Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: OfmeToWhRbfPiFACawqPLwZKpp+aAi9PemKG5KvsVWc=
Subject key identifier: 56:78:A4:0E:20:0F:E7:90:92:79:BB:97:CA:0E:65:A6:A3:DD:68:80
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 019D25F0EDD84DAAF73DB27D129655E6D85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 07EA
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: Be9OOWhSy878XAhx6xOHVU/WTM860BJhq4xLAQPbX4k=)
2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ed:d8:4d:aa:f7:3d:b2:7d:12:96:55:e6:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=5678a40e200fe7909279bb97ca0e65a6a3dd6880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:88:b4:46:26:75:9b:70:b6:db:a9:47:bf:
c8:2f:91:ab:3e:3a:7c:92:b4:4f:d4:c9:e7:f4:ec:
92:d6:11:7d:b8:26:23:95:5e:3b:18:6f:f8:ac:86:
9f:9a:ba:f8:b7:03:e2:c1:17:af:70:56:89:d2:ca:
db:1c:98:b5:f6:cc:48:6c:01:84:7a:9c:16:f7:1e:
f5:8c:d7:2c:f5:9a:80:b8:d6:b4:91:be:7f:8f:1a:
1d:9e:2b:61:f6:b4:3d:bf:14:25:72:0b:83:04:76:
19:fb:78:45:ab:6b:c5:75:b6:56:8d:ab:c3:8b:c8:
a9:15:38:42:c7:7e:7b:e1:6e:b1:b5:1c:af:fb:02:
58:d0:6e:78:2a:c9:66:ed:7e:ee:5b:42:96:4a:66:
a9:1b:c5:5d:54:61:ec:54:8f:9c:d6:ab:29:ad:f8:
18:92:18:48:2b:2c:df:d8:28:da:e6:a1:63:89:11:
11:aa:8d:de:5c:b5:f2:78:6a:4c:d0:71:c3:6c:7d:
88:5a:47:d3:c1:9c:d8:7e:1c:d6:29:8d:50:f4:7b:
c0:6f:ce:45:b1:ec:c1:cd:04:ff:9b:76:94:af:fe:
c0:0d:5e:46:4f:8b:a1:23:38:dc:45:eb:06:2b:2a:
4a:d4:a5:31:3a:84:4c:d2:82:16:29:da:0b:1a:63:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:78:A4:0E:20:0F:E7:90:92:79:BB:97:CA:0E:65:A6:A3:DD:68:80
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ee:e1:83:2f:2f:33:4b:86:fd:f4:22:99:61:6e:0e:f5:14:
5a:46:f7:42:e7:92:8e:f5:d3:26:16:45:64:cc:e2:de:47:bd:
1f:86:f3:3c:19:14:a9:2a:76:97:f5:10:9e:ef:3f:82:66:91:
34:8f:de:e3:7d:b5:cf:79:3b:e6:ff:62:86:16:d1:f9:b4:4b:
c9:67:49:ca:28:1f:98:ab:b4:46:f7:f1:c7:cd:ba:7a:cc:ff:
2f:48:23:2f:4f:5e:bf:59:46:5a:3d:55:be:e6:b2:17:8b:c5:
db:23:0e:29:4a:05:c0:59:08:2f:eb:14:ae:0f:5e:ff:60:85:
8e:fb:e5:24:e1:8f:9a:44:a5:f4:5e:b0:e9:6f:9b:af:6f:57:
b5:d7:ca:b7:b4:f4:7f:b8:f5:d3:d9:0d:c2:4a:1a:1d:dd:b9:
c1:e8:0a:d0:bc:2e:ce:cc:cc:86:aa:73:8c:b0:87:00:5f:41:
8a:a7:75:3f:d5:bf:16:0a:8d:08:3d:72:4c:98:ea:e6:01:ff:
f0:6d:16:b5:40:77:88:c3:cc:ec:b0:80:1a:21:78:64:32:ad:
cc:f9:08:7c:b8:80:d0:fb:27:86:5d:35:a8:e0:40:df:7e:c9:
fa:39:38:b3:2b:a7:f7:73:50:09:b3:1c:68:7e:cf:1d:5c:fd:
a2:2b:ba:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:17 2026 by rpki-client