa:
09:ef:ef:4d:4a:10:e9:a1:76:f1:aa:a5:e3:30:79:22:d2:e6:
11:d8:bc:34:b9:ab:3c:e2:52:66:96:99:22:e2:69:8d:86:e7:
c8:55:6d:63:4f:0f:9b:1f:d3:bc:3e:e3:4e:5f:a6:1c:83:6f:
6e:00:03:01:35:b9:25:1d:c0:70:6a:41:fe:8f:c1:d1:21:38:
06:b7:3d:c6:69:ad:b8:c5:a6:be:fd:ad:e9:2b:ae:a9:78:7a:
7d:c2:ab:f0:01:27:d8:92:4e:95:36:07:ad:39:4e:1c:cc:8a:
7c:97:64:b7:4f:1b:98:a0:d0:08:d1:ce:34:0d:5a:21:30:87:
9d:c2:ae:7b:ed:86:8e:23:cf:86:79:ae:bb:9e:0b:68:f8:2a:
10:7b:02:36:f5:28:0f:b1:bd:3a:fc:cb:11:ba:8d:b0:23:fb:
4c:bd:de:6d:a8:d0:e5:5f:14:aa:36:97:b1:a5:e7:f8:d7:e0:
83:a4:d8:1e:10:f4:2a:29:f6:a5:1f:1b:7c:8a:46:10:3a:73:
4d:06:01:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx4ECGfC17G+/rK4dfVL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri
OWJkZWEwHhcNMjYwNTEyMjAwMTE0WhcNMjYwNTEzMjAwMTE0WjAzMTEwLwYDVQQD
EyhjMTRmNDg5MDM1NzI0ZWM5ZDg2MDcxYWU5OTMwN2VmNGUzYTA3MjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe04BYI/eKjOxQGRDiEfn0YThdpL
6NrABnnC0oPRq0TtYRLHinKWS+kxiUZS3j4ZTzbxj0gKzeeL2N8fbuPSAiLtp/b5
sRyDigHYOF3kqzfRGfmuLe+PstkO60EBvkPzGyDId5hZVnkY+QhrEsf6FoYLhaIq
fnV878+N/oPy9UVvn5s1N2WUgd1P3y3072TY5H2vBPRNQcT1bRRYvdK77c7TOoP9
GOaIJz/mglA/jfhDPbND8jYQaohN0iPSvBwgJtjvQnZH50q94DMjo2yanAoxLp37
IxOB47t+OD0ZRUmJj5PTwvVm4HnEK0WJjYFWXFRSsv0uEiWrq0wjkUPkdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFPSJA1ck7J2GBxrpkwfvTjoHIsMB8GA1UdIwQY
MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt
Njg2N2M0YWUzMTYxLzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx
LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnj7Px0e
AkpVEjczOKzulw8QQOrBQfmGpRYbSVCcb0vD/iI8d9uHQTHwZpHh/bCabE8Gdtv6
Ce/vTUoQ6aF28aql4zB5ItLmEdi8NLmrPOJSZpaZIuJpjYbnyFVtY08Pmx/TvD7j
Tl+mHINvbgADATW5JR3AcGpB/o/B0SE4Brc9xmmtuMWmvv2t6SuuqXh6fcKr8AEn
2JJOlTYHrTlOHMyKfJdkt08bmKDQCNHONA1aITCHncKue+2GjiPPhnmuu54LaPgq
EHsCNvUoD7G9OvzLEbqNsCP7TL3ebajQ5V8UqjaXsaXn+Nfgg6TYHhD0Kin2pR8b
fIpGEDpzTQYBrQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:06:14 2026 by rpki-client