Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: Ett1iIGcKM4abCSB3kIA5cF59joVMUX9452Dh5tOu8Y=
Subject key identifier: 08:41:8B:66:12:14:13:0B:1A:91:C0:CE:25:E7:D2:EA:5C:A5:EF:39
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 019D2AE02DAA7067F159A448EE88FCA38955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0BBA
Signing time: Thu 26 Mar 2026 16:00:27 +0000
Manifest this update: Thu 26 Mar 2026 16:00:27 +0000
Manifest next update: Fri 27 Mar 2026 16:00:27 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: jTrvq4QuemrquBl7RTWOfbFiyCmJXWSD1TKI5kZlnBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:2d:aa:70:67:f1:59:a4:48:ee:88:fc:a3:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Mar 26 16:00:27 2026 GMT
Not After : Mar 27 16:00:27 2026 GMT
Subject: CN=08418b661214130b1a91c0ce25e7d2ea5ca5ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:d2:b3:50:df:84:18:fc:6d:ac:91:1c:68:
ee:04:78:9f:55:11:c9:57:e2:b4:9b:3b:ae:cd:f9:
7d:37:de:0f:fe:4e:9e:1b:6e:16:ce:c9:6c:ad:3d:
18:8c:d3:2c:2e:06:a0:90:19:9e:56:05:5a:5e:cf:
13:3d:18:b7:70:36:7f:41:6f:8d:0e:c6:7c:59:a7:
f8:46:8f:6a:96:35:26:a5:3e:e2:2e:3a:8e:a1:87:
89:46:80:31:b3:60:3b:a8:83:d0:0d:de:06:73:56:
80:ed:92:1e:54:a8:14:94:19:55:10:f7:5b:d0:d9:
66:b9:39:cb:7d:ea:6d:99:e6:aa:a3:b6:ae:d3:4d:
7d:d4:a4:87:2e:01:90:f3:c2:df:2b:66:16:00:e1:
86:a4:c3:f0:0c:b5:cd:46:e1:6f:0f:d3:70:57:71:
ee:fe:62:14:8c:10:60:a4:71:25:14:3e:2b:9d:45:
f8:6b:15:50:5f:f0:5e:41:d9:4d:81:6e:83:c5:e1:
06:a4:4c:ce:e9:22:98:a5:10:71:ef:53:ef:92:9c:
51:6c:be:55:ec:9e:70:25:0c:ed:6a:6e:18:8a:64:
2b:14:0a:64:ce:94:6f:fa:ad:db:32:0f:9e:69:32:
1c:9a:49:88:80:3d:12:30:57:66:3e:7b:1e:fd:7f:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:8B:66:12:14:13:0B:1A:91:C0:CE:25:E7:D2:EA:5C:A5:EF:39
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:c4:f7:ba:07:70:ec:11:96:58:be:dc:48:bc:b1:38:b4:
5d:58:51:3c:8a:bc:7b:f7:08:22:7f:49:e6:63:fe:3e:40:88:
0e:35:cd:af:05:86:38:26:66:c3:86:eb:1d:32:d9:3d:da:fb:
65:7e:c3:c2:47:da:cb:05:8e:aa:55:36:26:a2:dd:1e:a2:a8:
6f:29:7f:94:bc:4e:80:43:67:97:8d:57:42:72:cb:57:25:cc:
bc:67:e3:8f:d5:e8:49:94:c6:5b:0f:39:9d:63:d1:97:6a:e5:
7d:3e:f2:cb:0b:d0:95:46:03:42:ea:4d:88:19:a3:90:83:81:
f9:1e:38:2d:18:3e:ff:1e:bf:06:72:0b:3a:c8:1e:ea:a4:ee:
24:07:38:05:93:ed:5e:eb:86:f8:0c:26:7e:21:47:af:37:cf:
a9:37:3d:c7:8a:8b:05:a1:9f:2a:1c:e3:f3:92:bb:d8:ac:eb:
cf:aa:2c:5b:cd:c4:45:ed:08:0d:38:16:e6:db:b1:4a:f8:46:
cd:8f:b9:16:2a:9a:3e:c0:a7:13:c5:29:43:35:70:07:79:e6:
06:70:22:fe:d0:25:01:5d:ab:eb:01:3e:a7:d2:be:9d:95:35:
a1:72:0b:2a:dc:cd:68:b5:b7:fc:32:a6:1f:71:a1:8a:fe:15:
0c:72:18:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4C2qcGfxWaRI7oj8o4lVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZjNkNzAwOTgyYWY5YWMxYmFmZTRmMmFhNzE4NDRhZDAw
NzU5MWQwHhcNMjYwMzI2MTYwMDI3WhcNMjYwMzI3MTYwMDI3WjAzMTEwLwYDVQQD
EygwODQxOGI2NjEyMTQxMzBiMWE5MWMwY2UyNWU3ZDJlYTVjYTVlZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4XSs1DfhBj8bayRHGjuBHifVRHJ
V+K0mzuuzfl9N94P/k6eG24WzslsrT0YjNMsLgagkBmeVgVaXs8TPRi3cDZ/QW+N
DsZ8Waf4Ro9qljUmpT7iLjqOoYeJRoAxs2A7qIPQDd4Gc1aA7ZIeVKgUlBlVEPdb
0NlmuTnLfeptmeaqo7au00191KSHLgGQ88LfK2YWAOGGpMPwDLXNRuFvD9NwV3Hu
/mIUjBBgpHElFD4rnUX4axVQX/BeQdlNgW6DxeEGpEzO6SKYpRBx71PvkpxRbL5V
7J5wJQztam4YimQrFApkzpRv+q3bMg+eaTIcmkmIgD0SMFdmPnse/X/oRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhBi2YSFBMLGpHAziXn0upcpe85MB8GA1UdIwQY
MBaAFAbz1wCYKvmsG6/k8qpxhErQB1kdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEt
ZDNiM2U3N2JkOTkzLzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEtZDNiM2U3N2JkOTkz
LzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfrE97oH
cOwRlli+3Ei8sTi0XVhRPIq8e/cIIn9J5mP+PkCIDjXNrwWGOCZmw4brHTLZPdr7
ZX7DwkfaywWOqlU2JqLdHqKobyl/lLxOgENnl41XQnLLVyXMvGfjj9XoSZTGWw85
nWPRl2rlfT7yywvQlUYDQupNiBmjkIOB+R44LRg+/x6/BnILOsge6qTuJAc4BZPt
XuuG+AwmfiFHrzfPqTc9x4qLBaGfKhzj85K72Kzrz6osW83ERe0IDTgW5tuxSvhG
zY+5FiqaPsCnE8UpQzVwB3nmBnAi/tAlAV2r6wE+p9K+nZU1oXILKtzNaLW3/DKm
H3Ghiv4VDHIYig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:24 2026 by rpki-client