Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: i90oJgUHuvleJMlLuW/1fSrlUDjE6xP68x7OH3a1x0k=
Subject key identifier: 4F:89:ED:F9:15:EA:4C:DB:41:E6:FB:7B:CF:33:D3:C0:14:23:14:72
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 53E83CC74A785EC89EA9BB3E2527BFD9EF53090D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: 0185
Signing time: Sat 26 Sep 2026 02:36:47 +0000
Manifest this update: Sat 26 Sep 2026 02:31:47 +0000
Manifest next update: Sun 27 Sep 2026 05:02:47 +0000
Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: fX+vhzYM9uPz7aCxVBBvrqw7SXBaCTRcsM/mH0iJX8A=)
2: AS201386.asa (hash: OYRXpkyxncvi2a2N61iwOFYtIw9TA6/nEOruPTD6Q+k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e8:3c:c7:4a:78:5e:c8:9e:a9:bb:3e:25:27:bf:d9:ef:53:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Sep 26 02:31:47 2026 GMT
Not After : Sep 27 05:02:47 2026 GMT
Subject: CN=4F89EDF915EA4CDB41E6FB7BCF33D3C014231472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:b1:a8:f5:66:1b:0c:61:5a:02:98:c9:a2:
49:79:1e:8f:33:d2:ff:73:ea:70:70:1a:7c:55:b7:
6f:3d:de:7f:8b:1c:10:60:00:21:e7:c8:f5:7f:0e:
a9:2a:13:93:7c:d4:83:8e:d7:28:ca:2d:63:4a:14:
fd:eb:58:56:5e:38:30:28:07:81:02:64:0d:e9:0c:
7b:e5:16:23:fc:4e:8a:c9:10:b1:db:e6:cd:96:b1:
12:9f:38:08:17:c7:80:5a:64:a6:18:e2:e1:36:b0:
14:fd:7e:87:da:d8:d0:62:f8:a0:47:3f:98:85:a5:
0d:df:b3:f2:e5:09:aa:47:60:41:c5:31:bc:62:0b:
db:48:50:1a:0f:e2:e0:02:32:d6:26:08:dc:c9:f0:
91:b4:4a:a9:24:bd:8f:4b:d1:c3:d5:6c:ab:6d:7b:
c9:4d:8f:4b:ac:a5:a2:87:bd:70:ed:49:7c:74:e8:
7a:fb:07:15:a9:af:4f:2b:c3:a7:85:40:44:69:b3:
e9:fc:62:2b:81:bc:68:87:36:13:a7:48:a9:a0:0e:
00:d3:eb:18:1c:39:ca:45:41:4f:47:2a:4c:89:6b:
44:61:55:54:1e:24:6d:0a:50:fe:34:eb:12:8e:86:
24:a8:ed:f8:f2:0a:9f:19:5e:95:39:fa:3c:dd:65:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:ED:F9:15:EA:4C:DB:41:E6:FB:7B:CF:33:D3:C0:14:23:14:72
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ad:99:b4:63:0a:61:d4:3d:11:98:1f:7e:1a:f7:d5:0a:65:
ab:d3:52:64:dc:8b:21:d1:90:92:7b:f7:9e:b1:6c:d4:1d:6f:
94:ca:0a:4e:fb:9c:b7:68:0c:1d:fc:e6:59:60:6a:ae:4f:d7:
e5:92:20:8a:52:61:c3:79:b7:d4:bb:a4:2c:b5:73:2e:4e:5d:
df:f0:a6:b4:c3:08:3a:a4:2d:12:fc:00:fb:97:ad:ce:47:b9:
18:13:f0:92:70:01:23:bb:2b:6e:03:ae:ab:4a:81:7a:a2:2e:
34:45:00:1c:b7:d5:f2:e1:d2:69:67:61:99:f9:a7:51:8a:9c:
ec:91:8b:76:d7:ed:9d:04:04:45:c9:b7:50:4c:5a:f3:6d:ca:
ca:63:17:b9:c3:f6:e2:d0:fa:85:57:cf:bb:b9:ba:ce:09:96:
1d:37:22:6f:78:3b:92:51:ec:ed:4a:76:90:e9:c7:2f:4f:f6:
d2:e7:5a:06:f8:c6:39:14:4c:a4:a4:94:8d:d4:b9:9e:22:2f:
30:e8:d7:5c:02:3d:f2:d4:2a:91:5d:22:92:9c:83:86:89:38:
35:a7:2d:73:cb:32:7a:f7:11:fd:1c:8b:e1:d4:ee:fc:ca:44:
a5:2d:45:50:b1:f7:cb:e7:e9:c0:e8:1d:0a:5e:7b:e0:01:0d:
7c:29:64:9c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUU+g8x0p4Xsieqbs+JSe/2e9TCQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4ZTg3ZjM1MzEyN2NjOTIzYjFjYzFmOTc4Njk5NTM3
ZWZhZDY2ZDAeFw0yNjA5MjYwMjMxNDdaFw0yNjA5MjcwNTAyNDdaMDMxMTAvBgNV
BAMTKDRGODlFREY5MTVFQTRDREI0MUU2RkI3QkNGMzNEM0MwMTQyMzE0NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXObGo9WYbDGFaApjJokl5Ho8z
0v9z6nBwGnxVt2893n+LHBBgACHnyPV/DqkqE5N81IOO1yjKLWNKFP3rWFZeODAo
B4ECZA3pDHvlFiP8TorJELHb5s2WsRKfOAgXx4BaZKYY4uE2sBT9fofa2NBi+KBH
P5iFpQ3fs/LlCapHYEHFMbxiC9tIUBoP4uACMtYmCNzJ8JG0SqkkvY9L0cPVbKtt
e8lNj0uspaKHvXDtSXx06Hr7BxWpr08rw6eFQERps+n8YiuBvGiHNhOnSKmgDgDT
6xgcOcpFQU9HKkyJa0RhVVQeJG0KUP406xKOhiSo7fjyCp8ZXpU5+jzdZQPvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUT4nt+RXqTNtB5vt7zzPTwBQjFHIwHwYDVR0j
BBgwFoAUu46H81MSfMkjscwfl4aZU3761m0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzAvQkI4RTg3RjM1MzEyN0NDOTIzQjFDQzFGOTc4Njk5NTM3RUZBRDY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0Nkg4MU1TZk1ranNjd2ZsNGFaVTM3
NjFtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMC9CQjhFODdGMzUzMTI3Q0M5MjNC
MUNDMUY5Nzg2OTk1MzdFRkFENjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq2ZtGMKYdQ9EZgffhr3
1Qplq9NSZNyLIdGQknv3nrFs1B1vlMoKTvuct2gMHfzmWWBqrk/X5ZIgilJhw3m3
1LukLLVzLk5d3/CmtMMIOqQtEvwA+5etzke5GBPwknABI7srbgOuq0qBeqIuNEUA
HLfV8uHSaWdhmfmnUYqc7JGLdtftnQQERcm3UExa823KymMXucP24tD6hVfPu7m6
zgmWHTcib3g7klHs7Up2kOnHL0/20udaBvjGORRMpKSUjdS5niIvMOjXXAI98tQq
kV0ikpyDhok4Nactc8syevcR/RyL4dTu/MpEpS1FULH3y+fpwOgdCl574AENfClk
nA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:43:52 2026 by rpki-client