Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: zgJ2cwdTZ7TmExZZblHcThAUe4JDBhNyvdQTuU/2BIM=
Subject key identifier: 4A:EE:FD:BC:9A:7D:AB:27:9C:67:D7:0C:B2:FA:D5:27:8D:D0:20:A7
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019DA41CE58A36D6E6BF19282142A2B85A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0FEF
Signing time: Sun 19 Apr 2026 05:00:50 +0000
Manifest this update: Sun 19 Apr 2026 05:00:50 +0000
Manifest next update: Mon 20 Apr 2026 05:00:50 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: n6BnmlOhlT/hu91iOLuyo7bUI3H0K/woVcYTk9XaePk=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:e5:8a:36:d6:e6:bf:19:28:21:42:a2:b8:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Apr 19 05:00:50 2026 GMT
Not After : Apr 20 05:00:50 2026 GMT
Subject: CN=4aeefdbc9a7dab279c67d70cb2fad5278dd020a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:e2:8f:f6:2a:a3:33:93:9b:a7:ef:ed:c2:
8c:4e:9a:8c:e1:2e:84:93:b0:30:f1:b3:d0:63:a8:
f8:9f:9a:ca:48:0e:90:6f:7c:fe:28:3e:59:f3:6e:
eb:a7:8e:9a:e7:e1:64:ed:82:cd:e2:9d:73:52:1e:
ea:22:e1:e0:0d:08:96:ba:9d:3e:6e:d8:f4:74:43:
a3:dc:07:7a:e5:29:ee:22:af:30:ae:54:45:2e:37:
51:3f:98:4f:8e:ff:d4:b1:1a:d8:25:a6:b9:5c:ab:
69:bf:00:7b:4f:6a:7c:2a:75:a7:cd:c5:88:82:ae:
2b:d2:95:6e:cc:8a:6f:22:c9:e0:44:32:0d:f7:91:
f6:0e:3e:4a:50:98:91:20:51:42:12:bd:a9:27:21:
b8:10:85:18:ab:ba:4b:4a:d5:45:35:92:47:1d:6e:
47:74:43:30:dc:e0:b5:32:17:b6:43:05:a5:51:5a:
0e:f9:65:ee:08:62:10:83:4a:1f:fd:7f:2c:c6:b6:
38:65:3a:f2:5c:ea:df:27:7b:1b:b0:24:ea:74:6e:
b3:88:f0:85:3c:20:12:13:53:5f:e6:57:2e:33:0f:
07:bb:c3:c7:71:c9:de:60:97:fc:02:5c:31:c6:70:
6a:fe:81:d6:8b:5e:68:0d:d1:0e:84:9b:c9:f7:66:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:FD:BC:9A:7D:AB:27:9C:67:D7:0C:B2:FA:D5:27:8D:D0:20:A7
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:84:25:05:75:19:8b:c2:31:fa:66:1e:60:ef:97:9f:ab:
0c:7e:4b:88:ce:96:ac:3c:90:0e:99:32:ae:aa:4a:51:70:cc:
79:9f:97:5f:d6:e4:28:78:0a:43:5f:5e:a8:c4:d1:f3:57:86:
11:90:3d:b2:9e:3a:24:ea:90:ac:61:d9:4e:c2:3e:45:47:6d:
14:35:92:a3:e2:1d:59:79:26:be:1c:c8:51:0f:17:ba:9a:d3:
2c:e0:8e:91:55:5f:ec:b9:01:6b:1a:03:ff:a9:b0:3c:06:29:
6b:84:8c:44:d4:66:91:31:21:7e:85:6a:de:ae:d6:fc:4b:97:
50:5a:7f:6a:b2:9b:ed:4e:8e:07:b3:2f:a6:b2:d8:91:c0:10:
b6:92:a3:43:8e:fe:1c:5f:ef:aa:c2:94:b6:b5:32:e0:8f:55:
7d:8d:26:d3:30:c4:d6:ef:cf:44:9c:5a:50:9e:8e:14:85:40:
e3:4d:fd:25:ea:77:1d:fd:2b:18:79:2e:4d:8c:a2:20:52:28:
fc:ad:f3:ff:45:82:b0:9f:01:7e:50:ad:e9:ed:55:fe:b1:8b:
56:7a:ac:2f:10:6e:c9:3d:bd:3f:d5:cc:e1:7b:e2:d2:da:75:
b1:38:70:62:d7:f0:75:37:f9:6f:c3:9d:1e:be:76:aa:80:95:
7b:d3:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:16 2026 by rpki-client