
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
File: bbMKQaam8hqbLdflhWog1bXv_hw.mft (raw, json)
Hash identifier: WXK3MCX1ZY8hcNiWGRAStNLhgnk/JbPOYBsP9QkpU5Q=
Subject key identifier: DA:8E:03:0C:1E:CC:4C:98:CA:D9:EF:92:41:C9:2C:4C:02:25:D4:6F
Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Certificate serial: 019D9BBE23341A1B8A993D3CC456D32AE2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
Manifest number: 0133
Signing time: Fri 17 Apr 2026 14:00:22 +0000
Manifest this update: Fri 17 Apr 2026 14:00:22 +0000
Manifest next update: Sat 18 Apr 2026 14:00:22 +0000
Files and hashes: 1: KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa (hash: HTQ4SqU1gbnyzbZ9VFLXWOk6V34twlkajlodOkPujZU=)
2: bbMKQaam8hqbLdflhWog1bXv_hw.crl (hash: gsU+ngttG4Zx+4ZuHG+bpe88ecprWwNtKh4ak8zXSRw=)
3: cgRdj34DpoTUvX6McD-JQwWr-WA.roa (hash: ZVcWw9p279t4mbxBYleG4Xg0e+UqxRd7bXYPDCuxz2w=)
4: dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa (hash: YiThV6hGoAFFghLAZu6/Suaci71yHsUeFK7P3D3y8FQ=)
5: gSng8bmqZiw6jb1bs3NjfDpX7wM.roa (hash: rLCdrSPUSpTEnkTQiU5fDOLCEMchnh4Nxl216udf2yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:23:34:1a:1b:8a:99:3d:3c:c4:56:d3:2a:e2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Validity
Not Before: Apr 17 14:00:22 2026 GMT
Not After : Apr 18 14:00:22 2026 GMT
Subject: CN=da8e030c1ecc4c98cad9ef9241c92c4c0225d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:88:15:b5:09:dc:fa:e5:84:de:a7:9c:22:
42:db:04:cc:cd:3b:39:ad:a0:3d:fb:b1:ac:35:3a:
58:a2:0d:b6:60:73:99:95:37:f5:8c:9f:6e:4a:8a:
7b:c3:48:de:14:65:56:a3:ef:83:b0:6e:e5:af:09:
ef:b7:aa:c7:09:f6:4f:1f:6b:0b:f3:a5:34:0c:40:
26:55:d0:d4:58:b7:9e:b8:76:7b:b7:01:e0:61:48:
bf:2a:7b:02:3b:98:79:cc:20:75:3c:23:b1:fa:ba:
38:84:03:64:ec:39:2f:f7:3e:4a:63:50:7d:e4:96:
4d:3f:57:e9:5d:d8:8c:e8:7c:ab:40:ba:23:80:3a:
43:b2:65:7c:0a:b4:32:4d:fc:f7:e1:e8:a9:c5:1b:
18:df:cf:7f:b0:0b:86:66:fa:df:e1:c1:0f:53:3c:
01:91:ab:41:32:4f:c6:8d:1b:08:97:b2:9e:d1:e0:
1f:a1:b7:55:a1:b7:07:2c:c6:0c:80:d0:47:76:fa:
b4:f7:b1:30:f0:30:89:1e:67:7a:ef:20:9b:50:c1:
d8:25:39:37:9e:f0:73:54:a3:ec:41:64:97:dd:c3:
e8:d1:60:5e:5b:91:06:d4:79:8d:7d:ba:7f:a4:f9:
26:11:5d:6a:bf:56:a8:79:ee:2c:d9:30:d7:c6:f5:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:03:0C:1E:CC:4C:98:CA:D9:EF:92:41:C9:2C:4C:02:25:D4:6F
X509v3 Authority Key Identifier:
keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f6:bd:e6:f8:93:35:77:cd:34:12:a7:b1:e1:2b:c2:b3:c0:
30:72:09:3a:9f:b5:eb:f2:d8:1d:50:d5:fc:15:bc:9c:07:7b:
fa:94:93:78:85:68:fb:fb:37:5c:c5:94:a9:62:a9:cb:b0:c0:
a2:e1:33:bc:f0:ae:cf:8a:47:1b:32:04:c3:65:d5:e7:80:9b:
4f:d3:63:4f:d5:ae:37:bb:78:e6:60:72:1a:2d:11:70:ca:9e:
74:2a:44:7b:c8:3f:d6:f8:7c:be:4c:a5:4c:88:a2:83:f3:73:
eb:89:d3:8f:5b:b2:e0:ee:c8:19:bb:4c:1b:32:d1:eb:ab:81:
e2:86:af:cd:79:24:6f:b8:8c:60:d8:b7:63:61:86:53:11:73:
83:47:08:46:a9:55:10:c2:b5:ad:de:b6:e0:db:1e:e6:f7:54:
48:42:c9:3c:85:63:b7:59:f5:2c:7e:87:f8:26:28:67:28:f4:
90:91:43:17:53:36:30:6b:cc:33:56:7d:68:4a:2c:d4:b6:e6:
d6:1e:16:63:34:75:02:37:95:72:3e:11:aa:87:1d:33:1f:a5:
e6:5f:d9:d2:59:52:db:17:29:30:0e:28:8b:93:83:c1:cf:43:
e1:96:b9:d2:da:c1:62:90:81:b0:4f:79:8d:b5:f3:1f:e7:f8:
55:7f:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:56 2026 by rpki-client