Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
File: BB71CB15135EC006B13635B36AA5A30446B52310.mft (raw, json)
Hash identifier: z4Mw874yH5Avh48mrmqcJaDm38utUQbkluy9Q2oxuCE=
Subject key identifier: F3:F2:82:6C:02:B3:55:B7:C9:A3:F9:9F:A7:8D:C8:A7:7D:AE:8E:E7
Authority key identifier: BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
Certificate issuer: /CN=bb71cb15135ec006b13635b36aa5a30446b52310
Certificate serial: 786085EAE4D9699D3F966E368C6C6F9CEB0CD77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
Manifest number: 96
Signing time: Wed 25 Mar 2026 15:00:02 +0000
Manifest this update: Wed 25 Mar 2026 14:55:02 +0000
Manifest next update: Thu 26 Mar 2026 18:04:02 +0000
Files and hashes: 1: BB71CB15135EC006B13635B36AA5A30446B52310.crl (hash: DDzJNWd0RcG+Ux+wO16CvfVZDqOfP5rEQqIFzEfSUlY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.crl
rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:60:85:ea:e4:d9:69:9d:3f:96:6e:36:8c:6c:6f:9c:eb:0c:d7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb71cb15135ec006b13635b36aa5a30446b52310
Validity
Not Before: Mar 25 14:55:02 2026 GMT
Not After : Mar 26 18:04:02 2026 GMT
Subject: CN=F3F2826C02B355B7C9A3F99FA78DC8A77DAE8EE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:4c:f3:ec:8c:cd:7a:d4:61:b6:f5:ba:bf:
1d:90:95:fe:c4:25:34:bb:1e:00:9e:39:a2:aa:c5:
38:f4:dd:8c:5c:2b:16:a3:5c:78:f0:2b:5b:8b:86:
71:d3:a4:32:67:44:d2:0d:c0:f3:f4:b0:b0:77:8e:
a9:34:cc:90:b1:5f:51:7c:10:74:49:39:28:fb:bb:
0f:dc:d7:2b:37:12:19:df:6b:45:2d:49:88:3d:41:
22:93:1c:59:af:70:ff:ac:ba:b8:af:ca:3f:35:cc:
c2:83:19:e8:63:e0:bc:dd:fb:bc:21:4b:14:2c:25:
1e:b2:9c:97:cd:0c:31:2e:6b:2a:0f:ce:f1:30:fc:
94:2f:d3:ac:7e:1d:0f:3b:ac:7e:9b:5c:d9:82:70:
1f:9b:92:fa:1b:94:5b:5c:6f:fa:79:6e:14:dd:8e:
dc:29:bd:92:88:01:d3:1b:27:1c:19:59:a6:84:85:
63:2a:eb:68:10:76:c5:fc:61:86:f4:75:51:36:8d:
44:64:7d:6f:91:42:01:f6:5d:11:12:20:52:f5:9b:
7b:83:96:7b:22:d2:c5:7b:11:68:34:d1:f5:e4:4a:
d5:37:9a:0d:1a:96:92:60:bb:4d:9b:a1:38:3c:c8:
65:5f:bb:11:05:1b:e4:b9:34:8a:1b:f0:34:31:69:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F2:82:6C:02:B3:55:B7:C9:A3:F9:9F:A7:8D:C8:A7:7D:AE:8E:E7
X509v3 Authority Key Identifier:
keyid:BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3e:66:17:5b:ef:06:62:dc:c1:66:92:fd:95:71:af:b9:b0:
95:f3:c1:26:51:24:89:86:c2:64:fe:58:fd:4e:61:bd:d6:ca:
14:2f:5d:1a:b0:5c:4d:a4:68:ff:6d:95:3f:2f:40:fd:9e:0c:
d6:cd:e8:48:a8:17:3c:c4:a0:ca:71:21:41:a8:bf:dd:8c:95:
27:e8:2b:70:99:46:a6:09:9a:3a:45:b5:b3:51:d7:40:f3:af:
9e:42:c9:54:3e:9a:42:9b:a6:3b:cc:6f:8d:f2:f8:04:75:6b:
25:d8:df:05:2c:5a:b4:13:c9:0c:41:25:d7:a8:2e:1f:97:67:
3f:da:0a:8e:99:50:26:3a:83:2e:aa:f0:7c:a5:c5:ea:79:15:
ba:ff:50:0c:eb:b3:7a:9c:51:95:63:be:38:68:99:04:5e:75:
61:f0:a6:e5:9a:da:ef:a5:c1:3e:d9:ec:8d:68:13:87:78:f9:
7e:11:0b:76:dd:66:1a:f6:de:bd:da:75:58:95:b8:b8:39:7a:
90:ce:81:83:11:03:27:29:25:51:16:30:b9:ac:5d:eb:b7:85:
2d:f7:65:1b:b7:b2:03:60:8a:62:6b:f9:02:ec:75:e0:19:44:
3f:b9:1f:27:32:2f:8f:71:98:f8:ce:01:27:96:0c:0b:fe:9a:
72:3a:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:23 2026 by rpki-client