Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: omleULtmwaTGTXOMWNKkeCAWojIEwagdefWOM1qCEN8=
Subject key identifier: 9C:AC:79:FE:44:FF:C3:55:7A:03:88:91:7C:71:51:41:CE:A5:8B:D6
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019FA7F41271427DF15143FF125A4E73A8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 1868
Signing time: Tue 28 Jul 2026 09:00:18 +0000
Manifest this update: Tue 28 Jul 2026 09:00:18 +0000
Manifest next update: Wed 29 Jul 2026 09:00:18 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: m8NCasIJw81oKnpSVTk3xyu0y9kEOShUUndHj41cnkk=)
2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:12:71:42:7d:f1:51:43:ff:12:5a:4e:73:a8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Jul 28 09:00:18 2026 GMT
Not After : Jul 29 09:00:18 2026 GMT
Subject: CN=9cac79fe44ffc3557a0388917c715141cea58bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:c6:69:14:0a:89:a3:fa:92:c5:66:aa:2b:
46:cf:c5:48:56:70:71:b2:56:07:49:40:77:f2:44:
df:0d:25:d5:4f:b4:59:6f:5c:84:82:7f:6b:f9:4f:
d1:23:16:e3:3f:9d:ee:1a:e8:67:ab:94:4a:91:62:
81:8e:91:10:87:80:35:1e:75:9c:ce:b8:81:4b:bc:
8d:76:b9:cd:8e:ef:0d:56:23:92:1c:e1:59:82:50:
6c:9d:57:4e:c6:a9:52:0c:ea:24:67:5b:1e:5b:39:
7d:d4:d7:34:bb:6b:71:76:c8:eb:0d:77:87:e1:90:
11:d1:0e:6a:01:dc:34:dc:83:ab:bb:d0:62:11:d2:
e3:69:44:7a:85:46:b1:81:f3:ac:aa:32:a3:4b:4f:
21:a2:3c:6b:e4:b8:1b:da:29:82:7d:b5:0e:30:37:
5c:13:f4:f0:ce:2d:7c:82:98:3b:25:19:cd:f2:3f:
7d:9c:a1:2c:d1:c7:b8:30:17:66:1a:7b:aa:54:e3:
6b:8a:b3:62:5c:a1:69:55:09:5a:ce:86:e4:bb:d3:
b7:0b:6b:26:fd:1e:d7:d0:a0:f9:b7:53:2c:c0:98:
6c:2f:f2:77:94:03:ac:9a:51:83:33:68:d0:40:0c:
a3:0d:2b:89:da:a0:82:4c:da:b6:ed:b3:90:2f:9b:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:79:FE:44:FF:C3:55:7A:03:88:91:7C:71:51:41:CE:A5:8B:D6
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8c:9a:18:49:3f:48:b3:84:e2:55:84:3a:fe:61:ad:64:8a:
ae:88:48:de:ba:2c:09:17:fb:99:55:34:f8:8e:ef:3b:56:7b:
f4:af:48:53:e1:0f:86:cb:37:c2:2b:9e:c1:44:be:5a:d6:0f:
fc:c4:af:c4:1f:ed:e2:d9:59:02:0a:50:5d:f3:3d:94:bc:9a:
98:02:fc:3d:ac:f0:a2:81:cc:fc:6d:d1:30:c1:6b:b9:eb:87:
bb:02:32:cb:51:9d:e8:9b:df:27:cb:b4:e0:cc:02:34:9d:78:
d7:28:55:1b:10:27:6b:52:04:09:8f:01:96:6c:69:ec:5b:23:
22:8c:f9:1c:96:f3:70:9e:54:80:cd:b5:26:83:9a:b8:43:c5:
27:b0:75:bf:16:de:56:ca:c4:4d:34:26:ec:db:03:0a:fb:91:
64:7a:0c:ab:dd:e6:76:76:5d:86:32:44:ad:cd:c2:4e:dd:1a:
46:66:7f:c6:98:4b:2a:1a:36:7d:99:50:a4:9a:db:89:89:73:
ea:07:30:25:3e:de:05:4b:2a:61:0a:c5:3c:dc:22:ab:6e:7a:
52:6c:8d:75:ea:ae:49:7c:f3:36:3e:ec:ed:9b:3e:a2:ec:6d:
6e:ba:00:f5:b5:16:e0:19:6f:6d:9d:1c:44:04:23:81:d6:8d:
c4:18:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:53 2026 by rpki-client