Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: WO2/KQzN8atgdhfcQ0Jb7IHmCm8ebfjrMmTVFc8GKLo=
Subject key identifier: A2:D4:1E:E1:5F:49:0A:07:09:DA:15:EF:CA:A4:5C:E1:FD:DE:EB:EB
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019F9090BB96DB1BD1A07E2E9CC635A615B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 10EE
Signing time: Thu 23 Jul 2026 20:00:31 +0000
Manifest this update: Thu 23 Jul 2026 20:00:31 +0000
Manifest next update: Fri 24 Jul 2026 20:00:31 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: At7iz0kTS0qFbEtZazYwLu+txDO7YzKXCgAZ2MkIIyo=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:bb:96:db:1b:d1:a0:7e:2e:9c:c6:35:a6:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Jul 23 20:00:31 2026 GMT
Not After : Jul 24 20:00:31 2026 GMT
Subject: CN=a2d41ee15f490a0709da15efcaa45ce1fddeebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:da:78:89:8d:31:4f:36:97:70:79:7c:21:
fa:f5:60:ee:cb:30:41:e3:80:30:73:a3:2b:fc:73:
18:eb:6a:95:53:3f:85:33:47:12:7d:fe:2c:a0:9a:
a0:b6:00:70:82:a8:0a:e1:f3:f7:9b:1b:ca:bb:89:
c9:34:38:f1:d8:6b:f3:4e:e8:20:45:ec:24:a0:6a:
95:08:66:91:b2:c6:16:f9:b7:da:52:b3:5b:13:94:
00:51:ef:a2:22:f7:38:0d:18:64:6e:a1:de:3c:03:
91:5d:76:3f:60:b7:62:be:d0:41:8e:3d:71:88:f0:
d6:a3:6d:a7:10:38:70:0a:bc:21:80:4b:61:72:59:
9f:c8:22:b4:78:b3:bb:a6:6b:be:99:6b:8d:61:0c:
03:68:8c:a8:4d:ea:3a:b6:b4:0b:c5:bf:55:2e:26:
79:42:13:67:e8:ff:64:fa:f8:ba:a8:3f:1f:c3:a5:
2b:76:54:f4:79:7f:e1:a7:a5:bc:92:7e:78:36:f1:
cd:3b:df:6c:6f:a7:64:d8:c2:c7:8c:82:60:e9:d3:
6a:5a:8c:13:a8:3a:8a:00:c1:1f:9d:3a:22:ab:a1:
c4:75:44:9a:22:39:51:61:16:a9:ac:f3:16:1b:a6:
20:8d:0e:30:ec:91:73:ab:72:77:35:a3:8c:6c:b0:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:1E:E1:5F:49:0A:07:09:DA:15:EF:CA:A4:5C:E1:FD:DE:EB:EB
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f4:31:34:69:6a:e5:1c:97:0b:5d:6d:1b:d7:3d:f3:dc:5c:
83:c5:12:7b:35:77:2f:83:da:66:d5:89:77:68:8a:72:fa:a9:
ed:bf:12:78:b7:0b:a3:88:56:c8:d6:0d:d6:23:2a:28:3e:ca:
5e:92:ac:1e:d9:de:34:d5:cd:88:f7:15:a9:19:03:5a:c4:ba:
45:4c:77:d4:66:56:35:39:2e:70:e2:56:19:41:b1:11:e0:c9:
03:fa:bb:05:f9:b5:6f:17:47:e3:8e:91:22:77:cf:2f:d1:50:
28:67:b7:42:71:48:84:e6:07:56:39:66:b8:22:80:89:df:a4:
3f:40:2d:2a:84:bb:cf:1e:8e:3a:b7:90:b2:97:4a:af:4c:07:
5f:9b:0b:ad:26:ef:46:fd:e5:f0:33:a3:b9:c5:24:5e:39:e6:
d2:25:21:db:92:1b:0e:c6:24:89:fb:9e:fd:3f:e5:3f:8f:03:
0f:c7:6c:66:d8:f4:26:3b:4e:48:28:0b:80:5c:75:e6:82:eb:
de:b1:80:8a:66:ef:8b:aa:05:62:7a:78:78:f8:fa:99:30:f4:
ab:ce:8d:aa:d4:7e:2d:4f:5d:59:73:26:46:f2:0e:be:80:d6:
7a:65:62:3d:c2:ee:bb:39:47:00:84:91:0a:e8:2b:1e:4a:e5:
db:84:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:55 2026 by rpki-client