Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier: 4RjpWe0ETgj977cH/gM5mxe7ZtwZNq6/pp87m5DV4lo=
Subject key identifier: CA:90:8B:93:8A:A0:A2:8E:7C:7D:E3:E5:B4:C4:7A:7D:60:6A:5F:99
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer: /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial: 019E1D23219850C378124A23C38A88EABE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number: CA
Signing time: Tue 12 May 2026 17:01:41 +0000
Manifest this update: Tue 12 May 2026 17:01:41 +0000
Manifest next update: Wed 13 May 2026 17:01:41 +0000
Files and hashes: 1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: AClDpwnqFATNHSLlKjV57Cn31Wr3WqTMmW7M9Q38F6Q=)
2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:21:98:50:c3:78:12:4a:23:c3:8a:88:ea:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Validity
Not Before: May 12 17:01:41 2026 GMT
Not After : May 13 17:01:41 2026 GMT
Subject: CN=ca908b938aa0a28e7c7de3e5b4c47a7d606a5f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:9a:12:80:ff:3d:5e:7b:78:5f:89:61:a2:
c3:5b:2d:26:22:01:20:f9:12:b9:f1:9c:65:d2:1c:
6d:a6:f5:b6:d1:99:78:8b:ea:aa:19:e7:42:09:ed:
8c:d2:58:45:39:0c:cb:5a:a7:d3:cd:17:47:d8:22:
2c:c7:39:3b:b7:63:d4:c5:67:32:d5:ff:d2:b2:4a:
aa:a2:59:e8:69:98:d4:2b:e0:1b:37:98:06:71:67:
78:db:9f:be:c5:6a:05:6e:81:fe:c0:59:44:2f:3e:
44:30:41:ca:71:57:ae:c3:95:83:c8:4b:2b:60:b8:
a3:5a:f6:6e:77:04:d0:6d:f7:2a:23:2f:40:0e:ae:
68:53:01:54:40:02:07:a6:1c:3d:b8:d8:6d:fb:70:
0a:53:18:f1:72:50:41:7c:c0:f1:37:6e:eb:1c:cd:
ef:b5:d7:63:be:3a:98:8f:be:72:66:e4:79:9a:b9:
17:58:ef:89:3c:4f:39:38:36:82:51:65:6c:12:44:
a6:e9:83:e7:95:7e:e7:3e:ca:e6:0a:28:6b:ad:78:
4a:e1:17:3d:ae:e5:e8:c8:97:56:dd:bc:70:2e:69:
50:74:31:20:ac:93:6d:5c:e6:82:a1:93:40:a2:8f:
ac:db:d9:3b:a6:de:6d:3b:25:62:48:65:c2:be:5d:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:8B:93:8A:A0:A2:8E:7C:7D:E3:E5:B4:C4:7A:7D:60:6A:5F:99
X509v3 Authority Key Identifier:
keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:04:dd:a4:96:c3:f6:02:b2:db:82:ed:d4:e9:70:30:c8:47:
df:da:33:91:26:97:d6:ff:fb:cb:55:f6:0f:46:65:81:03:94:
89:89:81:e9:6e:20:bf:fd:80:41:40:a7:49:50:1a:2e:7e:e8:
a3:ce:62:c6:c1:f6:56:cd:bc:e8:1f:49:90:69:b6:1a:dd:b3:
bf:1a:63:8a:e9:ac:50:77:cf:e2:4c:db:c4:21:2d:fa:f2:28:
b9:3e:74:9c:41:8c:44:ec:fd:d7:a0:7c:f8:5e:97:5e:4a:08:
8c:bc:dd:52:dc:b6:37:ed:2d:f3:ca:e0:60:f5:a9:f9:c7:d3:
17:8b:b2:cf:12:44:34:d7:c7:a3:f1:38:c7:cf:9d:cb:f2:95:
fa:e3:f2:e5:d6:d2:20:57:e3:1d:fc:55:84:cf:e4:ed:8d:ab:
8d:aa:3a:8f:59:05:71:d3:aa:73:b9:7c:c5:c5:21:2f:a9:c8:
b6:08:9e:ca:d8:26:cf:01:05:5a:51:55:b9:51:8e:33:70:cf:
ae:17:ec:e2:b2:7b:eb:03:3c:bb:6f:6e:9a:a4:14:8d:14:bc:
bf:af:ab:91:d7:04:70:d2:a4:0b:b4:44:39:54:bc:d0:37:ba:
97:81:92:58:22:25:11:bd:2a:aa:77:34:31:30:ad:92:85:ff:
2d:cb:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:10 2026 by rpki-client