Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: UXrXwruS4h+ncv69IjbvvhGH8mSgSgNN7u5VNdLX5Jo=
Subject key identifier: 04:F4:C8:C1:CD:9D:AD:38:9F:1B:59:32:69:AD:A8:B7:6A:73:5D:05
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019FA9ABFCE5D6565039F388C1EC04A86F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 10FB
Signing time: Tue 28 Jul 2026 17:00:48 +0000
Manifest this update: Tue 28 Jul 2026 17:00:48 +0000
Manifest next update: Wed 29 Jul 2026 17:00:48 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: kDgNmv7WFwW1zyca6qb/mkwuRUmJfaMJAG/HV2ZlWU0=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:fc:e5:d6:56:50:39:f3:88:c1:ec:04:a8:6f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Jul 28 17:00:48 2026 GMT
Not After : Jul 29 17:00:48 2026 GMT
Subject: CN=04f4c8c1cd9dad389f1b593269ada8b76a735d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:14:af:2f:4e:bb:86:2d:0a:4f:ff:b3:a1:
c3:f5:48:f3:9f:e1:ff:71:6c:37:3c:cc:aa:0d:ef:
19:ec:67:51:86:ed:88:83:9c:d3:79:b8:48:93:ec:
8b:e0:9b:87:c5:1c:ce:7f:64:4b:dc:72:1d:9f:8e:
38:1a:52:fe:2f:3e:a1:ba:af:ca:db:0c:ab:ab:9e:
49:49:99:9a:54:78:a1:c4:6b:37:ee:5f:6e:93:d3:
45:be:04:4d:cd:1d:7a:8e:37:4e:94:a7:b2:f4:20:
c6:e7:8b:40:64:77:b3:a6:4b:98:50:f3:a3:82:ee:
b7:15:a0:d0:ad:67:17:bd:64:1c:dc:aa:f5:3e:7f:
37:c3:a7:1c:d3:78:3d:dd:0c:47:1d:7e:90:bb:b4:
29:b7:7a:80:45:99:cf:b4:34:c2:8a:84:2d:25:ad:
4d:38:e4:5c:e3:45:89:d8:13:91:a6:87:53:45:24:
e7:87:98:0b:d2:44:51:7b:84:87:e8:f2:d3:d3:18:
84:e5:e5:8f:90:3e:49:a6:ea:83:6f:91:24:c9:36:
a9:14:af:41:3c:98:ff:9f:b5:0a:e2:be:03:a2:b8:
c6:fa:0d:ae:6d:38:aa:0b:2c:8b:f8:82:85:a1:9a:
c4:62:9f:12:3a:36:46:b3:2a:85:10:06:4f:f1:f4:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:C8:C1:CD:9D:AD:38:9F:1B:59:32:69:AD:A8:B7:6A:73:5D:05
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ec:46:db:0c:8c:00:7a:8e:8f:27:3f:a0:32:53:5e:01:05:
a9:13:f7:33:ec:79:28:7a:81:3e:27:63:7f:80:a7:60:f4:5b:
ca:ff:47:77:13:55:11:8d:ff:a1:60:f5:08:63:31:26:1f:7d:
ff:21:34:59:04:95:c1:b4:1c:b0:cf:3f:96:8e:c3:01:52:6d:
bd:71:ef:d4:17:b2:65:95:72:18:35:40:98:e0:38:33:81:55:
0b:03:0c:7b:8f:69:75:4e:a9:a4:47:9b:a9:91:87:b1:97:14:
9b:a6:5b:96:7f:11:93:c7:8e:0a:b3:16:7e:9c:7d:bd:22:35:
27:39:4c:5a:1d:ff:c0:8a:6e:88:6c:1b:a5:80:1c:cc:38:f0:
f4:17:3b:8d:09:82:16:28:2a:38:2c:b5:ae:f0:e1:6d:da:20:
97:52:30:2e:41:04:44:63:35:15:e8:cf:2d:af:85:0b:3a:b7:
9f:22:8c:2c:1a:50:23:64:27:03:4a:b3:3e:66:7b:84:27:4b:
ce:f1:6c:fe:1d:c2:81:b2:c4:56:5d:78:fa:cc:0d:13:57:e2:
ca:a2:98:86:be:51:4f:70:53:a9:d9:72:b0:7e:e1:a2:cd:9c:
89:b7:79:29:84:a3:f3:66:1f:bb:a5:41:69:24:b3:e3:42:a3:
60:10:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:13 2026 by rpki-client