Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier: f8FRL53F/Jjzf+rzj5fxcUJjXKJ4zfFgKoA/cHqfmhw=
Subject key identifier: 01:2E:37:01:C4:EF:BB:E9:D2:CD:F7:24:AC:E4:45:96:2B:E9:92:15
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 019F9248F6E6E504989E20B2A23478CCCD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number: 0E2B
Signing time: Fri 24 Jul 2026 04:01:22 +0000
Manifest this update: Fri 24 Jul 2026 04:01:22 +0000
Manifest next update: Sat 25 Jul 2026 04:01:22 +0000
Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: X6DNMuOYCqHQlAXH8NOWSvwMwIogslL9JiG+qNSbRo4=)
2: g9ARekBVcGhcdV1yDxzPFfg3FSA.roa (hash: CrdyMkeoZOTfj+RdiOHlPBQWgx83YTO1C282t0kyBq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:f6:e6:e5:04:98:9e:20:b2:a2:34:78:cc:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: Jul 24 04:01:22 2026 GMT
Not After : Jul 25 04:01:22 2026 GMT
Subject: CN=012e3701c4efbbe9d2cdf724ace445962be99215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:19:07:60:a1:48:ab:1b:56:fe:42:21:74:
1b:50:83:db:c3:22:c6:c0:cd:30:e8:c5:9d:13:d2:
e1:2a:14:11:9e:84:ef:2d:04:1c:21:48:36:15:59:
b3:43:b8:47:4b:05:d9:7b:88:87:02:38:54:56:50:
d3:28:86:69:4e:80:bf:0f:2c:51:5e:b2:68:9c:3b:
fe:99:31:db:8c:bc:c8:ca:eb:71:d8:49:7a:7c:d8:
a4:03:ff:69:2a:0c:50:d4:98:ed:7b:c8:ea:62:4c:
c7:42:40:24:af:da:a2:f6:34:04:02:b7:c2:39:a7:
53:51:13:d1:10:a8:ba:bd:0e:30:f6:ca:31:bd:61:
5d:c0:89:85:aa:32:42:74:38:8d:cf:ec:54:14:33:
90:f0:7e:1c:95:11:48:22:7c:45:7e:a1:33:9c:74:
e2:1d:1e:3c:3a:d0:17:d7:41:86:b0:cf:7f:a0:0b:
19:e7:52:1d:db:50:97:63:e2:61:d9:71:45:55:f9:
48:a3:f9:b9:a7:29:86:04:31:b0:01:63:0a:14:70:
2e:c8:5a:9f:af:ab:f5:ab:8d:df:f8:80:e7:68:cf:
fb:dc:a5:3e:1d:52:b5:5b:1e:d7:cf:83:3f:13:31:
f1:43:24:d4:ea:88:5a:fe:bc:ad:90:b2:ba:70:80:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:37:01:C4:EF:BB:E9:D2:CD:F7:24:AC:E4:45:96:2B:E9:92:15
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:57:bc:84:c8:83:b7:4c:f3:90:ee:fa:27:11:06:54:04:19:
88:ff:49:7f:c9:35:75:19:74:7d:e9:b6:db:42:d6:c7:30:d5:
40:13:a9:fb:e9:7d:32:54:bd:db:db:5d:08:b2:66:06:ea:f5:
e9:1d:3c:c5:aa:1d:c3:c9:fe:30:f9:9d:50:34:90:7c:f4:b9:
35:f6:d4:69:7a:c6:66:73:27:7b:2a:16:c1:eb:8d:7f:58:ab:
59:de:15:1e:45:17:47:9a:34:fa:ab:76:ab:c3:18:f0:12:61:
3c:f2:6b:f1:ef:9f:4e:b3:2d:af:81:e3:21:90:09:0e:97:ad:
f4:57:f1:15:f8:08:29:01:f2:81:26:f2:3a:8f:d4:7a:62:05:
e4:38:a6:f6:43:bb:51:38:3f:e8:6a:8d:6e:34:e8:35:3c:0f:
82:c0:b5:08:28:ac:12:90:96:11:88:09:ec:aa:d7:dc:b4:b5:
2f:8c:51:d6:2c:c0:3c:50:e1:63:fe:36:ea:54:67:e4:58:1b:
70:8d:1d:0c:a3:83:44:a9:16:52:70:c6:7b:3b:b3:8f:e8:42:
2a:cd:c8:59:bf:63:c6:d3:b6:4f:9e:13:fb:f2:24:8f:b3:ef:
39:21:c3:57:a9:ed:8c:2f:69:ab:ef:b9:1b:f4:63:7f:69:aa:
52:dd:4d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSPbm5QSYniCyojR4zM0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNjNDg2NzQ5YWIzYWI4MDRjZjExOThjYmY1NzVhODQw
NWE4ZDQwHhcNMjYwNzI0MDQwMTIyWhcNMjYwNzI1MDQwMTIyWjAzMTEwLwYDVQQD
EygwMTJlMzcwMWM0ZWZiYmU5ZDJjZGY3MjRhY2U0NDU5NjJiZTk5MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymsZB2ChSKsbVv5CIXQbUIPbwyLG
wM0w6MWdE9LhKhQRnoTvLQQcIUg2FVmzQ7hHSwXZe4iHAjhUVlDTKIZpToC/DyxR
XrJonDv+mTHbjLzIyutx2El6fNikA/9pKgxQ1Jjte8jqYkzHQkAkr9qi9jQEArfC
OadTURPREKi6vQ4w9soxvWFdwImFqjJCdDiNz+xUFDOQ8H4clRFIInxFfqEznHTi
HR48OtAX10GGsM9/oAsZ51Id21CXY+Jh2XFFVflIo/m5pymGBDGwAWMKFHAuyFqf
r6v1q43f+IDnaM/73KU+HVK1Wx7Xz4M/EzHxQyTU6oha/rytkLK6cICy8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEuNwHE77vp0s33JKzkRZYr6ZIVMB8GA1UdIwQY
MBaAFAW8xIZ0mrOrgEzxGYy/V1qEBajUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEt
N2Y2OTlhODNiYjBjLzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEtN2Y2OTlhODNiYjBj
LzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVe8hMiD
t0zzkO76JxEGVAQZiP9Jf8k1dRl0fem220LWxzDVQBOp++l9MlS929tdCLJmBur1
6R08xaodw8n+MPmdUDSQfPS5NfbUaXrGZnMneyoWweuNf1irWd4VHkUXR5o0+qt2
q8MY8BJhPPJr8e+fTrMtr4HjIZAJDpet9FfxFfgIKQHygSbyOo/UemIF5Dim9kO7
UTg/6GqNbjToNTwPgsC1CCisEpCWEYgJ7KrX3LS1L4xR1izAPFDhY/426lRn5Fgb
cI0dDKODRKkWUnDGezuzj+hCKs3IWb9jxtO2T54T+/Ikj7PvOSHDV6ntjC9pq++5
G/Rjf2mqUt1NKg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:42 2026 by rpki-client