Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier: yniWxOawcocrUcIOl1/Zz90CVTshVfMe+HUk/H23EIA=
Subject key identifier: A0:83:7A:78:A7:C8:B4:91:95:3B:9F:D4:A1:8D:B3:A4:5A:CD:F3:B4
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 01A0E81CDFF8DFBC97F044A4AD0CA446F0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number: 0EDC
Signing time: Mon 28 Sep 2026 13:03:21 +0000
Manifest this update: Mon 28 Sep 2026 13:03:21 +0000
Manifest next update: Tue 29 Sep 2026 13:03:21 +0000
Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: IXEByLJ9jyYkFq3+D0dTu/gO5MrAezGhmszD9+mr4SQ=)
2: g9ARekBVcGhcdV1yDxzPFfg3FSA.roa (hash: CrdyMkeoZOTfj+RdiOHlPBQWgx83YTO1C282t0kyBq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:df:f8:df:bc:97:f0:44:a4:ad:0c:a4:46:f0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: Sep 28 13:03:21 2026 GMT
Not After : Sep 29 13:03:21 2026 GMT
Subject: CN=a0837a78a7c8b491953b9fd4a18db3a45acdf3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f4:a6:ec:34:02:55:49:8b:4b:33:cd:28:de:
2a:32:7c:57:c5:9d:4c:43:17:63:17:13:ed:b2:bc:
8f:ac:ec:f3:4b:21:29:d2:83:0b:e9:54:b5:e2:66:
9d:8e:2f:aa:d8:c9:73:51:22:48:ec:b1:bc:03:46:
65:d3:05:f5:ab:fa:a1:c4:a2:86:cd:3a:4d:23:c9:
58:04:c6:a0:b6:80:51:b2:c1:07:d5:05:4d:9c:97:
67:c9:ca:0a:c0:df:dc:2b:8c:0e:d1:39:e8:91:d8:
1a:89:59:fa:52:0e:25:63:22:ef:4d:84:2d:12:57:
37:be:73:c1:ff:e7:58:0c:a6:bf:3b:37:07:db:66:
92:4b:05:f1:94:64:e2:1d:95:b1:6d:a3:ac:1c:5c:
37:c1:45:53:07:7e:4f:d0:fa:80:ae:f0:7a:2d:44:
bb:13:86:cf:06:f9:1f:f7:74:d3:15:44:8a:b4:f1:
fa:6e:b0:03:ba:8a:0a:57:6e:66:e7:29:99:80:49:
9d:f3:08:8e:87:28:9a:77:d3:64:d9:c6:ee:25:d7:
6d:d1:62:3d:ea:40:64:90:25:b3:38:e1:b1:b3:70:
52:7b:bb:bf:27:94:bf:5c:ce:42:05:9d:71:be:13:
0c:33:e0:b4:eb:87:30:89:23:d0:d2:01:f1:83:fe:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:83:7A:78:A7:C8:B4:91:95:3B:9F:D4:A1:8D:B3:A4:5A:CD:F3:B4
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:24:f6:80:91:f0:08:10:76:94:c2:e3:26:8b:01:2f:9c:f8:
dc:66:20:06:eb:64:1f:80:2b:1a:4c:4e:12:ad:f0:ab:27:b4:
b2:3d:be:0f:ad:76:08:f4:50:ca:f9:89:09:d2:81:ee:83:0d:
41:7b:44:4a:da:45:34:16:28:43:d8:6b:f7:ae:75:01:84:b8:
d8:3b:26:e2:93:a3:3b:56:a7:8e:8c:36:3c:1e:54:a9:dd:c1:
91:f1:a3:68:de:3f:25:31:1b:9d:94:62:66:2b:aa:01:19:9a:
7d:9b:49:9a:bc:52:ff:c4:27:0a:d5:30:dc:6f:08:43:51:fc:
ff:d0:8f:67:93:cc:33:52:e1:86:ae:9d:99:af:95:ef:a1:12:
b9:66:18:9c:48:2c:54:39:c1:97:6b:ff:f9:bd:61:ae:c5:63:
dc:78:27:d1:d0:b8:85:d0:45:50:df:c1:8d:44:33:5e:cd:4a:
ec:eb:59:de:d3:58:0c:c9:3c:75:3c:1d:92:28:5f:a7:10:67:
13:32:c6:cd:9f:eb:a8:c1:33:24:8e:eb:73:91:67:f9:27:d2:
ec:5b:81:bc:6b:54:02:61:53:e8:10:f7:7f:d5:87:77:0c:73:
ea:13:30:2d:e6:2b:e8:c3:9c:d2:55:9e:33:76:a1:89:27:84:
c5:a2:b3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:19:30 2026 by rpki-client