Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: +ncc7kb9cHkXBko6W1Lw5nIGGRBhqMhAHup3705WuFc=
Subject key identifier: DE:BD:7D:46:1B:FA:3A:5C:1C:AA:16:D6:6B:69:6D:52:CC:71:B4:99
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01A0DFBD32E7B922E0CAECC1BFA536F550B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1A86
Signing time: Sat 26 Sep 2026 22:01:53 +0000
Manifest this update: Sat 26 Sep 2026 22:01:53 +0000
Manifest next update: Sun 27 Sep 2026 22:01:53 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: eUWAeAHChAss978+50cDsR3VZCD5+B2HhSmN2XqUDtU=)
2: _l4YjibNL4tMMVqIwdmfRf9vXqI.roa (hash: P9JOmxd5QUs3HnQ33b/0KwXQ8MA8bLPVK9YMxcnjWHU=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:32:e7:b9:22:e0:ca:ec:c1:bf:a5:36:f5:50:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Sep 26 22:01:53 2026 GMT
Not After : Sep 27 22:01:53 2026 GMT
Subject: CN=debd7d461bfa3a5c1caa16d66b696d52cc71b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:88:3b:e1:06:d2:fc:62:8c:ac:5e:6b:4c:72:
a4:23:f1:a6:a4:9e:06:b2:32:95:65:fd:f3:63:ac:
48:28:07:d9:00:2b:58:ec:28:c8:f3:ef:37:5c:82:
2a:4a:53:4b:90:4a:90:60:84:c2:8e:72:e2:96:29:
4b:16:7d:85:00:76:d2:08:20:cd:5e:78:7a:d8:6e:
52:3d:6c:1e:76:68:68:fb:cd:89:c5:e0:9c:fb:84:
fb:03:26:51:26:b3:a1:5c:7f:ba:81:92:3c:98:8b:
43:0c:10:65:6b:f2:73:68:be:77:b2:34:c3:10:04:
77:ed:4d:6c:c1:51:4e:a7:f4:85:4d:a1:c7:1c:26:
66:5f:98:5b:49:48:bb:a1:e7:cb:58:fe:ce:2f:f8:
47:34:f6:e3:2a:ef:8c:92:77:f5:1f:07:24:12:e6:
18:83:25:1f:6a:3b:09:e5:bc:10:5a:df:c6:4c:d8:
bf:7e:63:68:3c:97:1b:60:34:1c:03:af:f4:01:fe:
e8:fa:68:46:14:6e:80:e9:91:19:94:da:38:7b:55:
84:2a:a5:38:f5:38:16:ee:98:fc:f9:a8:d0:b1:34:
48:ed:b0:ed:a1:65:5d:6a:89:81:39:29:fb:5e:28:
a8:bc:ca:29:3c:46:38:3d:6e:28:72:1b:90:e0:96:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BD:7D:46:1B:FA:3A:5C:1C:AA:16:D6:6B:69:6D:52:CC:71:B4:99
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:2e:6e:05:a2:46:c6:71:90:56:37:37:cd:5e:08:87:19:
f9:ca:6c:80:f1:90:63:32:f5:5f:ee:ea:3d:eb:b1:46:e8:50:
9b:94:62:0b:a2:db:5c:65:12:11:e6:66:24:fd:f0:a5:2d:8b:
08:fc:46:a9:97:30:d3:4d:69:2d:fc:de:3e:44:10:5d:74:43:
a3:af:17:52:00:36:a8:2d:02:62:a1:76:5e:2e:37:54:61:50:
ca:71:83:6b:8f:19:ae:ad:0e:18:f3:f6:5b:9b:2c:32:8b:c4:
1a:47:ec:32:99:1e:bc:52:8a:85:55:70:69:76:7a:76:f6:9c:
be:27:c1:e6:9b:eb:d4:51:59:fb:2f:1a:f5:69:dc:db:12:e1:
5e:66:46:32:f7:d1:43:52:aa:c0:f5:01:ad:36:3b:16:0c:1b:
ee:6d:7f:aa:c8:f0:aa:f0:fb:ef:a8:07:42:d5:b9:56:d4:e4:
67:2d:f7:ca:d7:2e:e0:3f:7c:0e:34:74:c8:2c:67:ab:c2:4f:
5f:fb:a1:30:75:00:32:be:bb:a2:66:d4:41:55:f7:e6:84:0a:
f3:71:82:51:8f:e7:0c:60:a4:92:4d:ca:a6:83:9d:c0:cd:a4:
d0:7d:05:8f:17:6b:54:34:5f:c8:47:2b:19:73:63:e9:e4:8c:
2f:bb:08:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvTLnuSLgyuzBv6U29VCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri
OWJkZWEwHhcNMjYwOTI2MjIwMTUzWhcNMjYwOTI3MjIwMTUzWjAzMTEwLwYDVQQD
EyhkZWJkN2Q0NjFiZmEzYTVjMWNhYTE2ZDY2YjY5NmQ1MmNjNzFiNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ig74QbS/GKMrF5rTHKkI/GmpJ4G
sjKVZf3zY6xIKAfZACtY7CjI8+83XIIqSlNLkEqQYITCjnLililLFn2FAHbSCCDN
Xnh62G5SPWwedmho+82JxeCc+4T7AyZRJrOhXH+6gZI8mItDDBBla/JzaL53sjTD
EAR37U1swVFOp/SFTaHHHCZmX5hbSUi7oefLWP7OL/hHNPbjKu+Mknf1HwckEuYY
gyUfajsJ5bwQWt/GTNi/fmNoPJcbYDQcA6/0Af7o+mhGFG6A6ZEZlNo4e1WEKqU4
9TgW7pj8+ajQsTRI7bDtoWVdaomBOSn7XiiovMopPEY4PW4ochuQ4JZUaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN69fUYb+jpcHKoW1mtpbVLMcbSZMB8GA1UdIwQY
MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt
Njg2N2M0YWUzMTYxLzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx
LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgoubgWi
RsZxkFY3N81eCIcZ+cpsgPGQYzL1X+7qPeuxRuhQm5RiC6LbXGUSEeZmJP3wpS2L
CPxGqZcw001pLfzePkQQXXRDo68XUgA2qC0CYqF2Xi43VGFQynGDa48Zrq0OGPP2
W5ssMovEGkfsMpkevFKKhVVwaXZ6dvacvifB5pvr1FFZ+y8a9Wnc2xLhXmZGMvfR
Q1KqwPUBrTY7Fgwb7m1/qsjwqvD776gHQtW5VtTkZy33ytcu4D98DjR0yCxnq8JP
X/uhMHUAMr67ombUQVX35oQK83GCUY/nDGCkkk3KpoOdwM2k0H0FjxdrVDRfyEcr
GXNj6eSML7sIqA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:19:41 2026 by rpki-client