Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: QE9iQzLVe3jTJZgl5OW6IiHI6vZ7eb1y+2gvJAsxNWQ=
Subject key identifier: 48:DC:C4:25:E4:F7:CC:51:39:7D:37:B1:76:EF:16:35:E0:A8:FA:FA
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 01A0CAB5574DF15C2A63F095AA15709ECB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 09CD
Signing time: Tue 22 Sep 2026 20:01:16 +0000
Manifest this update: Tue 22 Sep 2026 20:01:16 +0000
Manifest next update: Wed 23 Sep 2026 20:01:16 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: xB8nor3AA2nzPvvwAyiHl8Pl/i4dNc8FZwm17+mX1yY=)
2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:57:4d:f1:5c:2a:63:f0:95:aa:15:70:9e:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Sep 22 20:01:16 2026 GMT
Not After : Sep 23 20:01:16 2026 GMT
Subject: CN=48dcc425e4f7cc51397d37b176ef1635e0a8fafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:0b:e7:f4:0b:56:66:5a:4a:0c:eb:1f:6f:
a7:d8:b5:f5:64:74:d9:0f:05:0d:98:c3:57:a5:d8:
5e:08:a7:af:68:71:93:37:de:36:18:ba:e5:e5:52:
b4:9b:10:0f:42:43:0b:e3:71:eb:a4:a0:54:e0:62:
3f:2a:c0:5d:07:2b:e2:23:46:3a:24:a5:0f:07:e1:
42:dc:56:6a:5e:78:7a:da:2c:ce:0d:5a:f6:6e:ec:
38:42:52:eb:57:db:e8:c1:59:5a:31:e6:ab:ff:40:
20:71:49:f0:26:c8:28:f3:3d:06:23:0d:bf:49:ba:
6e:00:24:aa:cb:d1:44:bb:21:c7:0d:7a:57:42:77:
44:1b:4e:84:99:23:92:d9:8c:82:b4:77:23:ac:69:
73:4f:16:6f:fd:db:52:c3:1a:b4:53:5e:e6:e7:36:
4c:b6:21:1e:4e:6d:51:d5:40:ce:11:88:9e:62:24:
9e:5f:01:6d:1a:14:e3:79:d6:87:c6:46:37:7a:de:
f4:12:a2:f3:75:08:f0:85:6f:dc:00:a3:43:2e:4e:
d2:70:13:5b:9c:f6:40:28:ba:0f:38:e3:5d:5f:ce:
a6:db:ea:52:40:e2:c0:76:c9:7d:be:cf:e3:90:7c:
8c:97:34:0f:a2:58:c2:ee:3c:35:f8:ec:7c:32:f7:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DC:C4:25:E4:F7:CC:51:39:7D:37:B1:76:EF:16:35:E0:A8:FA:FA
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6c:f8:b9:f2:5d:d2:2b:49:38:47:57:73:b1:bc:29:f4:83:
0f:37:37:5a:16:48:a8:04:a8:7d:e9:92:dc:d8:2c:c9:57:ee:
46:b0:7d:f7:0d:f1:72:a7:03:09:c6:27:47:03:f4:ec:a1:15:
ff:24:dd:85:9b:ea:d9:b2:a0:44:e1:57:2c:b4:6c:db:da:89:
29:df:43:b8:75:47:8a:72:a9:ee:4d:1f:0a:50:5d:00:84:06:
c3:12:f6:99:dc:e5:59:1a:91:0e:21:ad:0d:c6:db:bf:8d:90:
98:8e:2e:ef:1e:15:15:76:69:1d:3d:b6:b4:d9:de:2d:0d:eb:
f6:05:1a:4b:b7:78:f5:09:5f:ed:e5:57:10:68:14:28:bc:8b:
8f:85:8e:d1:87:05:41:ce:01:3a:8b:c2:6d:5e:98:56:34:d2:
e0:8c:f9:24:d1:36:ab:3d:db:61:e6:ce:20:aa:1d:7d:6a:89:
5c:7b:a4:fd:4c:0a:5c:7a:84:72:7e:a1:55:f4:e3:02:fc:cf:
3a:51:16:8d:50:6b:12:3a:29:a6:2f:99:7b:9f:76:7d:ac:c8:
bc:7a:80:15:16:d4:0c:c6:99:18:22:d0:de:40:20:57:95:2d:
b6:ae:b4:30:fd:60:96:05:a3:4e:18:ec:b7:91:a5:99:cb:fb:
7a:e4:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:51 2026 by rpki-client