
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: ySxDT66ELi1DtYc/n8xIZEk+87Z7RLFgWlmzIWex+LI=
Subject key identifier: 3C:67:19:BD:03:D8:F1:52:16:D7:48:A6:D2:51:CA:16:B5:29:17:B3
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 019D99D0BC63D11CEB4E26237D2F29E666B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0826
Signing time: Fri 17 Apr 2026 05:01:26 +0000
Manifest this update: Fri 17 Apr 2026 05:01:26 +0000
Manifest next update: Sat 18 Apr 2026 05:01:26 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: IWggH807suDHo3cOf7FebR6Vw3uDY3s3emuuOVNPQ5k=)
2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:bc:63:d1:1c:eb:4e:26:23:7d:2f:29:e6:66:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Apr 17 05:01:26 2026 GMT
Not After : Apr 18 05:01:26 2026 GMT
Subject: CN=3c6719bd03d8f15216d748a6d251ca16b52917b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:81:6a:8c:77:78:e5:46:e6:63:e3:8f:1c:
5f:6a:41:b6:85:00:a4:06:e1:ba:cb:71:39:70:c8:
fd:6c:6a:ec:26:0a:6e:f4:ea:a5:32:f7:f4:e9:62:
97:aa:5d:3f:0e:b0:db:6e:77:33:38:79:6f:33:a0:
dc:d1:1d:43:9c:e7:2e:25:12:d5:d9:cc:0a:b6:6d:
57:c4:df:2b:55:fb:88:d3:5e:dd:9d:de:e3:72:7b:
df:4f:f0:98:68:94:1f:3a:e1:96:f8:a0:c4:a6:c0:
e8:e6:53:cc:7b:89:75:c4:ae:f1:e8:20:bb:6d:93:
71:4a:df:c7:ae:76:cf:e6:63:cb:e7:15:68:6e:8d:
09:9f:5c:88:10:ba:20:06:69:38:6b:61:ce:13:6a:
c8:0a:6b:1e:c7:14:06:74:b6:2b:de:6c:33:93:ba:
97:1d:c5:77:4f:5b:ab:dc:12:30:c8:60:a9:92:8e:
60:90:e8:b8:53:b3:f2:43:f8:1c:72:66:dc:e4:c7:
33:c7:31:bc:1c:a2:78:28:b5:31:aa:6c:7e:fc:56:
5b:74:0e:87:dd:3d:9e:62:f6:40:10:d5:5c:4f:73:
7e:fa:de:e4:ee:f0:f4:e7:76:e3:e0:2c:2b:c1:1c:
10:b4:ff:d9:61:98:6e:6b:c6:0b:54:12:41:d0:75:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:19:BD:03:D8:F1:52:16:D7:48:A6:D2:51:CA:16:B5:29:17:B3
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f9:66:ca:30:a2:74:6f:8b:f9:ea:ac:85:f7:b3:5d:37:2a:
9e:82:d0:65:86:62:59:6a:15:5d:ad:70:fb:d8:e4:b0:b3:5e:
0d:91:1b:16:4b:d1:88:c3:66:9c:a0:11:7d:47:11:56:0e:a3:
fe:d8:fa:ed:b4:f7:59:a6:74:87:e8:fd:5f:55:81:87:8f:fa:
ba:da:22:10:ee:50:60:e1:fb:fa:d7:58:95:6a:7b:74:90:55:
17:4a:12:ca:ba:5c:9b:0b:2c:db:73:0f:41:aa:f5:64:d2:90:
ae:56:0a:e8:ad:1a:c3:cf:00:ab:c3:14:5f:eb:9d:ea:01:ff:
db:8f:cc:f5:9b:5b:3a:8d:80:0b:cd:a2:8f:50:02:b3:cf:36:
7b:93:43:ec:bd:e9:37:ab:14:5a:6c:b6:ea:46:f7:36:dd:e6:
e6:3b:ab:cb:dc:2d:41:66:ce:15:71:df:70:22:4e:70:29:0e:
3c:55:12:01:8f:95:f7:69:11:88:33:bc:5d:7b:a0:1a:44:43:
46:4c:d4:8c:99:7e:99:5e:05:b9:d2:8f:a1:2d:68:62:b1:ac:
64:61:92:bd:d6:59:90:72:89:58:49:91:04:4a:d9:02:9c:5b:
ca:b7:af:66:15:51:87:84:24:a9:fb:e5:34:a7:cf:f2:1f:a3:
02:eb:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:17 2026 by rpki-client