Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: vshyvGVqVVecpIcEtTYxsRRDzxGxD7TUPEJQEUCnKGg=
Subject key identifier: 7F:62:2D:73:99:D2:E4:6E:6E:17:F4:09:DE:3F:64:25:A1:43:38:D2
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 68903D0D9B835606742CABA7CE9B6AC53E9B19D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: 0135
Signing time: Mon 27 Jul 2026 21:27:33 +0000
Manifest this update: Mon 27 Jul 2026 21:22:33 +0000
Manifest next update: Wed 29 Jul 2026 01:22:33 +0000
Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: NTD2S1f7QOjFxgf7EfVX3W2o88G4ksOlZt2wERPqyzw=)
2: AS201386.asa (hash: OYRXpkyxncvi2a2N61iwOFYtIw9TA6/nEOruPTD6Q+k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 01:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:90:3d:0d:9b:83:56:06:74:2c:ab:a7:ce:9b:6a:c5:3e:9b:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Jul 27 21:22:33 2026 GMT
Not After : Jul 29 01:22:33 2026 GMT
Subject: CN=7F622D7399D2E46E6E17F409DE3F6425A14338D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:55:68:da:4f:2b:0e:9c:8d:02:af:1c:2f:
08:3f:45:f2:4f:58:bd:cb:a7:e5:ab:b6:90:b4:68:
38:44:83:72:c3:6b:5d:b8:da:4f:3f:65:e3:7f:1e:
61:90:de:90:56:2b:4c:0e:1b:bf:c3:41:6f:37:55:
71:15:f7:92:bb:d3:f1:77:67:ec:b0:04:c4:a9:14:
14:b3:57:df:3e:28:56:85:70:4e:6d:bf:2d:45:10:
7d:f2:1f:3d:04:20:3e:48:1e:41:4b:18:03:61:8b:
05:c0:49:5f:db:60:e4:45:2e:57:d5:63:a1:35:3d:
ce:23:ad:88:54:2a:89:06:6c:7f:27:e8:89:37:8a:
c7:cd:f7:8b:91:2b:14:d0:32:39:3d:a0:08:de:58:
c3:e5:f0:ab:5c:45:a5:2b:ca:b4:d5:76:44:c2:24:
7e:6f:ca:81:fd:15:00:70:5c:9b:92:e6:cb:56:05:
42:7f:30:13:a4:5c:84:3d:ad:12:04:8b:af:f3:c8:
39:e5:46:ed:5e:26:a0:a4:38:71:48:b8:e4:53:18:
ef:12:b3:68:fe:02:8e:b3:2a:7c:d3:d3:f3:84:bd:
4b:18:44:d6:45:e1:d1:ac:ce:95:0e:26:88:7a:3e:
27:4d:1a:e1:01:80:59:97:08:03:2e:ab:a8:67:c6:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:2D:73:99:D2:E4:6E:6E:17:F4:09:DE:3F:64:25:A1:43:38:D2
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:29:6b:df:00:92:d4:cb:b4:b1:b1:b2:8a:f5:a0:80:3b:d0:
80:23:22:12:65:d8:e8:fb:cb:22:c6:4e:32:17:9b:ac:65:75:
19:03:34:9b:95:66:25:b4:7e:64:6e:58:38:dd:d1:aa:b9:13:
ae:f6:4b:73:52:53:aa:82:07:5a:bf:bc:1f:f1:1b:a3:8d:af:
a7:81:85:85:e4:0b:7e:03:d6:4a:21:9e:2b:5d:0d:a7:45:03:
49:6c:da:15:29:38:d1:8f:ba:d1:f2:e5:fa:67:7a:25:4e:6f:
e0:c2:0e:9e:a7:ca:79:71:17:4c:29:c7:5c:9e:03:bf:0d:3a:
bd:9f:41:4f:ec:67:6a:01:28:97:f9:f0:15:bb:bf:db:8a:ab:
da:10:85:6d:7a:35:62:6c:57:dc:a7:5a:ad:e5:61:79:93:d9:
bf:7b:22:a2:9e:1b:1f:07:ef:32:8b:2c:87:05:bd:3c:3b:66:
49:90:d5:be:ce:89:e8:00:cd:f1:70:23:f0:41:c6:6b:08:d1:
e8:fd:2c:db:11:ed:f7:82:0f:e4:64:04:b2:2f:30:4e:19:63:
8e:c4:83:42:91:79:84:25:c8:a1:a1:9b:d1:e5:7d:da:ca:82:
de:d6:1f:f4:0f:d5:0a:4d:e3:c3:fc:ad:b3:a5:da:09:1b:81:
c3:06:16:f5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaJA9DZuDVgZ0LKunzptqxT6bGdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4ZTg3ZjM1MzEyN2NjOTIzYjFjYzFmOTc4Njk5NTM3
ZWZhZDY2ZDAeFw0yNjA3MjcyMTIyMzNaFw0yNjA3MjkwMTIyMzNaMDMxMTAvBgNV
BAMTKDdGNjIyRDczOTlEMkU0NkU2RTE3RjQwOURFM0Y2NDI1QTE0MzM4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWFVo2k8rDpyNAq8cLwg/RfJP
WL3Lp+WrtpC0aDhEg3LDa1242k8/ZeN/HmGQ3pBWK0wOG7/DQW83VXEV95K70/F3
Z+ywBMSpFBSzV98+KFaFcE5tvy1FEH3yHz0EID5IHkFLGANhiwXASV/bYORFLlfV
Y6E1Pc4jrYhUKokGbH8n6Ik3isfN94uRKxTQMjk9oAjeWMPl8KtcRaUryrTVdkTC
JH5vyoH9FQBwXJuS5stWBUJ/MBOkXIQ9rRIEi6/zyDnlRu1eJqCkOHFIuORTGO8S
s2j+Ao6zKnzT0/OEvUsYRNZF4dGszpUOJoh6PidNGuEBgFmXCAMuq6hnxkZHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUf2Itc5nS5G5uF/QJ3j9kJaFDONIwHwYDVR0j
BBgwFoAUu46H81MSfMkjscwfl4aZU3761m0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzAvQkI4RTg3RjM1MzEyN0NDOTIzQjFDQzFGOTc4Njk5NTM3RUZBRDY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0Nkg4MU1TZk1ranNjd2ZsNGFaVTM3
NjFtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMC9CQjhFODdGMzUzMTI3Q0M5MjNC
MUNDMUY5Nzg2OTk1MzdFRkFENjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgClr3wCS1Mu0sbGyivWg
gDvQgCMiEmXY6PvLIsZOMhebrGV1GQM0m5VmJbR+ZG5YON3RqrkTrvZLc1JTqoIH
Wr+8H/Ebo42vp4GFheQLfgPWSiGeK10Np0UDSWzaFSk40Y+60fLl+md6JU5v4MIO
nqfKeXEXTCnHXJ4Dvw06vZ9BT+xnagEol/nwFbu/24qr2hCFbXo1YmxX3KdareVh
eZPZv3siop4bHwfvMosshwW9PDtmSZDVvs6J6ADN8XAj8EHGawjR6P0s2xHt94IP
5GQEsi8wThljjsSDQpF5hCXIoaGb0eV92sqC3tYf9A/VCk3jw/yts6XaCRuBwwYW
9Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:37 2026 by rpki-client