Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
File: Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft (raw, json)
Hash identifier: ydZo9DfWCIiwlIGnvbMpYkNgI1jLgUtv3CuJn1+srY8=
Subject key identifier: 06:B7:C4:3F:5F:FC:2E:68:8F:70:FE:4A:F6:A3:05:59:FF:1B:ED:4F
Authority key identifier: 05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
Certificate issuer: /CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Certificate serial: 019D3C0B2D5667C9E881CAA0F961C1B61FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
Manifest number: 42
Signing time: Mon 30 Mar 2026 00:00:58 +0000
Manifest this update: Mon 30 Mar 2026 00:00:58 +0000
Manifest next update: Tue 31 Mar 2026 00:00:58 +0000
Files and hashes: 1: Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl (hash: xv9wGrmWBiOtwJHvS9Z0lp2TTTOWSPWaJbv4LXqhNdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:0b:2d:56:67:c9:e8:81:ca:a0:f9:61:c1:b6:1f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Validity
Not Before: Mar 30 00:00:58 2026 GMT
Not After : Mar 31 00:00:58 2026 GMT
Subject: CN=06b7c43f5ffc2e688f70fe4af6a30559ff1bed4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:5d:b7:02:2d:78:95:ba:0f:1c:d8:60:60:
73:b9:3e:bc:33:7d:db:a4:7b:62:78:4a:77:6d:21:
e0:d9:b8:58:51:1a:a1:89:32:d9:7e:84:07:28:a8:
d6:41:ef:51:29:83:7a:79:67:87:75:96:82:4a:25:
22:72:5a:89:7d:c2:63:f2:2b:c9:2f:55:f8:91:58:
17:35:4d:3e:4f:3b:c4:ad:1b:fb:35:b4:b1:5d:d9:
14:cf:77:98:49:ec:73:99:f8:6a:de:83:46:d3:5d:
c1:c3:3a:b9:70:51:c2:8d:f3:ac:ba:30:15:b4:6a:
0d:39:93:bb:b6:20:91:c1:8e:7c:8b:5b:34:88:50:
65:73:f7:28:b2:4e:e9:bd:15:30:f4:4b:f3:69:20:
58:8c:56:b2:6c:ce:a0:bb:71:49:9b:62:74:3a:43:
b4:19:44:dc:e1:a2:42:1b:60:a5:0b:b8:68:58:f3:
98:0a:a4:77:dd:da:1d:f9:37:a2:fd:16:0b:88:bc:
e3:38:df:95:6d:c0:91:a3:08:77:71:67:90:1f:27:
19:7e:15:be:0c:cd:81:3e:4a:22:ed:77:e4:9e:01:
50:03:c9:5d:55:55:58:0f:d5:5d:96:45:78:9d:6f:
ab:05:43:2c:0a:8a:d5:b4:c5:4d:cd:a5:ab:2a:85:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B7:C4:3F:5F:FC:2E:68:8F:70:FE:4A:F6:A3:05:59:FF:1B:ED:4F
X509v3 Authority Key Identifier:
keyid:05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d0:1d:5b:8c:67:31:ca:8a:4f:fe:65:42:8e:cc:4d:f4:1a:
50:e7:1c:5a:28:8c:59:c9:86:3a:2c:27:9e:03:3f:20:77:b2:
0f:84:97:f5:c6:94:1e:90:2e:a2:89:d0:9a:fe:cd:3f:7d:ad:
f8:e7:dc:7c:45:16:d7:56:1a:c0:d2:99:03:df:86:f9:45:04:
88:ef:fb:b2:17:6c:0e:88:a0:68:e7:48:25:b3:da:66:b0:fc:
1f:5d:01:fd:05:81:96:50:d9:53:fe:f9:a0:64:c1:9f:a7:4e:
13:34:37:4b:70:4f:30:89:76:80:76:24:1e:95:4d:33:08:17:
b5:b2:f1:53:d1:ef:65:58:b4:b3:2c:09:cd:cf:be:35:d1:27:
5b:fb:8e:f1:96:78:e7:67:9b:99:7b:fa:69:4b:75:ff:e8:eb:
62:21:31:7e:1c:4b:ae:c5:0f:a7:a8:5a:a1:54:9e:23:0b:71:
05:41:c2:de:e5:20:0b:06:6c:ed:16:85:e5:72:8e:82:69:0c:
5c:f8:18:ca:17:71:99:1d:c0:e3:3a:ac:e2:8d:48:03:44:6f:
bb:6b:ae:15:34:ad:dd:c7:fd:ce:13:5d:60:36:7d:1d:d6:d6:
13:98:dc:9a:d7:99:09:fd:a3:6b:77:bf:68:52:79:a2:8d:8c:
d8:31:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 10:40:14 2026 by rpki-client