Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: V6XEEqdYUhNc592m9Q8B1ALKvOM2eQIwTwrJROstPUE=
Subject key identifier: 9D:65:34:90:C9:1A:6C:2E:38:2B:3E:AE:5D:8D:E2:BC:1D:24:F8:C0
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 019D25F1B27B92A6A7B8F714FE066B630A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 07C1
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: Uciftmf/CXKi6k6e72LgCigvBxyPMDmhQBRVk9ezbL4=)
2: ku9q2SmWWLLsi5oorWHKlVO8WIQ.roa (hash: uUP+mrwnQZ97afnlVETUlY/refVnxXobEQJ98a1LiOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b2:7b:92:a6:a7:b8:f7:14:fe:06:6b:63:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=9d653490c91a6c2e382b3eae5d8de2bc1d24f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:a9:91:77:01:20:a9:71:1a:af:5c:8b:b9:
ab:bd:f0:41:dd:5b:0f:9c:97:e4:4b:52:ca:51:68:
c5:48:cf:f0:23:2c:aa:de:03:82:26:65:22:c3:ba:
19:cb:a2:9f:ed:18:cb:36:d5:31:ab:32:94:59:41:
28:af:e1:52:f1:d1:c4:9b:97:47:ad:29:8e:c7:33:
79:6d:52:6b:0e:14:e8:88:17:a9:08:63:b4:b5:a5:
d2:23:1c:d3:07:50:4b:4c:3d:2f:30:cc:d3:70:36:
df:03:0e:9c:a2:90:e3:c8:eb:8d:41:9e:d1:e0:a3:
31:d6:ef:78:73:e4:47:e6:cc:50:84:ba:bd:e1:5c:
db:a4:6f:e5:15:4c:e6:2f:15:d0:eb:1e:8b:99:ea:
fd:67:25:e8:36:e7:f7:61:2d:40:fd:4b:f2:37:dd:
6b:38:2d:46:66:d3:41:d8:bd:4a:21:ff:4e:d8:4b:
03:02:ff:c7:7c:eb:c2:b3:33:ed:78:46:b8:54:73:
49:0e:35:98:e2:e3:c3:b2:22:53:e4:a8:6c:64:b8:
84:ff:93:75:51:8d:4f:c1:93:af:24:db:9c:b9:2f:
c9:86:be:47:67:01:cb:40:01:54:f8:9b:53:d3:bd:
73:69:00:4b:52:41:4b:1a:c7:31:65:e4:87:8f:bf:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:65:34:90:C9:1A:6C:2E:38:2B:3E:AE:5D:8D:E2:BC:1D:24:F8:C0
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:5e:dc:0a:ce:cb:2d:4f:13:8f:68:b0:d3:2e:75:b2:78:
09:d3:57:ff:dd:5c:4e:77:81:6a:21:68:7e:42:42:32:8b:20:
bb:f7:15:25:ca:08:9e:11:05:01:12:11:57:16:b8:ff:f3:6c:
a7:af:60:40:57:bd:b4:59:bf:76:43:01:ff:38:2c:2d:0c:62:
4b:42:33:44:60:95:5c:82:05:04:76:72:bd:c6:17:d1:fc:69:
ef:75:4c:69:11:57:51:b2:66:46:80:6d:a5:9f:5c:a1:0e:7e:
de:3e:60:54:47:e2:b6:8c:88:aa:e1:de:f2:e4:26:7d:f7:dd:
89:07:01:a7:9b:46:d1:b2:d9:c7:c5:1f:29:59:d0:73:4d:b5:
ae:a6:4a:e6:a6:4e:f5:3c:9e:ae:ad:10:96:b3:f4:66:22:c9:
36:ab:07:4b:c8:57:62:df:9c:7b:08:a0:aa:24:fe:d3:55:c2:
7e:a5:cb:2b:56:10:4f:6e:b4:ef:13:13:4c:76:f5:b6:da:23:
5b:55:90:cb:69:2b:f0:e7:b6:52:9c:4c:3b:28:f9:79:91:77:
c4:8c:91:bf:61:3d:7a:8f:c9:f6:0b:47:28:93:e6:c1:ea:d2:
c6:0c:81:06:f2:ce:d2:da:8c:4c:77:f0:aa:80:44:c7:f5:fc:
11:65:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:16 2026 by rpki-client