
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: UMgPnfyXS3TSDDRW+Q7SXuqNVm1g7vl0SwEnEZKas7Q=
Subject key identifier: FC:1F:99:E1:95:D1:14:9F:BF:B8:2B:CE:BE:84:2F:2F:A0:44:1D:7B
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019FA9AB88C50E5EAFE2BA79C9B2CEE12B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 19E4
Signing time: Tue 28 Jul 2026 17:00:18 +0000
Manifest this update: Tue 28 Jul 2026 17:00:18 +0000
Manifest next update: Wed 29 Jul 2026 17:00:18 +0000
Files and hashes: 1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: 4oBYl8xXL5DnubbpxaziHp4lhaIrPyRL4X9Rev7IHtY=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:88:c5:0e:5e:af:e2:ba:79:c9:b2:ce:e1:2b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Jul 28 17:00:18 2026 GMT
Not After : Jul 29 17:00:18 2026 GMT
Subject: CN=fc1f99e195d1149fbfb82bcebe842f2fa0441d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:4d:52:f5:8c:33:d5:3c:2f:81:79:bf:f3:
f2:e9:ef:1a:fc:8c:a4:9c:64:76:86:d5:16:35:70:
f2:d5:86:cb:6f:df:e4:c6:6f:b3:81:ef:12:10:38:
a4:7e:dc:7b:6c:aa:48:a1:d0:bc:92:d8:de:57:8f:
88:62:16:9b:25:c6:a3:54:a2:7c:4e:5f:d1:21:c7:
f3:17:d1:3f:e6:a0:89:43:c2:65:6c:83:0e:36:08:
35:29:e4:cc:a3:e3:3a:15:1f:d2:58:84:65:b5:04:
18:4e:cf:de:fa:37:2a:32:0f:21:63:1e:fb:dc:32:
49:d3:07:14:b0:87:b7:c2:f2:0d:a1:3f:87:55:b0:
64:d6:30:84:48:9d:67:fe:f3:5d:3f:96:d7:eb:dd:
de:d2:a0:26:96:2c:b5:0d:ec:f3:cc:c6:ac:d5:fe:
a1:0d:ac:38:ee:58:31:70:17:54:4a:01:6f:f4:8b:
65:aa:85:11:54:d6:74:83:82:2f:fe:3b:f2:d1:f2:
89:70:1f:df:3b:99:14:91:9b:57:2d:38:d2:6c:3b:
9a:a0:c4:72:1f:c7:89:8c:f5:1c:53:07:de:9b:89:
64:df:96:0c:4b:f4:da:84:b5:c4:3e:1f:8d:6b:1d:
76:28:d9:bf:cb:49:fc:c2:bc:9f:32:86:e2:bc:46:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:99:E1:95:D1:14:9F:BF:B8:2B:CE:BE:84:2F:2F:A0:44:1D:7B
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:13:b9:b8:1e:72:19:6e:94:df:5d:9d:0d:14:ee:f8:22:2f:
04:23:df:d9:f4:38:ab:6a:2b:cb:65:ca:54:3e:ef:52:07:a3:
bb:0c:b0:38:d1:67:8b:44:26:57:41:a9:90:60:b2:a6:9d:fc:
c1:c1:5b:dc:0d:4c:41:cb:b9:a0:07:f2:10:4a:7c:73:41:4d:
5b:f0:7b:3a:30:a7:f5:c2:51:f8:2a:e9:e4:ce:6b:48:9d:35:
e1:7b:ae:5f:48:06:90:fb:d5:c8:18:c6:88:86:c7:fd:27:34:
fa:3b:a9:c6:e8:bc:b3:5b:af:c2:34:a1:cb:35:07:bf:f4:7b:
bb:6c:fe:45:b8:9f:65:ac:d3:52:19:47:90:fb:bc:9b:ef:74:
53:34:6e:7e:50:98:64:54:f7:9a:81:0b:97:0b:cc:f9:0b:c9:
48:c3:39:c9:c3:92:e8:6c:37:f4:bd:44:63:4e:76:ae:6a:65:
19:2f:16:59:a4:1e:f7:fc:cc:05:c1:05:63:ab:bb:98:d2:1a:
a3:83:f4:55:99:c3:57:52:28:10:e4:51:8e:c6:c8:3c:69:09:
58:e6:43:29:c9:87:90:f7:65:2c:17:72:47:4c:7a:75:08:db:
e6:23:e0:ce:11:08:3d:b3:7a:be:d5:3c:09:f4:f1:e2:40:59:
ee:99:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:32 2026 by rpki-client