Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: Bq+yFnkuJJno9bpVJqPfIbc2pQuMQAaXOxaTL1Lf2SU=
Subject key identifier: C4:52:F3:92:94:54:D8:F3:F0:39:0D:DB:00:DD:0C:CE:9B:15:11:DB
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 019FA899A8C719E9374586B0D553BAD8E79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 12:01:10 +0000
Manifest this update: Tue 28 Jul 2026 12:01:10 +0000
Manifest next update: Wed 29 Jul 2026 12:01:10 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: LHzg+KEK5zOT2Daovit3CQhgMXHicMJuZZALnp0U+a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:a8:c7:19:e9:37:45:86:b0:d5:53:ba:d8:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Jul 28 12:01:10 2026 GMT
Not After : Jul 29 12:01:10 2026 GMT
Subject: CN=c452f3929454d8f3f0390ddb00dd0cce9b1511db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:4f:a0:13:77:a1:02:d7:31:c7:23:e2:af:
08:5c:9d:8c:fd:a9:60:88:a8:72:14:d2:b2:a4:85:
24:89:db:65:99:8a:70:e2:71:be:31:0a:b5:b0:93:
02:af:4c:e5:4f:d6:00:57:f0:c4:9f:54:e4:1f:bf:
41:7c:80:bd:4a:02:26:31:25:60:35:6f:dc:a5:a5:
33:78:c1:07:a1:34:f7:a8:d2:1a:9a:30:8f:90:15:
0f:e1:25:b6:7e:58:59:72:76:c9:f2:f1:04:f2:d1:
6f:e1:94:4a:26:89:19:87:8c:ef:18:de:a7:10:40:
ad:56:cd:5a:48:1f:91:07:51:ce:1f:cc:d9:bb:9f:
7b:9f:53:ba:88:19:44:e8:d1:2d:bc:d8:ba:94:f5:
21:79:7c:8c:03:a0:7f:45:59:76:64:63:01:95:94:
83:21:e4:c0:4e:06:00:20:91:5b:c5:0c:b2:ec:12:
48:af:13:71:54:53:7f:b0:24:75:ff:f5:f9:65:97:
d0:57:8e:e8:46:e7:da:b6:c0:6a:3c:fc:ec:7c:0d:
05:e7:4a:4b:56:54:fe:0f:3c:f6:ec:86:9f:9c:15:
84:26:4d:e7:bd:3f:1c:1a:46:29:ec:80:19:31:5e:
3d:08:dd:1e:4f:5b:7e:a5:02:28:09:cc:0c:5e:86:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:F3:92:94:54:D8:F3:F0:39:0D:DB:00:DD:0C:CE:9B:15:11:DB
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:96:30:c9:5d:86:94:cd:af:f7:c1:b0:6b:c6:7b:55:b5:95:
9c:d2:3c:03:0a:c5:db:f7:29:25:2d:36:8e:f1:94:01:22:2c:
a2:91:09:1c:64:7f:42:0d:b1:39:16:16:e3:ec:01:3a:5b:42:
33:bd:08:0e:8b:25:13:d9:0d:07:6b:39:f1:6b:bd:b4:ea:06:
30:cb:2f:db:49:fc:14:fa:ef:bc:e9:13:da:6f:a0:79:46:41:
80:0b:49:aa:da:c0:c7:66:82:a0:e6:74:20:cd:5f:5e:e9:eb:
d0:b2:e3:8a:2e:24:41:7d:8c:1b:77:b0:b2:b6:bb:07:d8:03:
be:b8:d3:21:49:cd:78:1e:65:ea:8b:84:61:fc:7c:82:b0:42:
d1:75:8d:35:5c:e1:35:30:50:61:63:b8:71:e4:26:85:12:35:
66:6c:ef:64:24:33:cf:57:b1:82:92:bb:b6:fb:d4:84:ad:6e:
0a:43:53:80:e2:69:05:8c:de:cf:da:c8:ee:80:eb:0f:73:d8:
b2:3a:1b:a2:53:a0:61:7a:58:eb:b7:6c:9b:c9:cc:64:3c:74:
50:fd:2f:89:4f:5b:af:08:1d:75:ea:68:0b:fe:a8:c0:a1:64:
53:9b:ca:ed:0d:41:c8:c4:3b:e4:04:d6:34:28:64:97:a0:95:
66:10:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:53 2026 by rpki-client