Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier: XMdpPNC4FImZWcfzwNvDrFj9Mfbbz7H64zgtU2flEbg=
Subject key identifier: 36:28:3C:54:D2:A5:CB:62:77:DF:D3:84:6D:B0:AA:17:67:B4:B7:60
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial: 23EEB75D117E117FB9CF2BE880F2218B07396FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number: F5
Signing time: Fri 12 Jun 2026 22:25:13 +0000
Manifest this update: Fri 12 Jun 2026 22:20:13 +0000
Manifest next update: Sun 14 Jun 2026 00:50:13 +0000
Files and hashes: 1: AS201386.asa (hash: OYRXpkyxncvi2a2N61iwOFYtIw9TA6/nEOruPTD6Q+k=)
2: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: U9+1d4n3Q6vZrQaPp21lXBpev8xf6T5+SEWeJn6Iuak=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ee:b7:5d:11:7e:11:7f:b9:cf:2b:e8:80:f2:21:8b:07:39:6f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
Validity
Not Before: Jun 12 22:20:13 2026 GMT
Not After : Jun 14 00:50:13 2026 GMT
Subject: CN=36283C54D2A5CB6277DFD3846DB0AA1767B4B760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:eb:5b:c0:88:5d:e9:ff:52:b0:1e:91:3d:
c8:bd:3e:b6:81:c8:62:e4:27:fa:a3:62:b1:1a:24:
64:3e:b3:8c:cc:a9:ba:20:03:76:54:60:7d:62:d8:
ad:9d:0d:29:73:42:4f:3a:68:7f:8d:9d:0c:23:15:
52:cd:4c:9a:4c:12:70:27:bb:ec:92:ab:d9:a5:ca:
84:73:1c:1f:8f:b5:69:57:4f:69:e0:02:3d:89:85:
62:49:54:87:f1:65:ad:bf:22:d5:50:bf:8e:53:f2:
f4:21:34:9e:16:cf:b1:cc:f8:f6:fe:04:8a:d5:fc:
49:38:90:75:7d:a4:11:2c:95:5f:49:40:da:0a:20:
9b:7f:9c:ce:09:1a:b7:34:63:7d:f1:63:d6:80:b6:
08:f9:8e:bb:b0:41:c4:3e:4b:d6:a8:63:70:4b:98:
05:70:1b:ab:29:20:d5:cf:8b:66:3e:e8:a7:1c:2d:
bd:d6:41:db:d8:fe:77:b6:be:fd:78:b3:9c:ec:1e:
94:7e:9f:0e:ba:07:7b:f8:fe:d1:5d:fc:76:a5:82:
f7:82:67:f4:c2:af:09:5a:4e:72:0a:f7:a8:3a:cc:
a9:a1:c4:2c:85:4f:bd:d0:e3:e5:e0:24:08:0b:30:
01:48:e2:d4:f5:93:9f:ea:a1:f7:1a:55:d2:91:08:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:28:3C:54:D2:A5:CB:62:77:DF:D3:84:6D:B0:AA:17:67:B4:B7:60
X509v3 Authority Key Identifier:
keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5b:61:6b:83:80:02:9a:cf:f5:12:5c:4b:50:5d:0d:b7:c6:
90:e0:22:11:61:a3:c1:56:bc:65:37:47:f1:2e:8b:63:ee:38:
50:2f:0f:30:65:74:cb:b4:bc:4a:8a:00:80:26:a6:3f:88:7e:
2b:03:b1:97:7e:25:96:fd:a8:47:f6:76:2f:fc:31:51:e9:16:
9a:b5:90:e0:39:dd:1d:2b:83:75:4a:63:c0:85:71:ea:89:15:
c9:30:78:88:77:1c:be:59:bd:f7:f0:b2:97:60:0b:61:b8:51:
89:5e:32:9a:49:ba:c4:e2:ea:28:8c:12:52:58:a5:4a:16:dd:
6b:a2:c3:3f:86:32:6c:0a:1e:ae:4e:86:d6:b6:45:0d:b5:90:
3e:7b:55:07:39:c7:51:c7:b7:9b:d1:04:75:a5:86:07:fc:b3:
72:f7:55:b9:e6:87:96:aa:79:66:89:31:4a:28:fa:36:fb:10:
c9:65:97:7d:57:60:5c:90:87:7f:76:75:65:e3:2f:68:95:03:
80:3f:51:d0:03:a9:1e:fd:ce:6e:0b:22:88:7a:bd:3a:19:7e:
1a:cb:12:91:e0:4d:f1:bf:6c:a3:58:1a:d1:c1:38:52:f5:ae:
b6:fe:00:4d:bc:8b:d7:34:04:cd:f0:6e:4f:0d:5e:df:a3:33:
49:4a:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:51 2026 by rpki-client