Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: QkEbd5duStvzHSbBnJJVNKGvOM/ZGRrB5zZfhndBprY=
Subject key identifier: 7B:EE:C9:E1:13:57:1E:DB:38:B8:CA:BE:B5:74:75:03:3F:79:10:E7
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 01A0CA10325F0DA3573C96A3103E90D68971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 042A
Signing time: Tue 22 Sep 2026 17:00:54 +0000
Manifest this update: Tue 22 Sep 2026 17:00:54 +0000
Manifest next update: Wed 23 Sep 2026 17:00:54 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: MB/gqVbR+QKmY1iMdqrWMVFKv4t2eOQMyq/9FCbcYsc=)
2: MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa (hash: dr9Y4CPPNxDI1DdhIlx+imOECRhQA9dnFASgP9A+ij4=)
3: vI5YIn1gmoiJ1XhTruhkEMslvdk.roa (hash: MwcmXVuCGhpSZPWmXs+pxNPa7hJBYp1BPE8MntYWY7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:32:5f:0d:a3:57:3c:96:a3:10:3e:90:d6:89:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Sep 22 17:00:54 2026 GMT
Not After : Sep 23 17:00:54 2026 GMT
Subject: CN=7beec9e113571edb38b8cabeb57475033f7910e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:e3:b9:dc:54:6d:0c:1f:bf:6b:bf:ab:ea:
a7:ad:17:c0:7a:e3:68:87:86:39:89:c6:f1:03:02:
18:32:80:db:e5:e0:9d:2c:13:8f:b6:e0:ce:d6:84:
89:0e:0c:f5:77:7b:25:30:99:b2:8c:b6:7c:2f:ed:
5a:35:0c:c1:fe:fd:cf:c7:c5:ad:70:5d:9b:fc:ea:
59:c3:68:49:bc:3b:11:30:a8:90:6b:fd:80:36:c5:
e7:f4:57:2b:be:24:7f:47:57:6d:a6:c2:0f:db:e0:
0a:b2:42:a0:a1:54:f8:12:d1:76:1e:c0:53:60:db:
16:67:2d:70:55:52:f6:c1:d9:bc:24:ba:7e:9e:26:
60:9e:cd:e4:2f:0c:cb:e1:4b:33:69:86:e4:e8:01:
27:77:8b:00:a3:24:61:ae:3f:95:ca:bd:52:05:97:
2a:1a:76:f9:cc:7e:90:29:88:aa:b3:48:b5:f0:9d:
0e:bf:4a:70:d5:6f:be:27:6a:af:80:30:27:c8:bc:
a8:4b:b8:33:7b:6e:ff:0b:49:f2:31:c7:f9:29:57:
79:fb:6e:88:b7:9d:53:5f:aa:61:f2:ee:b7:f6:7c:
60:13:31:bd:b5:2a:48:db:fc:3f:e5:8a:d0:40:cb:
f4:88:a5:dd:a5:fb:65:fd:4f:07:79:fb:f8:5d:10:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:C9:E1:13:57:1E:DB:38:B8:CA:BE:B5:74:75:03:3F:79:10:E7
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b1:5c:e7:ac:3a:6a:e5:b7:cd:1d:d8:8b:4a:aa:bb:19:24:
e0:e7:34:9d:cc:8e:26:b6:89:8f:a8:6f:79:96:c1:be:69:75:
4a:28:8f:2c:0e:50:05:ba:b5:10:82:2f:79:76:8d:b1:59:0f:
da:ae:b8:27:f3:d6:d1:f4:d5:c9:07:53:47:f3:ac:59:cf:2b:
84:ae:11:c2:d7:9a:7f:e8:ec:6f:be:74:ce:6e:92:d6:e2:d0:
a8:8b:83:70:ef:ff:da:3c:2f:54:1e:53:44:c7:9b:1e:80:58:
cc:3d:fa:36:d0:2b:67:31:b9:8f:1f:e1:18:c4:48:e3:4c:77:
b3:92:33:c6:e5:7e:bd:b2:04:23:ab:db:a8:04:6e:fa:d0:74:
d0:28:36:df:5b:23:f0:12:8b:9e:b2:5a:bc:66:1d:5f:f7:56:
a9:11:ca:b4:02:05:45:83:e8:74:b2:33:c2:d4:d0:a8:04:4c:
b0:56:79:36:62:5d:76:4d:77:9e:85:73:78:af:fe:cc:30:42:
11:48:a5:b7:ed:23:cb:33:f5:5d:cd:9f:e5:a3:93:97:ef:4b:
9b:2a:bd:db:0b:28:95:70:41:b5:d1:c4:76:9b:3c:1e:52:4c:
38:d9:71:30:d2:84:f1:db:4d:50:eb:e6:58:4a:39:da:e8:36:
d4:4d:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:27 2026 by rpki-client