Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: VWGdSXZIIeiG2D7sCgdViscfWwT3P0FY2zbknSuA4wE=
Subject key identifier: 26:59:B1:07:A1:9B:40:B3:09:B9:DC:53:78:44:77:B2:0F:75:45:FA
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 19D71C7A35EBEA4B6EE3F29B70BDECA210B391FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: C8
Signing time: Tue 12 May 2026 20:56:59 +0000
Manifest this update: Tue 12 May 2026 20:51:59 +0000
Manifest next update: Wed 13 May 2026 23:59:59 +0000
Files and hashes: 1: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=)
2: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: IRR3nhqFw+KXVqnMHf0+/+g5z5aorS743TPV5HuVAkc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d7:1c:7a:35:eb:ea:4b:6e:e3:f2:9b:70:bd:ec:a2:10:b3:91:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: May 12 20:51:59 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: CN=2659B107A19B40B309B9DC53784477B20F7545FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:e3:03:f0:36:49:c6:5a:d5:b3:9a:ce:1f:
f5:00:8f:8c:96:78:89:25:7e:7c:fe:9b:97:75:d2:
25:13:3d:de:01:ea:82:3e:8f:1c:31:a5:7f:3f:e1:
9b:2f:de:49:74:36:47:40:5e:5b:1c:52:46:3a:bd:
bb:30:9d:e7:12:a4:09:23:46:e8:ff:c5:74:a5:4d:
49:3a:d3:db:ce:af:8b:6d:36:0d:e0:d2:f0:97:3f:
b8:c6:0e:39:76:ed:cf:5e:cc:7f:4b:a9:81:76:01:
a5:00:b0:10:e6:2f:68:68:9a:0a:31:c3:03:f1:66:
ca:a0:f0:13:00:94:25:6e:8b:ab:c4:5c:a0:6f:f4:
ca:92:76:3c:a1:af:33:8f:31:c5:ab:13:e7:5f:b3:
4e:53:4d:7b:8a:d6:bf:f5:17:5f:b7:32:9d:c6:04:
8b:49:e6:ed:ae:59:d8:25:95:35:6c:da:47:c9:82:
cf:dd:cb:26:55:9d:26:36:4f:dc:20:25:5f:47:a0:
16:c3:19:0d:92:be:94:a8:88:1c:7a:9f:90:40:5e:
a3:96:90:f8:55:b7:32:9e:57:8b:20:cb:e1:8c:d5:
88:45:fd:51:6c:78:da:8c:94:f1:1c:49:39:c9:89:
02:be:3c:4f:1d:ba:c7:1b:fb:95:61:06:18:a7:fe:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:59:B1:07:A1:9B:40:B3:09:B9:DC:53:78:44:77:B2:0F:75:45:FA
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2c:bc:b2:ae:a3:3a:ea:08:fe:d8:b9:da:86:35:73:a6:55:
7c:95:20:45:58:25:7a:8d:38:7c:68:65:d4:b9:09:23:78:4f:
a9:04:dd:b6:98:aa:4c:3f:15:91:e7:c1:86:1d:ff:a6:d9:78:
36:76:8a:d0:30:7d:66:cb:f2:ca:91:c9:ab:99:0b:37:2e:2f:
14:84:d8:85:04:28:95:64:55:cb:02:83:bd:30:97:7c:d0:b1:
37:cf:8c:26:bf:a7:56:84:b1:a3:4a:67:e5:1a:a9:64:7f:b4:
a3:fa:26:36:22:33:3f:dd:72:a1:a5:7d:8d:0a:75:5c:58:b8:
7e:8f:76:36:09:64:0b:c8:03:7a:1c:5a:d4:87:39:8d:c5:77:
e9:a3:50:94:3d:30:c5:a9:09:5a:27:33:e0:6f:c8:29:00:57:
0e:13:7b:23:11:ee:a3:9a:09:62:9e:31:52:c9:7c:91:19:8e:
20:f5:c1:a4:d9:19:07:4c:32:15:91:73:93:49:10:55:2c:93:
97:f0:ad:0e:92:a0:28:02:37:fd:d6:1e:0f:29:18:29:2b:41:
05:a1:22:b4:2c:3a:de:d7:34:80:ad:a8:48:84:df:ef:98:cd:
11:2a:89:66:7a:2a:dc:1a:66:06:e3:6f:32:1e:fd:3b:7a:c8:
08:0d:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:59 2026 by rpki-client