Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: PO2uLLd98x+CeBRSMDDpPZ0iUxHOM0OLuI8CBjWYTDM=
Subject key identifier: 63:EC:4F:8C:66:E6:F6:66:66:81:41:46:F0:01:E4:B5:50:A2:2B:32
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 019FA899A23FCDEAF680FCAE3FDF6D2BBC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0FC2
Signing time: Tue 28 Jul 2026 12:01:08 +0000
Manifest this update: Tue 28 Jul 2026 12:01:08 +0000
Manifest next update: Wed 29 Jul 2026 12:01:08 +0000
Files and hashes: 1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: x1oBaI9yma8dD9u249dSom9tQx+EGaPz4Hy2P1m58nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:a2:3f:cd:ea:f6:80:fc:ae:3f:df:6d:2b:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Jul 28 12:01:08 2026 GMT
Not After : Jul 29 12:01:08 2026 GMT
Subject: CN=63ec4f8c66e6f66666814146f001e4b550a22b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:08:58:79:59:70:8a:33:3c:5c:b2:25:2a:
b2:76:ac:0b:3a:6f:26:c6:bd:34:30:1f:5c:34:b3:
e1:7b:b4:85:a0:ec:50:6a:b6:9f:db:45:6f:2c:8f:
1d:51:23:1e:f0:82:9b:2f:4d:cb:cf:a4:74:30:c6:
46:22:bb:bd:18:b7:f7:57:0f:a8:9f:f6:df:59:02:
66:9f:6a:f3:d2:fa:6d:d5:aa:ea:fe:90:08:fe:d5:
5e:7a:97:ca:92:8e:2e:2b:bd:7c:b0:94:67:c1:23:
49:25:f3:03:8b:99:3f:92:1f:71:10:10:8f:be:87:
e2:2e:53:78:23:ad:7f:6a:3a:f8:2b:09:5b:1a:26:
04:33:d8:73:cf:f1:0b:d3:bb:7e:c8:cd:fb:57:f5:
ea:dc:62:3d:73:46:15:d1:4f:db:bb:8f:77:79:a1:
f2:21:fc:4b:83:7e:f6:c1:57:73:d6:3b:b4:3a:c5:
f2:c8:6d:1c:f0:3f:e7:aa:6d:78:c8:31:25:14:e8:
42:39:0c:1d:97:35:4c:d3:44:25:de:83:78:7c:d4:
32:fa:24:cc:35:71:cf:b3:63:a9:be:72:71:e1:91:
09:13:c4:45:cc:a2:12:93:1c:07:6f:56:2b:71:6f:
a3:b7:45:a1:91:b4:72:72:6e:dc:a6:93:c9:92:78:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:4F:8C:66:E6:F6:66:66:81:41:46:F0:01:E4:B5:50:A2:2B:32
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:c1:aa:cb:e6:60:6f:56:a5:3d:19:86:24:ec:a9:fb:f5:
c9:6c:af:b6:ce:42:e5:11:a5:1c:84:43:de:58:8b:f9:b8:09:
d7:28:35:03:a0:46:6e:f9:b0:1f:03:4c:c3:b0:bd:c0:fa:56:
e4:f7:18:b1:06:4e:d8:50:23:d5:18:6b:85:64:67:a8:73:11:
1a:d4:6c:49:62:a5:94:87:17:7e:ac:c8:06:5a:33:19:2a:d7:
e1:3c:a2:31:ad:6d:41:8f:ba:58:79:47:49:a1:47:34:84:ac:
5f:d4:95:c9:b2:fa:7e:10:1f:34:e4:00:ba:f5:e8:4e:88:84:
4d:29:b0:56:46:ec:d6:2b:da:00:a7:53:72:06:99:83:be:cb:
1e:af:ad:65:90:af:d0:80:01:f8:98:42:ca:ae:80:fa:39:bc:
7d:29:e5:0d:48:c4:6c:8f:70:76:76:f9:22:e6:96:15:cb:9b:
31:e1:fd:00:79:2d:33:9a:60:74:dd:2a:c6:38:1b:81:50:9d:
c3:25:4f:7e:55:90:3b:fb:95:3f:06:6f:83:9b:6e:20:a9:ef:
be:74:30:37:2e:9c:4c:9f:75:31:6a:66:15:fe:f5:f9:7b:de:
51:f6:34:98:e1:c0:17:da:f5:93:43:51:ff:d6:a5:b5:cc:cf:
5e:b1:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:51 2026 by rpki-client