Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: BhBbBgF+mzVJlmr0AGXX99wCot/wzbjdLgmI2b0uvp0=
Subject key identifier: 10:F5:9E:14:A5:22:3F:86:5F:78:7C:75:48:F1:DE:86:2A:D1:50:CA
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 019F8FEC8563100356D8D9060D613B2B6EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 0386
Signing time: Thu 23 Jul 2026 17:01:10 +0000
Manifest this update: Thu 23 Jul 2026 17:01:10 +0000
Manifest next update: Fri 24 Jul 2026 17:01:10 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: ZgUtoOT60Pgw/+pfT70BIN6V7je0jWX0YxrT2FTYzYY=)
2: MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa (hash: dr9Y4CPPNxDI1DdhIlx+imOECRhQA9dnFASgP9A+ij4=)
3: Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa (hash: gWG2uNDqwP4RF3btrRpyjXejBso2oQJiOb7vaAvc7tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:85:63:10:03:56:d8:d9:06:0d:61:3b:2b:6e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Jul 23 17:01:10 2026 GMT
Not After : Jul 24 17:01:10 2026 GMT
Subject: CN=10f59e14a5223f865f787c7548f1de862ad150ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:bd:74:7a:81:3b:ff:dc:82:21:79:f9:69:
5d:e5:5d:1f:2f:97:d3:0f:52:8d:0d:0d:8d:b3:4a:
65:b3:79:3a:a8:7d:bd:16:cb:d3:2d:84:fc:3a:1a:
ee:ea:e4:33:9a:5d:c8:89:00:1f:62:3a:26:64:b4:
d6:9a:2f:e2:f0:b8:1f:07:7c:2f:07:72:1f:d2:fd:
f8:48:3a:6b:4c:6b:c6:dc:25:95:66:bb:9c:6d:0a:
b5:a5:80:94:aa:c3:7f:5a:68:41:a1:23:c3:d9:5e:
56:1d:9b:e3:2c:af:a1:73:10:ed:4d:92:6f:8b:df:
5f:53:39:76:b0:a8:df:e8:08:76:23:f6:e6:95:1a:
05:09:15:77:70:14:b4:15:d8:38:f4:65:c4:7d:9d:
fb:01:e5:36:f3:b7:36:38:27:31:bd:0a:9d:52:ce:
b6:2d:32:9f:cf:12:7b:2d:26:15:34:38:44:f2:19:
b4:70:34:1c:b9:00:6a:f7:b1:1f:13:f7:00:fc:39:
64:93:96:04:06:a3:5e:0c:ab:50:f1:14:94:2b:19:
95:77:3f:bd:4e:48:ab:20:d9:dc:87:f8:88:1f:d6:
06:ad:96:d4:15:d8:1b:ae:89:39:ce:ae:21:cd:0b:
54:8d:09:81:89:32:63:19:3c:a3:11:e0:9a:89:2c:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:9E:14:A5:22:3F:86:5F:78:7C:75:48:F1:DE:86:2A:D1:50:CA
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:12:03:99:58:04:75:8c:1e:5f:cf:a5:6c:24:28:a7:cd:83:
94:ac:14:50:eb:5e:e0:50:da:12:14:f5:88:64:a6:14:6a:eb:
b5:0c:b3:2a:f2:8f:c8:3c:60:d6:1f:ff:a6:44:4f:e1:b1:3b:
26:65:3c:4d:00:29:50:ad:34:2d:da:a8:ec:f6:5f:d9:0a:60:
b6:f1:b2:3e:9d:1e:41:18:56:10:c8:8d:cc:0d:f2:e1:24:c2:
76:d1:ca:45:c4:dd:3b:c0:30:94:19:88:61:ca:cd:ff:49:af:
b5:27:ba:21:4b:fb:f5:7d:3d:7b:d8:49:78:0f:80:6e:be:b7:
e1:8f:95:7d:07:7f:a4:46:47:36:03:e2:d4:18:f0:42:23:be:
9b:5e:de:cb:ed:3f:28:aa:f2:03:87:5c:de:75:70:fe:f1:86:
88:ba:7d:77:f4:aa:d4:62:5d:09:7c:1b:b6:ae:a6:9a:c9:30:
16:7a:d9:1a:18:47:87:5b:94:ef:93:ec:46:5f:4f:d4:85:b1:
81:c9:a8:89:3d:42:98:2f:ad:4c:97:6c:23:12:ef:24:11:89:
37:7f:1c:6c:3a:ec:b5:0c:09:2a:12:09:01:93:1e:65:c1:64:
fc:26:58:a7:1f:6a:2e:9e:ed:70:0f:41:81:42:29:5f:0e:29:
af:e1:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:22 2026 by rpki-client