Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: u+nmWZk60OFNE37JzoNvXJAepmPunS9pdaQR+BHOvps=
Subject key identifier: 96:5D:85:24:E9:7A:4C:85:2B:3C:5E:86:3B:34:B9:C9:FA:41:80:1A
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019CAB345FBE7D94931F4B8A92EB1AF134D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 16DC
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: oc6TKitVhr3V3PJk9vfXFe/pAuKyLSOEKNLhyFFgpa0=)
2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5f:be:7d:94:93:1f:4b:8a:92:eb:1a:f1:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=965d8524e97a4c852b3c5e863b34b9c9fa41801a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:45:a2:86:10:a6:a2:c1:67:ea:aa:22:da:eb:
bb:54:96:04:1c:70:67:b7:e2:35:03:c1:fb:22:ea:
5e:e6:2d:1b:e4:59:79:5f:fe:b8:d6:ec:fb:68:24:
14:dd:0e:06:75:0c:2e:ee:c1:eb:39:40:1c:53:af:
b3:0f:8e:f5:bf:57:21:47:66:0a:67:f1:b8:60:6c:
f1:49:33:9b:cb:4d:84:0d:da:1a:7e:51:b7:39:bf:
22:57:82:20:a9:79:45:41:03:78:17:22:18:31:6c:
b2:90:50:07:16:38:97:6d:1c:e4:fc:07:65:31:95:
9f:92:25:02:ca:b7:a1:62:73:d2:9b:57:83:2b:76:
b3:d6:2d:f0:0f:24:74:79:74:f5:a3:a7:df:bb:03:
66:98:82:86:a2:78:44:dd:d6:b3:07:a0:c3:f6:b0:
df:e8:b6:68:b0:af:81:38:b9:53:0b:ff:d3:1a:a9:
63:c4:b9:a0:ae:8c:84:37:d9:45:34:2b:82:1c:d5:
8e:2f:31:7c:0a:24:d2:70:d2:47:8c:bd:c7:19:5c:
41:1d:ce:b0:30:f1:98:26:b5:65:6f:60:65:0a:c9:
65:0c:c2:a5:19:d5:1f:fb:45:78:bd:73:78:2b:bc:
6c:b5:8a:36:3b:e3:fb:91:37:bb:3a:26:c8:25:a2:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5D:85:24:E9:7A:4C:85:2B:3C:5E:86:3B:34:B9:C9:FA:41:80:1A
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:04:bf:d5:78:d5:90:6e:16:13:f2:50:d5:9a:b5:94:ea:
45:d2:cf:eb:1b:ac:f2:7d:1a:cc:fd:e9:6a:cc:90:3a:90:6d:
f9:60:b4:1c:7f:e0:a8:f5:d2:9b:17:55:35:70:b5:ab:55:ea:
1d:f0:11:da:85:41:7f:81:a2:45:9f:01:22:e3:05:4e:1b:0a:
1f:b9:08:8f:c2:ae:06:47:1b:22:f4:f3:99:e5:6c:8b:06:c4:
3e:60:eb:ca:61:db:5f:24:8e:26:47:51:5d:e4:55:7c:4c:87:
29:cf:aa:6e:bd:66:eb:34:30:76:e9:f7:10:0b:76:3b:e5:47:
87:49:93:63:37:66:ff:17:86:2d:1a:98:b9:33:7c:08:3e:bf:
08:20:c8:ce:c8:a8:ca:de:48:70:8c:1f:55:a4:e6:40:14:ec:
2b:c2:fd:ac:13:fb:b8:69:83:d7:1f:9d:a7:c2:25:53:04:6c:
29:39:ff:db:4c:c8:28:01:a1:8a:a8:16:dc:3d:6a:72:97:42:
39:bc:93:98:39:00:fc:93:07:81:b7:e0:a2:3d:41:51:87:fe:
1f:ad:cb:1f:44:28:69:57:10:01:27:6c:ea:04:4a:a3:cf:41:
3f:8f:5f:2f:c4:b9:77:48:ed:60:8e:ab:a0:36:66:7c:5d:fd:
a8:97:9f:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNF++fZSTH0uKkusa8TTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTM1OWRhMGQwYjdhODI5ZTQyMGZkOTMyY2FmYzFlM2Mx
NTcyZGUwHhcNMjYwMzAxMjEwMTAyWhcNMjYwMzAyMjEwMTAyWjAzMTEwLwYDVQQD
Eyg5NjVkODUyNGU5N2E0Yzg1MmIzYzVlODYzYjM0YjljOWZhNDE4MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UWihhCmosFn6qoi2uu7VJYEHHBn
t+I1A8H7Iupe5i0b5Fl5X/641uz7aCQU3Q4GdQwu7sHrOUAcU6+zD471v1chR2YK
Z/G4YGzxSTOby02EDdoaflG3Ob8iV4IgqXlFQQN4FyIYMWyykFAHFjiXbRzk/Adl
MZWfkiUCyrehYnPSm1eDK3az1i3wDyR0eXT1o6ffuwNmmIKGonhE3dazB6DD9rDf
6LZosK+BOLlTC//TGqljxLmgroyEN9lFNCuCHNWOLzF8CiTScNJHjL3HGVxBHc6w
MPGYJrVlb2BlCsllDMKlGdUf+0V4vXN4K7xstYo2O+P7kTe7OibIJaIweQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZdhSTpekyFKzxehjs0ucn6QYAaMB8GA1UdIwQY
MBaAFAQTWdoNC3qCnkIP2TLK/B48FXLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEt
ODZmZTM2Y2EwYjc0LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEtODZmZTM2Y2EwYjc0
LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQEEv9V4
1ZBuFhPyUNWatZTqRdLP6xus8n0azP3pasyQOpBt+WC0HH/gqPXSmxdVNXC1q1Xq
HfAR2oVBf4GiRZ8BIuMFThsKH7kIj8KuBkcbIvTzmeVsiwbEPmDrymHbXySOJkdR
XeRVfEyHKc+qbr1m6zQwdun3EAt2O+VHh0mTYzdm/xeGLRqYuTN8CD6/CCDIzsio
yt5IcIwfVaTmQBTsK8L9rBP7uGmD1x+dp8IlUwRsKTn/20zIKAGhiqgW3D1qcpdC
ObyTmDkA/JMHgbfgoj1BUYf+H63LH0QoaVcQASds6gRKo89BP49fL8S5d0jtYI6r
oDZmfF39qJefWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:44 2026 by rpki-client