
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: IDw1QQq85uNuAqU99+MRSibqbwDMLrsvsSeKbKcgne8=
Subject key identifier: 3F:53:25:2E:50:CD:B7:1B:04:79:D5:76:52:A7:82:CD:20:D7:60:A1
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 01A0C5C539B1253A14622045A34547976B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 18FC
Signing time: Mon 21 Sep 2026 21:00:31 +0000
Manifest this update: Mon 21 Sep 2026 21:00:31 +0000
Manifest next update: Tue 22 Sep 2026 21:00:31 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: E7BFI4KhvcqX2o3NeZfX4wUYDm179F/W2a+c4PVN/l0=)
2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:39:b1:25:3a:14:62:20:45:a3:45:47:97:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Sep 21 21:00:31 2026 GMT
Not After : Sep 22 21:00:31 2026 GMT
Subject: CN=3f53252e50cdb71b0479d57652a782cd20d760a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:86:b2:74:28:5f:d5:d0:75:2d:8d:23:ee:
18:9e:42:bc:92:59:d5:19:34:6c:c4:98:4a:37:5e:
f2:86:c2:53:3b:21:6f:d8:21:a0:7a:25:dc:22:d5:
68:19:21:14:10:25:13:ba:bb:9b:20:77:1a:2b:48:
c1:ed:b1:b4:8f:58:21:6f:90:cf:b4:b5:b9:b4:ef:
a2:26:f6:62:9b:e0:7f:a1:7a:b3:15:24:58:01:13:
0f:0e:29:da:bd:f1:81:77:37:a6:f5:1b:70:53:d2:
eb:47:8b:94:2c:1c:8d:49:ea:d4:74:35:44:33:46:
83:bb:5a:19:c7:f0:a7:88:db:cb:d6:47:94:fd:77:
a9:49:11:c6:3d:fb:70:f8:ea:ee:30:cd:3d:66:b4:
c8:4c:84:bb:67:97:d4:f2:d1:cb:ff:12:0f:f8:32:
16:c8:fa:11:94:5f:93:f7:a1:39:4a:30:0d:3a:10:
04:73:e6:21:b6:36:18:f2:d3:34:f7:b2:50:e0:26:
3e:09:27:28:81:71:0d:ef:89:62:0f:23:7d:55:58:
a7:41:18:5d:32:cf:9b:6f:31:c2:23:18:ec:fc:62:
38:cc:3b:db:fa:96:f7:79:b8:30:21:ed:5e:a9:0d:
c1:35:7e:81:b8:ed:0e:98:55:7e:ae:fe:a2:70:59:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:53:25:2E:50:CD:B7:1B:04:79:D5:76:52:A7:82:CD:20:D7:60:A1
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fd:64:aa:35:63:4a:f4:72:2a:20:4d:8a:31:c0:fd:f5:06:
92:79:38:0c:00:ca:25:f3:46:82:1e:e8:1a:bd:74:55:17:be:
9c:b7:00:8f:1b:e8:06:da:e6:83:f4:c8:f1:03:a7:78:98:7f:
51:42:3c:c6:05:02:a9:4e:01:b5:18:04:75:1b:e3:e1:a4:6e:
5e:7e:c7:90:76:10:08:c4:8a:fb:66:4d:11:ec:05:39:40:de:
ee:d8:96:9d:c1:29:a4:0b:7b:32:52:47:9a:04:fa:95:30:6a:
04:c3:8f:b2:4e:2b:fd:f2:49:48:b7:b6:b9:23:9b:1d:6e:a5:
32:f9:61:e0:43:09:0e:6c:6e:d5:6c:a7:a9:42:95:b5:03:b7:
4a:1f:98:f5:b3:f5:f7:7f:02:01:a2:ec:4b:1a:a1:60:83:a1:
74:61:9b:fd:7e:f0:2a:dd:6b:a1:e3:63:c0:08:0b:40:69:da:
5f:16:6b:8e:80:7b:13:31:16:36:9c:3b:a8:19:51:08:ea:27:
1e:36:81:8e:90:16:85:f9:9e:a3:4f:13:c8:6e:f9:41:8d:39:
57:1a:71:62:fa:67:28:80:e4:61:ed:6c:03:a8:cd:fc:87:6d:
f9:e6:ec:0a:a6:d8:b8:60:1b:80:68:54:1c:76:8a:bd:92:b6:
e7:62:2b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:32:02 2026 by rpki-client