Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: Wledy3wWF+Eg4ne0TK0wCkep6oaDqCv11fKWEvIGp/k=
Subject key identifier: 7A:98:D7:B4:E8:50:38:6E:DB:CF:F6:7A:F8:4D:7C:88:09:69:64:77
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 01A0E92E543DF17914FF364193B2EB59268E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 1068
Signing time: Mon 28 Sep 2026 18:02:02 +0000
Manifest this update: Mon 28 Sep 2026 18:02:02 +0000
Manifest next update: Tue 29 Sep 2026 18:02:02 +0000
Files and hashes: 1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: Q7BF1cZOOG15vw1YhZ0yF1dPATJbW4ip13hHWy8d7jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:54:3d:f1:79:14:ff:36:41:93:b2:eb:59:26:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Sep 28 18:02:02 2026 GMT
Not After : Sep 29 18:02:02 2026 GMT
Subject: CN=7a98d7b4e850386edbcff67af84d7c8809696477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:7f:11:e5:0d:68:de:e8:d0:5d:68:1d:97:
43:3e:0b:a8:24:a6:9f:c5:35:e0:e3:72:a4:56:fe:
70:41:88:47:63:77:91:cc:3d:e5:e6:90:ce:f9:59:
a9:62:d0:9a:1b:1b:3c:5c:6f:7e:95:2f:46:6f:3d:
f4:f5:13:00:9c:fa:3c:b1:4b:3d:89:e4:27:26:24:
2a:6a:b2:5c:df:f9:98:86:8e:ec:79:db:52:9f:32:
74:d4:ad:5b:b7:86:34:f7:3e:5f:98:91:21:cd:5c:
ee:b9:90:c7:7d:51:c4:cd:0b:f9:67:04:27:8d:ca:
a6:32:ed:c2:ba:d2:59:2f:16:a4:aa:8d:f2:de:76:
a6:2e:38:e6:ba:e9:2e:6f:a2:56:3b:7b:83:84:34:
80:23:5d:15:ae:df:48:17:e4:9d:a5:9e:65:ae:66:
40:44:db:70:a0:6f:f8:d5:59:93:91:2e:44:86:2c:
71:67:4a:cf:88:3b:a0:07:2b:17:ce:cf:ca:96:88:
d5:0d:7d:82:f8:aa:cb:26:b8:55:34:7e:6f:e2:1e:
50:5a:ec:0e:05:fd:5f:8b:dd:4c:64:95:d5:e6:6b:
b1:52:a6:40:db:b2:71:8c:d8:3d:5c:1f:0d:44:df:
28:3e:4f:d9:3d:44:59:76:0d:dc:8d:46:9b:08:fc:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:D7:B4:E8:50:38:6E:DB:CF:F6:7A:F8:4D:7C:88:09:69:64:77
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:da:01:7e:2f:cf:ed:20:b8:d4:2d:35:ba:23:20:6b:2d:
e4:30:87:cf:52:14:27:bd:7d:bb:6d:2b:ad:68:b6:6a:1f:d6:
2a:7e:b4:8a:17:e5:c7:ee:1b:7a:b6:44:a0:13:56:1c:54:7d:
d4:e6:80:ec:51:0c:22:0b:a1:ff:31:5f:ba:ce:cd:12:7c:e6:
10:7b:e3:64:9a:9a:f9:32:02:d0:9b:9b:0f:ab:d7:10:fb:b8:
44:18:cc:47:96:0b:c6:2e:7b:02:06:f0:27:3a:e5:78:97:f0:
b1:96:5f:0a:2f:7e:f9:db:7e:6a:e0:f2:ee:50:e0:c9:35:3b:
7f:83:54:3c:49:51:37:c4:b2:91:34:5c:9d:5a:a8:43:5e:52:
e3:87:ae:9d:3f:29:9e:df:68:dd:07:3b:99:bf:61:39:e1:41:
92:ad:e3:78:3d:2e:0c:27:29:21:92:98:82:ec:8e:9d:89:72:
95:72:88:93:26:50:cc:da:22:69:f6:d4:e9:c4:5c:61:18:7e:
9e:f2:9d:ed:57:5a:e6:0b:9c:0a:71:2d:67:c4:c0:a3:74:87:
e4:57:b7:b9:eb:13:7e:d8:a6:19:f2:2f:7d:77:d7:e4:6f:e2:
b2:8d:1a:f9:5a:88:47:61:a2:ce:77:37:5a:fc:d4:b8:29:84:
aa:df:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:48:03 2026 by rpki-client