
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: FQM4bdtx3nZF/t0MA96fe7PyukxwFXzWZOkJv3T6Umc=
Subject key identifier: AD:7B:92:3B:C8:8F:CC:22:8A:FF:18:DB:F6:6E:20:59:FF:A9:A3:54
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 019CABD9E562775AB8968C42A07B385D76AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: OD8aJUWQfj48PwZDGy5T7vUrk4ygSLDcEKdcXAoaos0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e5:62:77:5a:b8:96:8c:42:a0:7b:38:5d:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=ad7b923bc88fcc228aff18dbf66e2059ffa9a354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7e:2b:26:be:21:51:80:2b:97:14:0d:d7:4e:
fd:aa:0c:93:83:86:58:85:14:71:8e:53:6c:ca:8f:
01:bb:d3:4f:8d:6d:cf:ae:5a:88:f2:e6:16:dc:d1:
03:b7:de:1a:3f:3e:48:54:2c:93:83:a1:86:2e:e4:
c8:e2:95:e2:20:c1:fa:cc:99:3e:6b:a1:bc:5a:d9:
8c:47:27:47:59:76:1b:19:4e:da:9d:e0:bc:18:3e:
8c:85:5c:92:51:40:80:e6:94:50:15:fd:e5:89:7b:
73:3b:16:9d:47:2d:67:07:d7:29:a7:a9:56:94:4e:
52:fc:20:6b:a3:ca:5a:88:8e:05:b5:9c:45:38:d4:
e5:48:85:ba:97:86:5a:8d:b3:a4:95:20:79:8f:ae:
db:82:6d:0e:40:38:71:d8:4b:1a:7f:9d:0a:51:0b:
27:c3:19:0a:70:05:80:07:ec:b9:e5:bc:b7:8b:5d:
71:0a:14:98:9e:08:c8:47:01:2e:4b:47:54:6f:84:
c4:45:9e:17:9f:4e:ff:d1:ec:96:50:34:39:d4:00:
ad:b9:a5:54:b9:bd:ad:ac:96:20:28:d0:62:ea:2d:
b2:b3:f6:42:70:28:33:c7:e0:c4:d7:79:33:1a:c8:
51:2a:2c:a4:5c:36:8c:89:19:81:97:f6:94:ad:81:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7B:92:3B:C8:8F:CC:22:8A:FF:18:DB:F6:6E:20:59:FF:A9:A3:54
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:85:56:02:81:e0:8c:1c:e9:ff:7f:aa:ea:19:43:5b:90:
93:c5:75:40:03:d1:d5:78:1b:4a:d4:4a:68:ae:23:c2:bc:ab:
5a:57:dc:2d:cf:6a:fa:09:38:27:df:c8:16:c5:2c:f4:30:02:
39:cd:b4:68:55:d8:d5:75:c2:0e:53:3d:7c:b8:5e:35:6f:d1:
9a:4b:4e:2e:f9:bf:df:f2:cb:b3:a9:fa:ec:75:5c:1e:aa:ae:
03:3f:b4:7f:4e:38:a3:bb:f7:94:89:29:0b:fd:89:6d:6a:e7:
ed:1f:ca:62:75:ea:82:0f:22:f6:64:aa:3e:ae:9e:9f:e7:60:
11:0d:14:ce:b1:c9:92:6e:11:f1:b6:af:59:8f:c4:fd:27:7e:
75:d0:1b:22:74:ff:7f:01:4f:b1:c4:43:e1:24:87:66:1f:33:
6e:aa:b8:55:b0:4f:66:71:dd:b0:0c:02:78:78:e7:b2:93:62:
36:24:b0:40:06:b1:b8:ee:dd:ec:4d:f4:01:1f:30:87:df:99:
3e:a2:1e:20:ea:7a:ce:2b:b3:79:80:c6:93:d2:08:b8:4f:68:
3c:94:e4:63:33:af:8f:ea:8c:98:84:1b:5e:02:92:5b:28:43:
e8:3c:61:ea:37:a0:4a:a1:48:a3:5d:5a:4c:9e:42:d7:66:59:
bb:7c:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:45 2026 by rpki-client