Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: n4ykb69i425efMbEqZNUiYjxoRi4Rr2uYt+NPkc2ols=
Subject key identifier: 28:B0:E0:A3:67:5B:FD:41:E8:A7:11:C6:E1:D0:39:18:B6:03:FB:D9
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 019F92ECCCCBE6B4FE6FE350C08C20A0F589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0CF9
Signing time: Fri 24 Jul 2026 07:00:19 +0000
Manifest this update: Fri 24 Jul 2026 07:00:19 +0000
Manifest next update: Sat 25 Jul 2026 07:00:19 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: c7aOk2PHwX4K3mFtn7yMpLtyUOJM1cvj7mNaFg8BPOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:cc:cb:e6:b4:fe:6f:e3:50:c0:8c:20:a0:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Jul 24 07:00:19 2026 GMT
Not After : Jul 25 07:00:19 2026 GMT
Subject: CN=28b0e0a3675bfd41e8a711c6e1d03918b603fbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:08:a7:1d:94:02:3c:ac:44:49:45:66:0c:
0a:fc:8d:8d:53:a5:8b:0a:3d:10:d9:d6:3b:60:e5:
0c:9c:5b:5f:b6:29:a3:1b:2c:1a:8c:a9:4a:53:95:
ce:85:df:f3:10:b8:23:90:7e:7c:0c:5f:57:b6:77:
6e:ba:c2:76:31:0c:4a:4b:b7:5d:a9:a9:f2:49:f8:
c6:0b:57:bd:ee:8b:1f:4e:98:1a:01:72:56:5f:ec:
34:58:bf:25:05:9d:7a:2d:35:15:da:0d:e5:e0:45:
3f:5b:9e:4b:f4:2d:1a:e2:ed:11:66:f0:7e:e5:b8:
b3:eb:84:c4:4f:84:d3:0a:16:e4:29:24:93:cc:47:
f4:93:03:1d:b8:aa:c5:4a:06:83:a2:d0:06:88:8b:
c4:05:35:9b:ef:20:8d:72:12:f8:f8:a3:3e:82:8e:
08:03:bc:58:fa:67:ae:29:4f:ef:ac:df:f9:91:c7:
81:28:a5:07:60:42:8d:22:77:2f:11:9d:f1:25:58:
00:a6:39:99:2b:72:e1:2c:27:c2:cb:92:16:5b:89:
9d:72:cc:ff:77:9a:47:a9:44:f5:af:85:ba:d4:4d:
8f:69:d6:6e:78:b4:e3:78:6e:82:23:e3:a3:ce:76:
31:2e:c4:d8:c3:46:29:68:f6:89:4a:cf:35:9e:b4:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:E0:A3:67:5B:FD:41:E8:A7:11:C6:E1:D0:39:18:B6:03:FB:D9
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7d:9b:3b:c4:d7:80:22:81:bb:57:86:c3:51:26:0c:24:e2:
4f:9c:4b:48:76:fc:6f:a4:b7:a5:4c:01:a0:81:91:25:28:b1:
fe:4f:f1:9d:3c:4b:6f:5e:bf:c6:b0:04:5e:34:6e:a6:5e:2b:
a7:b2:6f:48:60:1a:7d:c6:f5:a1:99:6b:51:d7:5a:39:69:de:
cf:e6:4f:57:f2:ef:1f:92:5c:88:d3:d1:98:8b:b0:38:5d:a2:
53:36:f0:56:b1:34:b7:83:91:b4:c2:b9:1b:2a:ab:6e:38:43:
3c:e7:41:7c:34:69:a9:a0:45:3a:42:8e:88:8e:31:2c:56:4b:
cd:9b:70:be:e0:14:62:e7:bb:a7:04:25:78:fe:1f:27:3b:b9:
7a:f2:ef:44:43:ad:e5:09:bb:13:9d:eb:51:3a:81:02:1c:89:
91:e1:61:04:9a:8b:9d:5a:68:12:cf:6f:ef:e6:cb:24:1a:dd:
e5:32:6b:dd:24:12:7e:45:40:0d:10:ba:f7:2b:36:a6:94:c6:
a9:6c:d2:69:e9:e2:34:29:50:42:03:71:48:bd:51:2b:25:39:
f9:3d:ae:90:b4:15:76:28:09:82:1e:95:a0:50:e9:42:ff:fa:
75:9a:cb:87:f3:0c:11:a1:34:ee:d7:e1:05:9a:61:35:01:54:
e0:63:f5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7MzL5rT+b+NQwIwgoPWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZjNkNzAwOTgyYWY5YWMxYmFmZTRmMmFhNzE4NDRhZDAw
NzU5MWQwHhcNMjYwNzI0MDcwMDE5WhcNMjYwNzI1MDcwMDE5WjAzMTEwLwYDVQQD
EygyOGIwZTBhMzY3NWJmZDQxZThhNzExYzZlMWQwMzkxOGI2MDNmYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKwIpx2UAjysRElFZgwK/I2NU6WL
Cj0Q2dY7YOUMnFtftimjGywajKlKU5XOhd/zELgjkH58DF9XtnduusJ2MQxKS7dd
qanySfjGC1e97osfTpgaAXJWX+w0WL8lBZ16LTUV2g3l4EU/W55L9C0a4u0RZvB+
5biz64TET4TTChbkKSSTzEf0kwMduKrFSgaDotAGiIvEBTWb7yCNchL4+KM+go4I
A7xY+meuKU/vrN/5kceBKKUHYEKNIncvEZ3xJVgApjmZK3LhLCfCy5IWW4mdcsz/
d5pHqUT1r4W61E2PadZueLTjeG6CI+OjznYxLsTYw0YpaPaJSs81nrSj9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiw4KNnW/1B6KcRxuHQORi2A/vZMB8GA1UdIwQY
MBaAFAbz1wCYKvmsG6/k8qpxhErQB1kdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEt
ZDNiM2U3N2JkOTkzLzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEtZDNiM2U3N2JkOTkz
LzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn2bO8TX
gCKBu1eGw1EmDCTiT5xLSHb8b6S3pUwBoIGRJSix/k/xnTxLb16/xrAEXjRupl4r
p7JvSGAafcb1oZlrUddaOWnez+ZPV/LvH5JciNPRmIuwOF2iUzbwVrE0t4ORtMK5
GyqrbjhDPOdBfDRpqaBFOkKOiI4xLFZLzZtwvuAUYue7pwQleP4fJzu5evLvREOt
5Qm7E53rUTqBAhyJkeFhBJqLnVpoEs9v7+bLJBrd5TJr3SQSfkVADRC69ys2ppTG
qWzSaeniNClQQgNxSL1RKyU5+T2ukLQVdigJgh6VoFDpQv/6dZrLh/MMEaE07tfh
BZphNQFU4GP1bA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:53:28 2026 by rpki-client