Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: nvmpl2j+1SVAbLt3MD0FlbDFlVksR+sx/tcmHAaUROY=
Subject key identifier: F1:4B:6C:DA:87:87:5E:37:33:7B:AD:D8:AF:06:7A:1F:B3:C8:56:FC
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 01A0C77CC9FCA5842F9ACDEA0D4191C0180D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 118F
Signing time: Tue 22 Sep 2026 05:00:39 +0000
Manifest this update: Tue 22 Sep 2026 05:00:39 +0000
Manifest next update: Wed 23 Sep 2026 05:00:39 +0000
Files and hashes: 1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: gJIV1i03NilzI2z/3ecLwu7GRfWNUzUB5wTvHp5awAc=)
2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:c9:fc:a5:84:2f:9a:cd:ea:0d:41:91:c0:18:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Sep 22 05:00:39 2026 GMT
Not After : Sep 23 05:00:39 2026 GMT
Subject: CN=f14b6cda87875e37337badd8af067a1fb3c856fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:fe:b3:cf:f1:e8:f6:61:48:38:2b:aa:8f:
64:dc:d3:69:f1:27:cb:f8:27:7f:9b:48:1d:22:17:
76:b6:a7:55:b9:16:ee:0b:53:07:e6:74:82:ce:53:
ae:43:68:92:2a:b5:f7:1d:f4:56:58:1e:99:f7:7a:
4e:92:8c:c6:07:ec:55:2b:b9:99:9a:a9:48:ab:61:
44:50:a2:bc:77:c5:91:59:7b:6e:4f:58:11:a9:92:
6e:cb:d4:b6:34:03:62:a0:29:9d:6d:37:c6:7c:04:
49:e6:1e:d9:de:5f:00:92:a6:62:ec:41:b0:93:4d:
0a:39:9d:7b:ed:0e:90:96:76:7c:5a:79:be:3c:06:
99:b4:3d:9e:53:b4:b0:61:cf:07:f0:9a:fc:65:02:
f1:42:32:ba:75:64:35:43:1d:97:37:6e:dd:83:ab:
05:94:75:09:90:0c:2c:84:68:d3:3c:6c:b9:61:8d:
ec:38:14:72:e9:9f:77:2e:02:fb:cc:81:92:b1:53:
2c:cf:59:07:73:2e:cc:ce:51:ac:14:45:ce:16:c4:
46:7c:f2:bb:66:4b:fa:90:80:cc:8f:f8:4b:1f:82:
2f:0b:2a:0f:55:22:6b:a6:12:76:06:d0:e6:c5:d0:
45:f5:59:e9:fd:a0:e8:0d:71:e2:a3:4a:6f:33:ed:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:6C:DA:87:87:5E:37:33:7B:AD:D8:AF:06:7A:1F:B3:C8:56:FC
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:05:36:a9:48:ab:27:23:17:3e:95:82:51:b5:c4:54:c8:5b:
ed:40:87:8b:9c:74:4d:07:fb:58:d6:47:bb:03:12:d5:b4:4b:
cd:2b:c5:72:ef:eb:34:27:f6:ec:91:29:f0:80:f2:9d:31:32:
10:f7:65:52:5f:04:47:48:0a:6d:ce:1d:11:be:d8:9e:4a:f6:
e3:56:70:64:7e:c9:3d:40:84:47:12:30:99:60:df:e0:19:b4:
7c:f7:8e:e3:05:c3:0f:04:ca:de:c2:c5:f9:43:a4:c1:f4:d2:
9f:47:d7:9e:aa:39:62:11:d9:1b:c1:f4:54:90:2c:6c:cb:f9:
dc:09:5f:9c:a0:1f:b0:14:e4:d2:ff:b4:0b:03:93:af:44:d2:
a1:87:67:a6:3a:20:2c:ac:67:d7:be:67:fb:16:c8:f0:9d:41:
79:0f:0c:a3:ac:e9:8f:8b:ff:5e:d5:d3:c6:24:c4:21:b2:82:
67:2b:cb:40:5a:61:f5:16:cf:f1:71:80:08:d0:e0:53:28:bb:
2b:93:aa:35:7d:72:d4:d5:da:f5:dd:20:2a:e7:39:fa:18:5e:
7e:16:ca:6c:10:c3:e2:45:b9:6e:26:fc:6f:7a:6a:0e:92:c8:
a6:8b:24:4c:77:5d:4c:ee:aa:4b:a9:a6:f8:5c:a2:73:6b:8b:
da:ba:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:29:58 2026 by rpki-client