Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: vhJCNc5A+BRR5Kx2DqVk3r+DuFiCZQZdtSHCTntiToQ=
Subject key identifier: CD:51:90:96:03:D4:41:2B:08:05:3E:3D:D3:0A:BF:F8:B5:FA:41:F5
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 096AA629420B7CC4152A433FF22EC8244BB8CDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: 65
Signing time: Sun 01 Mar 2026 13:58:26 +0000
Manifest this update: Sun 01 Mar 2026 13:53:26 +0000
Manifest next update: Mon 02 Mar 2026 14:47:26 +0000
Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: UvqtDIWAYrqg7GqG7r+V3KEa9sWZ8RhRezPUzcJSyqs=)
2: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6a:a6:29:42:0b:7c:c4:15:2a:43:3f:f2:2e:c8:24:4b:b8:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Mar 1 13:53:26 2026 GMT
Not After : Mar 2 14:47:26 2026 GMT
Subject: CN=CD51909603D4412B08053E3DD30ABFF8B5FA41F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:93:3a:3f:7d:52:e6:6c:b7:03:df:83:01:
b8:c7:8d:5d:b0:d9:6b:06:37:a2:82:e2:b7:db:4d:
d4:87:38:9a:f3:5a:7e:bf:f1:bf:0f:72:e4:70:42:
4f:4e:f9:79:a9:3e:9b:50:c4:18:1a:cc:6c:22:2d:
3e:b0:dc:a2:e7:4d:f8:2e:21:35:0d:f4:61:4c:ee:
62:65:74:47:d4:46:66:80:42:95:68:ea:07:39:17:
e9:7c:5b:81:04:12:e4:a2:a0:69:5c:9a:5a:55:7a:
3b:65:66:9d:6d:aa:6a:1b:4b:6a:56:b1:ea:6d:63:
1d:1d:f5:eb:56:67:26:d7:8f:7c:55:61:35:e4:ec:
c3:e4:4d:6b:51:c0:9b:98:4d:97:12:79:93:c9:8f:
27:4e:59:86:95:52:f0:57:20:89:09:34:5f:c5:2b:
05:5d:d3:89:56:af:21:c4:9d:83:af:f4:dd:2e:c4:
d1:cc:7a:d9:96:69:69:7f:59:31:ab:43:0c:de:c9:
c9:b9:e9:63:04:74:3d:95:ed:2d:17:dd:9a:01:21:
d3:db:54:d7:3a:78:ae:67:19:93:11:10:ec:17:f3:
ce:a7:96:1a:38:4f:cd:d2:aa:a8:87:33:4d:f9:c5:
c6:f8:60:a7:cc:7b:e2:93:44:01:9c:7a:fc:da:8e:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:90:96:03:D4:41:2B:08:05:3E:3D:D3:0A:BF:F8:B5:FA:41:F5
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f6:b9:28:73:0e:7a:6a:82:97:7d:a6:ac:92:c3:8c:2c:0b:
0f:56:40:09:fb:e7:58:92:26:5d:9b:f1:40:c6:a7:ba:a7:4d:
f6:45:f6:bb:8f:86:45:2e:e4:85:e8:fe:9d:8d:66:9a:fb:0d:
1b:ae:1b:00:00:87:04:93:b7:f1:2b:47:ea:a2:40:5f:e9:0c:
61:82:b6:b3:3f:9c:c6:32:1f:d2:31:f1:8c:ad:1e:57:23:31:
a3:8d:59:c3:68:4d:a9:13:c9:15:2e:05:68:72:f4:d3:52:eb:
6f:be:5e:fd:a9:2c:7d:21:9c:e4:2a:cb:8c:fb:d8:a5:90:55:
89:6f:96:dc:40:a7:d3:ad:03:eb:f5:56:61:29:66:b6:65:34:
a0:b5:66:3b:d0:b6:7d:22:d3:43:9c:ed:be:dd:15:43:85:94:
84:b8:e1:84:99:f9:01:79:a6:8c:76:d5:48:5c:3c:46:52:92:
24:f5:1a:17:50:9a:87:ce:86:85:96:9e:1e:c5:ab:c6:4e:d3:
14:37:0f:4e:af:f9:6a:72:c2:a4:9f:9d:96:e5:c7:db:84:37:
f5:0f:13:02:2a:0b:ce:df:e2:38:33:e8:6d:35:ed:9a:55:4b:
e1:42:41:c5:fc:d9:13:3b:d5:42:1c:c5:50:96:27:d1:0a:23:
bc:af:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:32 2026 by rpki-client