Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: 2GdjYDCKtifNLQnmfmkTLIOYO5rWRnl+yA9n1kZleq0=
Subject key identifier: A5:34:D2:A0:39:CE:04:39:F3:20:DA:FB:8D:8D:7F:D7:4E:A2:80:47
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019D98BD736735031D60290574BDD534AD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 1757
Signing time: Fri 17 Apr 2026 00:00:45 +0000
Manifest this update: Fri 17 Apr 2026 00:00:45 +0000
Manifest next update: Sat 18 Apr 2026 00:00:45 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: 81GqB5YsBveunjnWKEs9oS0hdfBgfUD247/tMgArvvY=)
2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:73:67:35:03:1d:60:29:05:74:bd:d5:34:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Apr 17 00:00:45 2026 GMT
Not After : Apr 18 00:00:45 2026 GMT
Subject: CN=a534d2a039ce0439f320dafb8d8d7fd74ea28047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:bd:43:3b:11:4d:6d:91:fc:d5:47:b4:ac:
9a:ec:3a:16:20:56:60:63:90:db:82:d3:3b:88:9c:
d4:e6:6c:39:ff:2e:a7:6a:bf:b9:10:6b:b0:03:98:
23:56:e4:2c:23:ce:bc:b2:1c:bf:a1:37:23:28:19:
e5:db:f0:64:2b:cc:92:ca:3c:25:b3:b4:be:de:67:
02:8a:b5:d2:b8:99:4e:07:9c:9c:08:35:f9:d0:f6:
d7:50:96:d8:3e:0f:36:d5:ef:2f:ee:c4:23:22:b6:
8d:2e:da:5a:da:e2:d3:b3:a8:0d:76:c8:98:25:19:
8e:3f:cd:98:6e:00:2f:ae:8b:b8:37:66:e8:8a:98:
07:f2:cc:39:a9:e2:a2:52:46:9d:86:d1:fc:21:19:
00:65:d1:ee:3e:fc:ac:78:d1:4d:d1:c4:1c:78:7d:
38:e5:68:4a:2b:65:af:44:96:be:c8:a9:7b:ea:f1:
97:cc:9b:4d:9a:f9:7c:56:4d:92:26:ba:89:17:5b:
48:4a:25:d8:53:22:a8:cb:d6:a5:d2:1b:e8:8b:3b:
a4:01:a8:84:80:17:32:fc:62:93:09:2c:da:00:32:
cb:76:0c:68:53:98:f2:89:1b:a3:a7:69:f0:53:3a:
32:8c:2c:28:24:dc:20:60:e7:97:29:90:7e:c1:52:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:D2:A0:39:CE:04:39:F3:20:DA:FB:8D:8D:7F:D7:4E:A2:80:47
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:cf:39:56:92:ec:0f:a7:04:48:71:99:01:b6:3d:82:5e:
ee:51:ae:34:e1:34:04:59:76:42:f8:53:39:cf:cf:d1:0b:0e:
87:2a:df:81:13:d9:bf:df:9f:cf:b1:27:b8:b1:12:69:95:57:
0b:81:74:a1:37:d9:b9:51:89:b3:a6:68:48:2e:56:a9:75:c4:
61:e3:e4:21:ae:9c:d9:ed:bf:66:d2:91:34:14:c8:3f:b3:63:
02:1a:04:17:81:b1:6e:49:f5:e0:47:9a:22:f5:07:5d:7d:21:
8f:cd:80:f0:9a:6f:a6:72:58:92:88:ed:59:99:df:37:e3:41:
b7:e4:51:d3:17:05:44:42:af:b6:3c:08:4a:92:a4:3b:c5:20:
20:71:40:8e:63:1b:c9:6a:a8:f6:eb:74:81:5a:79:cd:2e:4d:
46:a4:e0:db:ac:97:f7:03:7b:e3:8f:31:69:cd:81:03:c4:01:
3b:12:41:e7:f5:ca:69:c1:8c:4c:77:35:70:ad:a8:96:5b:8b:
a0:db:ff:62:7d:d7:5b:e6:1b:64:da:f0:4d:5c:b5:5f:4a:db:
69:da:9f:82:14:8e:77:e6:16:b5:dd:e4:d5:c7:50:7c:d2:70:
33:70:bf:b4:94:4f:ac:f5:f9:54:19:62:1f:3f:55:45:af:0b:
9a:86:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:32 2026 by rpki-client