Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: Bh3g8mWDSzRa3fj+uvuTCaM/hmTh7d2CGVU6MoqZWfo=
Subject key identifier: 42:B9:B9:91:00:A7:7A:CE:5A:DA:2A:43:1F:6F:B4:A4:16:D9:98:C5
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 01A0E10698F51627E73CAB1B4AED8D0A4F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0DA6
Signing time: Sun 27 Sep 2026 04:01:40 +0000
Manifest this update: Sun 27 Sep 2026 04:01:40 +0000
Manifest next update: Mon 28 Sep 2026 04:01:40 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: Xcn3KBWOxS8vtG+2wbfzjNo+5byvjhYH/2BaTVpuex0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:98:f5:16:27:e7:3c:ab:1b:4a:ed:8d:0a:4f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Sep 27 04:01:40 2026 GMT
Not After : Sep 28 04:01:40 2026 GMT
Subject: CN=42b9b99100a77ace5ada2a431f6fb4a416d998c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:9a:f2:2b:b3:a7:2e:50:e4:36:b0:98:c5:
22:60:27:51:4e:0f:d6:7b:c1:60:77:ba:98:ef:74:
b2:73:de:36:78:09:1e:62:6b:6c:e4:33:5e:25:7e:
23:40:10:da:e9:da:71:bb:23:af:c7:d1:b2:d4:da:
b1:7b:e5:8a:b3:54:7d:c6:31:49:36:ae:70:fc:89:
72:ce:59:7a:1d:6a:99:9b:a9:a4:0e:a8:13:14:05:
21:39:43:6d:b1:65:52:2e:28:d2:c0:9c:69:28:b6:
ae:fd:dc:21:af:fd:f7:5c:53:05:fd:8e:fd:d1:00:
81:e8:e4:e2:f8:cf:01:27:7c:64:a9:b6:d8:b8:fe:
43:86:66:0c:2e:e6:78:19:98:43:cd:d6:d6:fe:89:
dc:5b:0e:c5:a3:a4:90:54:d6:72:5c:0e:aa:0c:c8:
b9:39:22:77:9d:fe:1a:44:02:41:af:b5:d1:d2:78:
b2:cf:bd:96:66:1c:72:ce:24:d1:cc:67:e6:92:2e:
da:6a:9a:79:c9:c5:b6:43:68:5d:fd:ff:c5:34:67:
5e:63:8a:99:db:a3:0a:8e:f7:40:40:81:d2:9b:c9:
e3:1a:b5:d1:b9:1d:b0:a2:3e:43:d1:82:a2:e8:8f:
55:8a:f2:21:a6:68:14:ab:53:4b:6d:d7:a6:66:39:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:B9:91:00:A7:7A:CE:5A:DA:2A:43:1F:6F:B4:A4:16:D9:98:C5
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1c:f6:90:e6:05:5b:4a:32:34:9b:9f:2e:34:53:08:90:f4:
3e:08:6c:be:f9:b2:bc:39:82:9d:02:d2:64:7b:b7:da:fe:93:
ef:bb:ff:fb:1d:09:cd:85:a1:28:66:3c:c6:02:89:3a:5a:f0:
84:59:33:d8:aa:e4:2d:4b:b4:0e:b2:21:04:c1:65:67:95:8d:
03:25:16:61:8d:72:93:b5:91:d9:1b:56:70:88:7d:be:0a:16:
7d:a1:6d:dd:04:67:12:dd:8e:af:b9:b3:0a:21:00:8f:cb:11:
e0:b4:a5:d1:f9:35:25:f5:42:db:38:dd:07:7f:de:36:bc:9e:
93:89:b9:0b:e5:6a:d5:b6:76:4d:3d:38:50:6a:9e:ad:4b:26:
25:65:9b:4d:30:98:f8:6e:f1:fd:55:d7:df:7a:c6:85:e8:d0:
5e:c6:29:14:b2:7c:8b:21:97:4d:e7:ef:9c:73:4d:b0:7a:bf:
44:33:b2:a2:9a:53:3e:67:11:be:10:f3:d0:5b:2d:e6:2a:07:
36:71:36:2a:bf:1c:52:9a:fe:ae:9a:8b:a5:b8:ea:ce:9d:ee:
2d:97:b4:bc:5d:ad:b0:89:7b:7a:8d:5c:fb:93:07:89:a9:f9:
ab:07:47:21:65:35:a1:09:1f:bc:fc:11:7b:62:ad:39:26:61:
c8:0b:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:52:09 2026 by rpki-client