Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: 7/gMcdbdnp3lwI20elxPoWHka6/h6o3sFh5YWvJL1KQ=
Subject key identifier: E1:92:47:A1:FE:8B:72:D7:DD:CA:A2:05:A3:12:E1:C7:41:E5:4C:25
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019E1DC7AE4B83C6C723BC5D99AF92715894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 102E
Signing time: Tue 12 May 2026 20:01:25 +0000
Manifest this update: Tue 12 May 2026 20:01:25 +0000
Manifest next update: Wed 13 May 2026 20:01:25 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: e9RjHeN1oznAKJ9LQ/P5ustyCGGWL7vhdJdhEsPUQFw=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:ae:4b:83:c6:c7:23:bc:5d:99:af:92:71:58:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: May 12 20:01:25 2026 GMT
Not After : May 13 20:01:25 2026 GMT
Subject: CN=e19247a1fe8b72d7ddcaa205a312e1c741e54c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:e9:ed:2b:f0:ca:4f:d6:ee:9f:72:70:cc:
7a:c1:b3:66:bd:34:b1:01:e7:23:db:91:af:b4:c6:
52:c0:26:bf:f6:36:d2:51:ea:97:5d:26:1e:5a:39:
5f:d0:8f:60:f9:24:d9:66:22:92:9b:e3:64:77:f9:
f2:07:84:40:8f:13:57:9a:e7:a8:6a:4a:91:56:a7:
82:af:8c:b7:43:84:28:89:b1:78:94:b8:1d:74:5f:
5a:d5:a3:48:7f:23:6d:39:25:04:fb:0a:24:c9:9e:
b0:1c:00:56:7e:ee:b4:fb:89:31:b3:46:8a:c6:42:
2e:48:de:c0:23:c0:aa:35:62:bb:1a:f1:da:f7:9d:
f9:fa:aa:e9:bc:79:72:8f:8b:94:39:4c:1b:ee:3d:
4d:84:b8:87:ca:5b:2a:9c:3e:66:f4:91:a1:d3:24:
91:76:2c:89:dd:68:70:2c:a4:bc:e7:5d:1a:8e:69:
a6:c9:28:6b:08:d1:0a:5b:3d:c9:a9:9f:1a:12:eb:
78:56:a7:33:e2:2b:c4:33:b6:73:e2:cd:cf:12:1d:
61:97:d1:7b:d6:7d:b7:ad:5e:f3:0b:10:78:54:a4:
4c:0e:e0:f8:a0:19:6e:62:b3:ce:f6:79:e2:a5:45:
03:31:72:72:f4:ac:7f:43:2b:fb:c7:6f:f0:2c:6e:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:92:47:A1:FE:8B:72:D7:DD:CA:A2:05:A3:12:E1:C7:41:E5:4C:25
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4c:aa:4c:96:d9:96:ab:fd:9f:c4:a0:b2:99:95:7b:99:d4:
30:56:d0:44:a7:51:e7:c1:08:de:c4:e5:f6:67:3b:15:a2:ba:
4a:58:62:a1:89:8c:2f:c3:c6:a3:06:cb:56:7c:b4:89:d0:aa:
e3:9a:d4:7b:f3:7d:3e:74:91:cc:54:cc:4a:66:25:50:fb:24:
ca:f2:84:2e:78:f7:03:ca:7f:47:c2:14:58:92:a3:2f:5b:b5:
57:5a:da:e3:c7:1b:c5:95:b0:b0:02:cc:fe:a7:f2:cc:03:1c:
60:ae:4c:8f:71:1a:e2:56:ef:d5:85:24:96:42:c4:f2:eb:d1:
9e:59:c7:36:98:4c:99:ae:46:5e:de:25:61:41:cc:97:bf:24:
5e:0c:eb:f5:f9:4c:36:df:bd:b5:fc:da:93:8d:86:a0:31:ba:
b5:60:53:b9:17:b3:fd:86:6c:3b:7a:1b:b7:fd:8d:24:ea:90:
4e:69:02:92:58:b0:bf:28:5b:64:a6:83:51:59:48:5b:b7:a2:
ea:7f:4b:1a:0a:57:89:a6:28:1a:4c:65:ac:0a:2f:7b:d8:d8:
d1:27:cc:7a:9b:52:0e:b1:ef:d0:39:00:7c:3b:3b:ce:47:d0:
54:da:9a:7a:fd:96:9f:df:35:07:3e:df:e1:35:cc:7a:bf:3a:
4b:32:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:17 2026 by rpki-client