Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
File: BpSDF1Vo_2MI2iXOaQQvSaUebss.mft (raw, json)
Hash identifier: x1xZGCRzcRQ4lpyhPId0nrs3JCp7ARbbRW647PGVVEs=
Subject key identifier: 4B:BF:A4:42:5A:9F:56:85:32:B8:52:27:DA:3C:B8:0B:71:1E:12:D0
Authority key identifier: 06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
Certificate issuer: /CN=069483175568ff6308da25ce69042f49a51e6ecb
Certificate serial: 01A0CEC85D9593BBDE57C03C3F5D3BEDF758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
Manifest number: 017C
Signing time: Wed 23 Sep 2026 15:00:32 +0000
Manifest this update: Wed 23 Sep 2026 15:00:32 +0000
Manifest next update: Thu 24 Sep 2026 15:00:32 +0000
Files and hashes: 1: BpSDF1Vo_2MI2iXOaQQvSaUebss.crl (hash: j88ySj/PU5cu/XrJ6/NC1/HfFmVN+d1yOCsLJJVsyYs=)
2: Fk_c5L0wQwxkpXo3UxRRNG9l1-A.roa (hash: wN5o+cwte1lA5WSPFaOEn3vX2sseejPcuHFmyVi24W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:5d:95:93:bb:de:57:c0:3c:3f:5d:3b:ed:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069483175568ff6308da25ce69042f49a51e6ecb
Validity
Not Before: Sep 23 15:00:32 2026 GMT
Not After : Sep 24 15:00:32 2026 GMT
Subject: CN=4bbfa4425a9f568532b85227da3cb80b711e12d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:0d:d2:b2:80:56:8b:df:0e:3f:14:8a:42:
70:a0:92:1f:3b:ec:ab:46:d2:73:86:a4:4a:cd:a3:
18:7b:94:68:b9:aa:a3:fd:d0:3b:8a:eb:3c:a1:51:
42:9a:26:da:01:3b:dd:ce:1a:7d:1e:9c:97:02:48:
c5:db:f3:85:36:51:27:7e:e5:a0:47:0f:de:4c:68:
92:d0:43:b3:8a:76:39:aa:3a:7d:9a:81:65:8e:1b:
59:2a:20:b8:d0:98:c3:a5:83:c2:94:f1:fe:0d:5c:
d3:0e:bc:7f:ac:fe:14:f3:f4:d1:69:e8:20:7e:8e:
73:30:01:d6:ba:f9:d8:8d:5a:60:44:88:1b:13:e5:
6f:72:37:17:fa:e6:a2:93:16:ec:a4:8a:7c:36:32:
29:10:0d:fa:f3:36:26:4b:6c:9f:f1:f5:6c:00:94:
f8:a9:3e:c0:6f:3b:d3:d3:98:e0:83:9f:e2:fd:b7:
d5:7a:d9:13:6c:0c:b3:65:2f:aa:28:fc:e4:8b:10:
78:6b:ce:da:de:51:f9:4e:f1:aa:47:66:bd:86:04:
83:8e:93:60:bf:7c:44:2b:be:30:89:ca:4b:30:68:
91:a8:82:94:72:bd:ec:fa:4f:89:d4:92:97:e4:f3:
32:8b:bf:07:57:73:1b:36:36:25:b4:9a:cf:4c:cb:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:A4:42:5A:9F:56:85:32:B8:52:27:DA:3C:B8:0B:71:1E:12:D0
X509v3 Authority Key Identifier:
keyid:06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e0:3a:c5:2d:b1:6c:c0:2c:c4:04:87:51:fd:8e:6b:b9:fb:
29:97:0c:9f:5c:81:59:99:02:9c:34:dc:d6:1f:d8:36:66:a0:
88:b7:45:31:6f:87:49:fe:2e:b0:94:df:95:30:2b:30:17:9c:
2c:8a:27:b5:5d:41:ae:5c:a3:50:13:35:b4:6a:d3:fb:f2:1f:
f3:11:ec:d1:14:36:77:46:60:5b:d3:53:f3:01:d9:4b:89:3f:
2c:ae:2c:54:17:b3:aa:cc:06:3f:ee:18:fa:86:9b:94:eb:e3:
0c:c7:65:55:01:6b:8b:c8:64:e6:aa:3f:f6:80:9e:9e:31:0f:
b0:5f:31:3e:f1:e2:28:3f:61:42:6a:74:56:19:73:2c:ab:76:
e7:0c:82:0b:94:be:71:d2:10:13:f1:1f:a4:0f:60:1f:31:aa:
06:c2:37:9d:42:a3:d2:9f:51:c8:65:40:f7:f4:7d:99:49:5e:
6a:05:05:f4:78:87:80:d5:88:84:89:6a:b1:d9:76:88:16:a6:
d9:41:32:e2:cc:ea:8c:0c:55:0e:85:25:dd:d8:8a:55:bf:50:
b3:38:1a:45:41:aa:3e:75:12:b7:fa:ba:fd:c8:31:0d:f7:be:
c6:1d:3c:e3:55:b0:8d:59:54:ae:d0:b3:40:26:57:ae:e3:b5:
aa:b0:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:55:52 2026 by rpki-client