
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier: jG6xrcpTGgnisQziRiflZ6VQBsOAjSPTzZbaMoiSjEI=
Subject key identifier: C0:D0:58:CE:B8:7C:54:C9:23:4E:B3:C4:9B:81:AD:6F:FE:7D:3B:5F
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer: /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial: 01A1DEDEC8195D8462A29EAD8F8EB155FD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number: 02BC
Signing time: Sun 15 Nov 2026 11:01:44 +0000
Manifest this update: Sun 15 Nov 2026 11:01:44 +0000
Manifest next update: Mon 16 Nov 2026 11:01:44 +0000
Files and hashes: 1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: DSfRaIJJ2wrsjvfiDJToEcmjrPBGmvO9O9JnD+pv/Jc=)
2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:c8:19:5d:84:62:a2:9e:ad:8f:8e:b1:55:fd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Validity
Not Before: Nov 15 11:01:44 2026 GMT
Not After : Nov 16 11:01:44 2026 GMT
Subject: CN=c0d058ceb87c54c9234eb3c49b81ad6ffe7d3b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:50:32:08:9e:38:81:2a:08:12:c3:2a:0a:
e9:67:28:96:2b:97:a3:e4:ea:07:a3:22:8e:63:cc:
82:82:12:cd:a6:93:c4:77:72:56:e9:e2:37:b2:df:
bd:cc:88:de:ed:ef:ef:a1:13:fd:91:ed:cb:05:10:
14:db:6f:b5:0f:a4:0d:30:20:f4:41:d8:47:fa:88:
bb:af:26:60:9a:55:cc:ee:22:ab:c9:ff:20:bd:1a:
85:36:fa:21:8c:db:62:61:e9:9a:75:4e:dc:49:35:
2f:9b:6e:27:e0:21:c8:fd:b0:9a:8d:1e:04:2e:74:
64:94:7c:43:fc:38:8e:29:0c:4d:f7:b0:b4:12:b2:
aa:5e:f3:ef:59:2e:d2:c8:06:6d:6d:67:a9:93:75:
f7:d4:9d:92:6b:7a:31:f3:50:6f:48:02:a0:56:94:
a1:26:24:1f:9f:0f:f9:1f:d1:8d:33:87:15:4c:d3:
0f:5d:72:06:05:cc:aa:7f:75:18:e4:1b:53:17:a5:
a0:9a:ba:f2:c8:a4:c6:97:e3:1b:59:13:a2:06:59:
bd:28:59:25:0e:64:8d:88:50:da:be:21:23:50:8e:
83:8f:27:c4:1d:bb:a9:cc:eb:d6:36:b5:fb:eb:ec:
80:49:80:9e:99:cd:0c:f7:34:d2:9a:ad:6f:ac:06:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:58:CE:B8:7C:54:C9:23:4E:B3:C4:9B:81:AD:6F:FE:7D:3B:5F
X509v3 Authority Key Identifier:
keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0e:8e:0f:13:24:b2:75:06:b8:af:9d:82:92:c6:7e:01:e6:
cd:2d:75:7d:18:8d:d6:01:f4:fa:c9:77:99:68:0b:cb:f9:39:
9e:fd:83:0e:3e:45:0f:0f:78:60:4a:95:77:1d:fe:4e:2d:20:
7b:38:40:ec:bb:a5:94:ff:d8:0b:2d:64:5d:ec:81:c1:0f:fb:
ae:c7:bc:87:1e:97:cc:17:c0:68:d1:d4:a2:a3:90:78:bb:38:
72:b9:5e:64:25:ff:5b:66:49:e2:37:9f:df:23:34:fe:6c:ee:
be:ab:e1:09:c2:3a:45:b6:a6:8e:fe:e5:39:5c:f0:b9:ee:a6:
73:ba:d1:eb:5d:73:59:25:47:d3:a8:bf:57:97:1c:62:40:78:
ac:6b:53:da:e8:25:2e:ff:7b:87:d8:75:97:19:2f:a1:42:30:
a7:89:f4:4d:c3:c4:82:ab:bc:ef:6f:2f:7f:d5:b5:18:4d:43:
64:ff:17:8c:c2:c2:d3:70:f3:96:f2:6c:c8:df:2d:00:f9:ae:
9b:b7:eb:f0:53:f5:98:75:94:b0:f6:f2:ec:84:31:8a:01:ac:
e9:33:62:a0:74:a8:03:48:4e:ef:0d:0c:d4:cd:16:46:8c:f8:
f4:c7:a7:42:d1:72:26:ff:05:b9:86:8f:91:67:a1:c8:b6:6f:
83:37:d9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3sgZXYRiop6tj46xVf0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjBjNzdmZmQ2ZjAwZTgyZGJkOWRhZGE1MDExOGQ0MTNh
ZjIwODAwHhcNMjYxMTE1MTEwMTQ0WhcNMjYxMTE2MTEwMTQ0WjAzMTEwLwYDVQQD
EyhjMGQwNThjZWI4N2M1NGM5MjM0ZWIzYzQ5YjgxYWQ2ZmZlN2QzYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCBQMgieOIEqCBLDKgrpZyiWK5ej
5OoHoyKOY8yCghLNppPEd3JW6eI3st+9zIje7e/voRP9ke3LBRAU22+1D6QNMCD0
QdhH+oi7ryZgmlXM7iKryf8gvRqFNvohjNtiYemadU7cSTUvm24n4CHI/bCajR4E
LnRklHxD/DiOKQxN97C0ErKqXvPvWS7SyAZtbWepk3X31J2Sa3ox81BvSAKgVpSh
JiQfnw/5H9GNM4cVTNMPXXIGBcyqf3UY5BtTF6WgmrryyKTGl+MbWROiBlm9KFkl
DmSNiFDaviEjUI6DjyfEHbupzOvWNrX76+yASYCemc0M9zTSmq1vrAZI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDQWM64fFTJI06zxJuBrW/+fTtfMB8GA1UdIwQY
MBaAFAWwx3/9bwDoLb2draUBGNQTryCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mNjhiMjYtZjg4My00NTU5LTg3NDUt
NTAwZDNiOWNkY2RhLzEvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mNjhiMjYtZjg4My00NTU5LTg3NDUtNTAwZDNiOWNkY2Rh
LzEvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ6ODxMk
snUGuK+dgpLGfgHmzS11fRiN1gH0+sl3mWgLy/k5nv2DDj5FDw94YEqVdx3+Ti0g
ezhA7LullP/YCy1kXeyBwQ/7rse8hx6XzBfAaNHUoqOQeLs4crleZCX/W2ZJ4jef
3yM0/mzuvqvhCcI6Rbamjv7lOVzwue6mc7rR611zWSVH06i/V5ccYkB4rGtT2ugl
Lv97h9h1lxkvoUIwp4n0TcPEgqu8728vf9W1GE1DZP8XjMLC03DzlvJsyN8tAPmu
m7fr8FP1mHWUsPby7IQxigGs6TNioHSoA0hO7w0M1M0WRoz49MenQtFyJv8FuYaP
kWehyLZvgzfZ6g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:40:54 2026 by rpki-client