Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: XYBTmC+3snOveftOQ+W96Q4uDJeEj23eOILGrWq8/ec=
Subject key identifier: 22:5A:5B:6B:10:A1:94:59:79:AE:D7:DD:BE:7B:01:F1:9B:1B:29:6B
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 5F3179E2805453993C441ED75DA30A64B734B6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: 86
Signing time: Wed 25 Mar 2026 15:53:21 +0000
Manifest this update: Wed 25 Mar 2026 15:48:21 +0000
Manifest next update: Thu 26 Mar 2026 17:47:21 +0000
Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: YJq0IVWCubc0JXwcEn3lS3tQONlCJJJ9EJAUySaqlNo=)
2: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:31:79:e2:80:54:53:99:3c:44:1e:d7:5d:a3:0a:64:b7:34:b6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Mar 25 15:48:21 2026 GMT
Not After : Mar 26 17:47:21 2026 GMT
Subject: CN=225A5B6B10A1945979AED7DDBE7B01F19B1B296B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:a6:15:b8:51:63:c7:54:af:c3:45:e1:f1:
d4:e0:0b:d2:1f:7a:85:d0:b9:3c:e8:49:e4:42:15:
61:79:79:7b:3b:72:06:c9:ab:3c:ca:c1:57:18:16:
ba:d6:78:95:74:d0:15:b2:16:6c:b6:ea:89:6d:a5:
25:bc:0d:4f:f6:70:2b:b1:ff:b3:3f:13:f3:73:a3:
6c:bc:cd:53:1f:d4:cc:f1:a0:fe:b7:79:2e:d4:96:
5c:7e:d9:5b:38:43:97:04:c0:2b:f2:f8:de:ff:b9:
22:c6:ee:36:30:2d:87:2e:77:d8:7e:92:ca:78:a5:
16:09:69:f7:bb:25:d5:2b:4d:f4:65:e1:bf:e6:11:
bf:e0:b2:68:2a:70:f1:3c:1d:7a:ec:2c:a6:6c:02:
38:9d:32:ce:e2:2a:c6:b2:1d:5b:3f:4e:51:7b:dd:
13:bc:09:85:5b:27:a5:55:3d:f8:4b:e3:35:7b:f3:
c3:a2:6e:c3:e6:bd:87:e3:b9:6a:ed:bf:85:85:97:
58:4d:f3:cc:69:15:b3:56:cc:bd:be:08:6b:5b:91:
df:71:f6:a2:cc:a4:3f:52:7f:aa:82:a4:eb:b8:b6:
61:e5:df:1c:c1:df:97:b4:97:2e:bb:dd:6a:b4:66:
41:b4:0e:b5:ac:f8:76:56:67:73:e9:bc:de:74:cf:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:5B:6B:10:A1:94:59:79:AE:D7:DD:BE:7B:01:F1:9B:1B:29:6B
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6a:27:1f:1c:3c:db:4e:9c:06:4f:30:8b:4f:ac:82:0f:26:
25:72:00:8b:6e:3e:f8:ff:01:5c:cf:61:65:53:87:62:15:7b:
32:f8:13:57:eb:8d:f0:b7:2b:68:cd:bb:a4:c0:63:b7:ea:c8:
8e:b2:38:79:e8:87:53:33:2b:e9:ca:8a:81:18:12:cc:e9:31:
45:68:f5:84:9a:f7:4f:4a:0a:b2:d1:2d:9d:00:aa:12:d5:96:
2b:1c:95:74:cf:77:02:1e:7a:00:c8:56:08:a9:5b:df:2b:e3:
2b:eb:50:0e:40:8b:4d:a0:e9:0f:2e:3e:11:f1:ac:65:32:5a:
bb:79:1f:6d:ab:c8:ed:0a:6e:33:f9:a3:db:a1:b3:ff:52:51:
6e:50:fb:f6:c3:f3:bf:9c:8a:0f:46:0a:03:9f:39:7b:50:29:
30:f8:34:df:69:19:ff:49:4c:80:fd:53:4b:8f:53:a9:31:97:
0c:d3:30:61:dd:af:cb:7c:4b:43:61:11:7c:1a:2a:49:9c:d1:
3f:0b:b3:11:6c:00:d1:bd:ba:c6:ab:73:8e:05:8a:f2:fd:cc:
a7:59:81:7c:80:84:13:e8:ed:4a:c0:43:02:fb:71:cc:76:ee:
63:21:8a:03:fd:62:9e:18:13:80:57:ef:b8:d9:3a:ad:d8:ac:
3a:5f:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:14 2026 by rpki-client