Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: nAIl5AzYNYA+vNXso6QtQkD7oa8uFKoOhg0eHbL3lU4=
Subject key identifier: F7:B9:DD:83:5B:06:87:5F:22:41:47:CD:F6:1B:30:E5:0C:CF:8B:16
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 019FA9072E109779A697E57C8D871C6E6682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0937
Signing time: Tue 28 Jul 2026 14:00:47 +0000
Manifest this update: Tue 28 Jul 2026 14:00:47 +0000
Manifest next update: Wed 29 Jul 2026 14:00:47 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: qcbS3WIPZerhIGBWnBdzEuTE8yStQR6tgHHdkJhUJ7k=)
2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:2e:10:97:79:a6:97:e5:7c:8d:87:1c:6e:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Jul 28 14:00:47 2026 GMT
Not After : Jul 29 14:00:47 2026 GMT
Subject: CN=f7b9dd835b06875f224147cdf61b30e50ccf8b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:97:9d:f7:73:9e:38:42:8b:2c:68:89:87:
15:9c:47:00:0c:3d:71:d4:a7:9d:f1:4c:67:83:95:
57:cc:6c:55:a7:fb:d5:37:e4:ff:4d:d5:31:04:21:
67:bd:42:10:ea:d2:59:21:d6:7e:ed:3c:01:b7:33:
3f:57:17:63:ca:30:f8:a7:b1:fc:a4:93:ce:3a:bf:
51:93:82:ba:f3:fb:ae:86:e2:78:9b:71:8f:be:fe:
c3:97:6f:7f:2a:63:3d:87:1c:df:05:28:55:55:3e:
20:e8:c9:66:d5:cf:b8:3d:3e:4b:d9:99:72:94:f2:
1b:d5:dd:28:4b:8a:43:a3:ee:d8:4c:8b:c0:fe:c2:
53:30:72:6c:8b:d2:26:81:d1:52:ca:3f:bb:e9:c7:
eb:cd:9d:49:3d:90:f2:bb:28:69:0b:c0:7c:ad:2f:
85:a0:96:b1:52:77:7b:b7:f2:4a:2d:82:5f:26:ab:
d5:6c:44:62:05:34:82:67:c0:a4:e2:e3:6f:9f:2c:
35:f4:65:e3:fd:9b:3f:26:58:1b:1a:9d:e8:51:a3:
78:d1:81:ee:1a:3d:b3:8f:5e:79:63:f3:4a:5d:25:
cc:24:43:93:cd:8b:04:97:bb:d7:31:e5:fa:be:c5:
09:df:47:3c:a8:5f:03:e9:96:9a:70:e0:d3:b2:83:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:DD:83:5B:06:87:5F:22:41:47:CD:F6:1B:30:E5:0C:CF:8B:16
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:dc:34:b8:6a:4f:90:ac:d2:c6:ae:97:d6:e2:cb:d3:c8:10:
39:e2:e9:fa:dd:6e:02:a3:a8:cd:2d:bd:76:ec:89:77:cc:e5:
7b:30:75:5b:fa:45:90:22:a4:5c:b6:d2:b2:0a:88:13:b8:9c:
ee:45:a1:c7:67:c1:4f:2e:b5:70:f4:6d:3f:3e:3d:3d:36:f8:
11:7b:06:10:a1:f6:bc:f5:34:37:db:95:36:60:ba:ea:04:83:
a1:8b:ef:40:48:22:74:00:ed:6e:1c:7c:5f:12:a4:be:02:2a:
aa:03:60:c9:e8:64:3f:60:9b:3a:8b:fd:ca:36:82:7f:24:6d:
22:66:48:a5:69:3f:9e:66:1d:50:2b:93:9a:c0:bd:be:94:e0:
06:f2:b3:73:2e:df:5f:a5:37:75:96:9f:dc:05:5d:2f:49:69:
97:1f:d0:4a:6f:41:81:c9:dd:a7:eb:54:b3:9a:2c:77:9a:24:
b3:71:a5:22:48:5e:c9:e8:fc:03:8c:25:30:20:5c:0b:dd:c9:
24:ee:57:9e:1d:87:5a:72:a9:9d:3c:69:9c:66:ba:e8:40:a2:
e5:82:55:b8:91:8e:dc:8e:ea:14:ae:0b:24:e0:30:1e:59:60:
85:1a:e1:c7:7c:6a:61:7a:ab:ba:63:0f:8f:fb:a8:7b:2a:3a:
af:8c:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:06 2026 by rpki-client