Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: fnyOTwobSnvgg3/v8w9NPwGecWeR2SNhmfat6ZRdHlQ=
Subject key identifier: 53:9F:5C:D2:B6:08:28:07:E4:70:04:92:12:06:00:4C:DC:FA:F2:33
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 590BEBBF824AB889FB51406650E1C3BB8DC4E331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: A7
Signing time: Sat 18 Apr 2026 23:22:30 +0000
Manifest this update: Sat 18 Apr 2026 23:17:30 +0000
Manifest next update: Mon 20 Apr 2026 00:25:30 +0000
Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: GMLDsNR+eJZG19wYChqFYGCums08twa6Kxyb6aQcmvI=)
2: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0b:eb:bf:82:4a:b8:89:fb:51:40:66:50:e1:c3:bb:8d:c4:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Apr 18 23:17:30 2026 GMT
Not After : Apr 20 00:25:30 2026 GMT
Subject: CN=539F5CD2B6082807E47004921206004CDCFAF233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:b0:a7:f9:13:14:64:c2:87:ce:0e:c1:4d:
97:c7:9a:18:dd:c5:03:4f:9a:6e:4c:4c:54:2b:a6:
d0:49:cf:b6:f4:92:df:5f:97:25:e7:9d:0e:e7:a2:
69:ff:db:5c:0b:fe:f0:39:f3:f2:b9:1f:06:08:75:
4f:05:96:7d:40:fd:91:04:b9:82:7b:a2:e4:6d:fb:
2d:f2:94:5b:27:64:8a:53:5f:e5:46:55:22:15:92:
89:c5:1f:b0:a0:79:1e:54:29:bc:08:0a:07:90:07:
a1:5a:8e:77:4d:d1:87:4c:31:f5:9b:3d:6f:8c:1d:
ed:cb:17:94:09:00:1b:a5:e5:7e:7d:87:ac:74:d5:
70:3e:fd:c5:33:31:29:04:77:1d:64:6b:7b:d0:2d:
2d:95:52:ea:2d:b6:b9:c8:cf:8f:5a:d5:72:e2:14:
b6:dd:cd:e3:0e:a9:b7:9d:1a:fd:80:55:ec:40:29:
fa:a8:6f:95:a7:c3:47:55:58:d2:1c:69:f0:d6:ba:
fc:a7:d4:c8:44:34:d3:f0:f2:18:2a:b8:12:3e:48:
90:1c:33:c2:dc:b2:d2:2e:b9:6e:ad:d0:65:47:ed:
27:28:a9:a1:20:11:58:92:51:7d:c7:bd:78:8f:e1:
e7:27:8b:10:b9:51:d8:78:f9:fd:6b:50:e0:f4:20:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:5C:D2:B6:08:28:07:E4:70:04:92:12:06:00:4C:DC:FA:F2:33
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:93:b3:73:ca:68:1e:0d:2b:ca:39:a7:a9:10:86:c7:06:
eb:4a:1b:bc:7d:98:0f:aa:be:c1:ef:ae:92:80:0d:03:cf:e2:
08:30:67:16:85:2f:f4:fa:fb:2f:7c:dd:00:28:85:9d:48:33:
0a:57:98:e3:65:d7:44:6e:a6:c4:38:ce:e6:3e:48:6a:ef:18:
49:f6:c7:fe:18:38:f2:87:e6:2a:fe:56:8d:c6:00:af:63:a6:
d4:51:66:de:76:df:e1:1b:6f:56:1d:a9:3b:10:3b:eb:85:2a:
8d:88:14:c0:03:fa:1e:bd:f7:22:e1:37:26:bb:d2:76:70:14:
66:56:5b:3a:a0:ed:3a:93:c7:c6:cf:43:00:77:2c:d0:35:b3:
df:dc:f7:ec:e5:7e:6a:eb:98:cf:e1:66:fb:ac:05:0b:ba:0c:
de:3b:70:33:7c:ad:66:0f:42:39:9c:c0:1b:d0:b4:0b:16:87:
1d:8e:ae:28:af:bb:95:23:56:f2:e1:d4:f1:36:e8:cb:68:85:
47:d5:84:99:98:c3:84:e6:bf:a3:0b:bc:bf:44:53:65:96:47:
1f:fc:64:a5:21:47:56:56:23:20:e2:cf:c6:b8:f5:49:0f:5c:
cc:16:06:f9:65:ff:73:2c:cc:da:3b:7b:8b:23:b5:62:44:e8:
c8:92:f4:5f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWQvrv4JKuIn7UUBmUOHDu43E4zEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4ZTg3ZjM1MzEyN2NjOTIzYjFjYzFmOTc4Njk5NTM3
ZWZhZDY2ZDAeFw0yNjA0MTgyMzE3MzBaFw0yNjA0MjAwMDI1MzBaMDMxMTAvBgNV
BAMTKDUzOUY1Q0QyQjYwODI4MDdFNDcwMDQ5MjEyMDYwMDRDRENGQUYyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbLCn+RMUZMKHzg7BTZfHmhjd
xQNPmm5MTFQrptBJz7b0kt9flyXnnQ7nomn/21wL/vA58/K5HwYIdU8Fln1A/ZEE
uYJ7ouRt+y3ylFsnZIpTX+VGVSIVkonFH7CgeR5UKbwICgeQB6FajndN0YdMMfWb
PW+MHe3LF5QJABul5X59h6x01XA+/cUzMSkEdx1ka3vQLS2VUuottrnIz49a1XLi
FLbdzeMOqbedGv2AVexAKfqob5Wnw0dVWNIcafDWuvyn1MhENNPw8hgquBI+SJAc
M8LcstIuuW6t0GVH7ScoqaEgEViSUX3HvXiP4ecnixC5Udh4+f1rUOD0IFB5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUU59c0rYIKAfkcASSEgYATNz68jMwHwYDVR0j
BBgwFoAUu46H81MSfMkjscwfl4aZU3761m0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzAvQkI4RTg3RjM1MzEyN0NDOTIzQjFDQzFGOTc4Njk5NTM3RUZBRDY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0Nkg4MU1TZk1ranNjd2ZsNGFaVTM3
NjFtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMC9CQjhFODdGMzUzMTI3Q0M5MjNC
MUNDMUY5Nzg2OTk1MzdFRkFENjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2OTs3PKaB4NK8o5p6kQ
hscG60obvH2YD6q+we+ukoANA8/iCDBnFoUv9Pr7L3zdACiFnUgzCleY42XXRG6m
xDjO5j5Iau8YSfbH/hg48ofmKv5WjcYAr2Om1FFm3nbf4RtvVh2pOxA764UqjYgU
wAP6Hr33IuE3JrvSdnAUZlZbOqDtOpPHxs9DAHcs0DWz39z37OV+auuYz+Fm+6wF
C7oM3jtwM3ytZg9COZzAG9C0CxaHHY6uKK+7lSNW8uHU8Tboy2iFR9WEmZjDhOa/
owu8v0RTZZZHH/xkpSFHVlYjIOLPxrj1SQ9czBYG+WX/cyzM2jt7iyO1YkToyJL0
Xw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:16 2026 by rpki-client