Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: jqqFXHLRiDPYv4kwnXa6BsFXIi8Zx9W6eU8TN3qhjaA=
Subject key identifier: 6A:44:A9:8B:A2:AA:B3:5C:0F:AF:4C:73:02:95:76:6D:53:DD:16:22
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019D28BBCB8667382A4486246A9F606B9EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 171D
Signing time: Thu 26 Mar 2026 06:01:29 +0000
Manifest this update: Thu 26 Mar 2026 06:01:29 +0000
Manifest next update: Fri 27 Mar 2026 06:01:29 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: b4POzio0TILmIbzjprvooyc2gfOgoBArKnhwqcw/1Bo=)
2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:cb:86:67:38:2a:44:86:24:6a:9f:60:6b:9e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Mar 26 06:01:29 2026 GMT
Not After : Mar 27 06:01:29 2026 GMT
Subject: CN=6a44a98ba2aab35c0faf4c730295766d53dd1622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:71:ae:9d:3f:7c:f9:a1:c0:d5:d3:42:ca:
42:91:6a:66:62:5e:77:70:f2:b0:be:42:8e:72:c8:
f3:63:72:4e:82:95:59:fd:a2:af:83:c0:4c:b2:32:
46:0e:16:2c:c3:85:a4:11:90:a5:9d:5d:44:89:b5:
dd:41:ec:eb:7e:6b:27:a9:34:78:67:44:e6:b0:04:
73:9c:93:09:53:15:df:58:86:af:81:ae:90:7e:93:
76:27:ba:fa:7a:0c:7b:f5:f9:9f:61:a8:12:02:a2:
b4:0b:96:d9:3d:ce:33:fb:e8:4d:53:3a:52:49:db:
bb:67:d9:02:aa:72:64:5d:3d:e1:81:ea:1d:95:0b:
dc:4a:99:95:c3:c1:e4:93:43:3a:9e:cd:dc:3a:eb:
ac:64:60:be:30:1b:72:85:0f:7c:f2:b1:98:f2:1a:
c4:11:e6:2e:20:ad:5e:59:c8:7e:b8:ba:61:d3:8c:
11:f9:e7:c6:0c:61:a1:c6:b1:17:8b:b3:37:f6:74:
f1:19:6a:14:d1:dc:a2:a1:9b:ab:8a:41:3f:37:5e:
57:ac:f7:5e:ee:9f:9d:98:ff:a0:33:26:93:50:fd:
42:14:a3:c2:ba:61:66:74:74:ff:be:c5:a0:47:12:
fd:5f:01:d0:b3:b6:c6:54:32:86:db:86:91:52:12:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:A9:8B:A2:AA:B3:5C:0F:AF:4C:73:02:95:76:6D:53:DD:16:22
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5e:9b:f8:c6:56:2c:39:9c:95:40:56:a1:88:c6:fc:a6:a6:
bc:18:20:2b:9d:71:2e:d0:8e:e7:07:2e:ca:dc:75:a8:53:23:
d2:97:a6:00:6d:a3:eb:22:85:00:e7:4c:8a:b6:5b:ae:3f:3f:
27:f0:ed:b9:67:a0:08:21:0d:23:9f:20:2f:ab:4e:30:ab:a6:
54:4b:48:ef:9c:2c:3a:01:02:75:b4:6d:c7:2d:ee:2c:a7:84:
d5:4c:36:e5:df:3f:ae:7b:79:a8:f4:bd:49:6d:6e:76:8a:7a:
39:43:55:62:b6:c0:b4:73:8d:8b:ef:c8:a7:ac:25:bf:f7:98:
41:4a:0b:0b:81:16:cb:91:63:cf:98:17:87:b2:f7:49:d9:fb:
f7:31:11:c6:bf:f1:b4:0a:31:46:44:33:15:7a:b7:9b:4b:eb:
23:06:f2:61:0b:c0:ba:bb:e9:17:30:04:c1:5b:51:5a:b1:dd:
e2:04:a4:24:5f:dd:57:00:0a:cf:1f:87:40:38:26:e1:64:c3:
cc:2d:78:9f:07:d6:06:3d:e1:a9:32:6b:6e:ad:be:e4:e5:f2:
5f:55:b8:88:08:96:70:6e:bd:cc:56:0e:c0:98:f2:3a:66:9f:
45:19:ac:d5:ec:5c:c6:66:d3:5c:3e:db:53:4a:19:51:5b:a9:
e8:00:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:32 2026 by rpki-client