Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: DkfzCi6K87S/fDjsoeT+IledAP0nCj4rhlepX/55F9I=
Subject key identifier: A3:DF:0A:17:CD:8A:B8:62:A0:A0:F7:8F:5A:9F:B7:CC:BA:DF:51:98
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 01A0D727AC9D2132502DCB564A13C3338D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 18A8
Signing time: Fri 25 Sep 2026 06:01:36 +0000
Manifest this update: Fri 25 Sep 2026 06:01:36 +0000
Manifest next update: Sat 26 Sep 2026 06:01:36 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: ZfFZzlLofHi7xcifr76/nWHu627NX7ZGcEN1mbUGL54=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:ac:9d:21:32:50:2d:cb:56:4a:13:c3:33:8d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Sep 25 06:01:36 2026 GMT
Not After : Sep 26 06:01:36 2026 GMT
Subject: CN=a3df0a17cd8ab862a0a0f78f5a9fb7ccbadf5198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:f3:d6:44:f8:7d:21:05:cb:48:1b:5f:7a:
33:4b:12:90:89:72:6a:31:c0:df:30:07:22:23:ef:
71:4e:66:26:65:1e:ee:a8:9c:21:3d:d7:ea:90:19:
a7:cd:ff:42:52:c8:da:fb:7d:74:dd:66:3b:3f:bd:
78:3b:a3:e3:2e:d0:3e:57:94:fe:c9:b6:8e:8f:ee:
1c:d4:be:58:0e:ef:59:5a:ba:6e:6f:3f:b2:5c:10:
f8:e1:9e:01:72:cb:0f:d0:03:e9:88:ca:05:1c:13:
85:66:56:80:ba:e1:fe:13:4a:6a:e4:19:86:8d:1a:
61:73:26:5a:0c:13:73:fe:5e:1b:77:cd:a2:8e:c8:
d4:6f:96:d6:37:a9:46:f5:53:c5:fb:a6:fd:1d:d3:
01:ec:33:b6:dc:60:ab:82:55:a6:0f:16:67:be:65:
c2:62:a8:a0:30:c0:f0:d5:00:85:5e:c2:8f:73:eb:
03:32:fe:4f:f1:aa:77:50:bd:49:04:c7:30:bb:df:
72:93:93:0c:71:bf:18:14:51:f7:32:fc:fb:d3:a3:
40:d0:d8:ec:2c:c0:15:ed:9b:02:26:be:e1:ee:92:
57:df:72:f7:b6:e8:02:0a:47:6d:ab:50:1e:13:6a:
f2:6d:47:48:4f:69:e0:c3:0c:f4:35:35:09:4f:18:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:0A:17:CD:8A:B8:62:A0:A0:F7:8F:5A:9F:B7:CC:BA:DF:51:98
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f4:d1:3a:f0:24:10:05:fd:05:98:98:81:9a:a8:00:72:50:
ca:85:00:c3:a9:72:2e:39:89:75:27:d8:9a:c9:d1:29:bb:68:
3f:1b:7d:3b:2c:08:5a:ec:b0:78:13:a3:f0:ab:71:00:ac:6c:
86:dc:c1:ef:79:7d:cc:af:2b:c6:ac:4c:26:28:ae:f9:16:a2:
c5:5d:af:62:5b:a5:c3:d7:56:aa:e7:9f:0a:c1:eb:03:3f:71:
42:39:3b:d7:fc:64:84:01:55:a9:8e:7f:84:4d:06:c9:c4:41:
43:58:41:e4:15:11:57:20:fb:98:e8:f1:a5:eb:b0:c9:ad:d4:
4e:b5:0b:26:84:4a:79:e1:6f:40:84:75:cd:88:93:fe:da:0f:
16:ac:31:79:68:87:da:d9:7d:56:ca:9b:72:9f:7c:8a:65:a0:
9b:6f:cc:cc:40:1c:e3:c6:07:e6:d1:77:6f:40:d8:86:64:57:
ab:35:bc:18:e7:10:d0:5c:af:b0:11:87:41:1d:c1:5d:70:34:
fc:ed:0f:18:c2:f2:e9:fc:eb:2a:ed:41:3f:57:15:ae:ea:2c:
47:c4:84:a7:b7:e9:54:e6:4f:a5:b1:e3:3c:29:60:7b:d6:4d:
af:5e:98:62:af:e5:a2:64:39:db:0d:be:be:a8:50:f7:41:3b:
04:e3:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:42:02 2026 by rpki-client