Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: J7Css/7ZqR72QP+W3uw4Eu3tBPohmhlPSTI/0tbYuk0=
Subject key identifier: 0B:18:8E:9A:4C:54:AC:53:99:74:7F:57:B8:32:55:88:66:E4:D1:1F
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 019CABD9EE578DB945A9CB0B895B49DEBFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0E36
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: QKZ++50mHHzzheNAkEj813Ag5QZ4txWGorJo73xBTU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ee:57:8d:b9:45:a9:cb:0b:89:5b:49:de:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=0b188e9a4c54ac5399747f57b832558866e4d11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:84:bb:4d:a1:cc:7e:91:f6:1f:01:1b:c9:
b5:29:d5:65:4b:1f:bb:b6:1b:b2:d4:83:10:8c:d7:
c3:00:0e:36:e1:e2:09:e6:d0:cd:f6:97:3d:21:8a:
98:6a:49:da:f3:8c:6b:20:1d:7a:6f:03:c1:08:44:
82:58:d2:55:c4:df:b0:81:ff:df:0c:65:d0:d0:03:
40:4a:86:ca:1a:8a:4a:62:23:be:03:28:bf:c1:50:
78:65:55:e1:7e:2f:60:8a:38:27:b0:ce:70:60:3a:
df:da:c4:fe:cd:d8:8f:f1:c2:d1:39:c7:a7:2b:a3:
1c:5f:89:82:af:23:49:a1:da:77:7d:ad:f3:b0:8b:
68:fd:1e:47:d5:35:97:a8:96:fb:23:b2:8c:4d:36:
fe:36:f7:22:f6:d6:03:53:73:ce:e1:24:07:6a:05:
dd:7d:ee:11:f9:79:f1:33:6f:8d:7d:c6:51:66:11:
ed:0b:cc:a4:5b:f4:0f:9d:91:a8:e0:6c:0e:9b:2b:
16:56:15:8b:1d:e3:40:f8:15:75:5f:af:82:d6:08:
48:31:0e:e1:50:f1:49:3f:7d:e4:7e:b9:53:fd:cc:
5d:b9:8d:79:a2:a3:42:9a:62:0a:dc:4d:de:48:4b:
6a:a2:01:55:87:de:58:b5:55:a7:d2:6a:da:02:8d:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:8E:9A:4C:54:AC:53:99:74:7F:57:B8:32:55:88:66:E4:D1:1F
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:43:48:0c:f0:20:e1:39:d9:36:a7:a2:3d:64:46:54:ca:31:
d2:8c:0f:f4:a2:12:91:62:f6:28:b9:40:b8:25:f6:7c:dd:3a:
10:7a:0c:05:c1:98:20:7d:71:c7:32:54:a5:75:15:96:1c:3d:
14:f5:9e:7f:c9:09:41:ff:a7:37:8f:fa:15:ad:17:11:92:73:
6f:95:20:cc:05:f2:3d:1c:c7:47:70:a5:71:57:a3:79:c5:c9:
31:93:a5:a6:b0:ab:0b:8b:c9:5b:ee:79:84:5e:61:eb:8c:a9:
52:bf:29:cd:d7:e2:a3:cb:49:40:96:5c:1e:1f:ae:3f:e2:fd:
a4:ea:73:ec:f8:23:63:7e:b3:91:ae:9a:b3:fc:3e:92:33:04:
19:75:1b:25:6f:11:70:6f:13:9e:41:3c:61:63:05:ee:81:fa:
60:49:02:55:6c:6f:92:e1:17:1f:c1:3a:76:c4:f8:d3:56:ad:
6e:f6:0f:06:99:c9:86:9a:6d:c0:90:28:bc:48:cb:a7:aa:4a:
33:df:16:e9:34:c6:30:60:70:35:4d:91:ae:b0:2b:f5:e8:d6:
bd:f5:c4:b3:eb:a0:41:9b:cc:5e:06:1e:89:2a:4a:51:26:78:
3b:49:27:61:72:f4:8e:3c:47:73:d0:5c:ed:8b:0e:be:81:62:
4c:0c:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:11 2026 by rpki-client