Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
File: BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json)
Hash identifier: CbuXaL/e7CDOLjGnAgImd5tDUlUKxIXYIqc2zlOqeyI=
Subject key identifier: 10:42:A4:9F:CB:9D:26:E3:C4:5A:FA:E4:50:6A:D2:78:AE:45:2D:0B
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 019D27E0532FA78DEB72D6AEE1E560FD9DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
Manifest number: 0EF3
Signing time: Thu 26 Mar 2026 02:01:45 +0000
Manifest this update: Thu 26 Mar 2026 02:01:45 +0000
Manifest next update: Fri 27 Mar 2026 02:01:45 +0000
Files and hashes: 1: AB8umA8bjPgJltKkIRne6IfYP0Y.roa (hash: bEK6Pc0xzgpCyMevab0GP8GntCpJtnUMRsRnsemYpvg=)
2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: 7jhqLhd2kCyzAwcXzbODMGXSqqK3yAQbgW02E/oh9Sg=)
3: Ef2mz8xqhrKj3SB5AKH3hlrhTzU.roa (hash: 3/Mu4QjcxxnSUOoxL+4VfjaGTMXn9INAMEpjV6ScrKI=)
4: sNWqTxun9B8T5a1nVHtvNEr4TKw.roa (hash: z/D95gZg33TdNSMDHOhYm62OJIqU2YgKuCi7L08cx3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:53:2f:a7:8d:eb:72:d6:ae:e1:e5:60:fd:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Mar 26 02:01:45 2026 GMT
Not After : Mar 27 02:01:45 2026 GMT
Subject: CN=1042a49fcb9d26e3c45afae4506ad278ae452d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:c9:e4:0b:39:cf:bb:e1:a4:64:c9:c9:1c:
00:b7:89:53:c7:8d:da:a0:41:23:8a:82:30:85:b8:
ec:bc:83:ef:3c:43:96:07:f1:42:34:32:c8:1f:14:
4b:19:22:de:cf:d1:94:83:23:a1:8a:b3:16:72:8c:
4a:64:0c:bb:2d:a5:19:38:49:24:2e:24:10:54:73:
18:9e:a8:50:5e:4a:5a:72:13:a4:01:61:86:33:61:
a8:e2:51:b3:95:2a:93:bb:73:a7:b7:38:75:8f:03:
c4:86:fa:cf:cd:7f:9a:05:5a:2b:f9:30:cb:55:89:
25:ed:8f:61:4f:ca:61:61:95:aa:68:96:10:5f:c4:
ec:5f:ed:ef:a5:5f:df:01:ad:b5:ec:69:d7:68:3c:
5f:ec:bd:9f:20:13:70:1f:80:8b:09:60:d4:9a:76:
0f:3e:15:dd:fa:53:06:46:0e:81:20:df:bd:40:51:
30:de:88:2d:65:2c:61:37:83:10:ad:08:8e:bf:ae:
ff:3e:cb:06:2a:0b:c3:9f:1e:f8:2a:8f:ad:ee:42:
aa:e3:a7:c3:d9:d8:a4:d3:d3:ab:30:6f:09:ad:d9:
19:9d:6d:38:9d:8b:fe:73:d6:3b:df:6f:3b:fe:bc:
66:82:01:d9:d3:f5:5b:98:40:d7:19:11:0b:54:f1:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:A4:9F:CB:9D:26:E3:C4:5A:FA:E4:50:6A:D2:78:AE:45:2D:0B
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9c:b6:40:0c:fc:21:45:1f:5f:08:e3:e1:ce:61:8a:01:53:
99:15:dc:d8:d3:13:d0:0f:fe:e5:d9:bb:85:2d:da:ee:c0:75:
11:55:20:60:a7:91:b6:87:c7:81:2d:b0:33:5c:36:13:7b:c5:
34:6b:80:c9:6c:9d:a1:7a:e6:3c:a1:c5:a3:db:4d:16:4b:65:
e0:30:0f:b2:5c:cb:0d:13:7c:1a:a5:d9:ff:f0:b9:59:89:e5:
0a:2b:25:18:cc:b3:12:be:dd:41:51:3e:d6:33:3e:c0:68:ff:
a9:74:1c:79:e4:0b:e7:71:a6:41:35:8f:8c:fb:ce:f2:cb:3f:
f6:d9:b1:b6:88:05:19:bf:52:ce:cc:5f:3c:37:28:09:6a:b7:
a8:85:88:dd:c7:e6:a4:82:83:08:db:ec:58:fc:5e:3d:c3:22:
3c:2b:e6:e0:75:68:8b:5c:11:a6:ff:9a:ff:b1:70:df:ed:0f:
b5:23:cd:5f:5f:4c:d1:16:00:49:de:36:f1:3d:4d:34:ac:94:
18:9f:b9:7b:c7:ca:53:e9:2a:71:b7:3a:32:8b:39:ae:56:95:
c2:28:77:d2:e7:63:da:48:cd:14:52:09:48:1e:e3:ee:ea:35:
e6:a2:e1:4e:77:b5:99:27:c7:60:8a:3c:3f:28:7d:56:6e:56:
08:10:32:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4FMvp43rctau4eVg/Z2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZjkyZTY4MzFkZjFmMmViY2Q1ZDVlYjBlNTk5OWM1YjA0
NzVjNTEwHhcNMjYwMzI2MDIwMTQ1WhcNMjYwMzI3MDIwMTQ1WjAzMTEwLwYDVQQD
EygxMDQyYTQ5ZmNiOWQyNmUzYzQ1YWZhZTQ1MDZhZDI3OGFlNDUyZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRzJ5As5z7vhpGTJyRwAt4lTx43a
oEEjioIwhbjsvIPvPEOWB/FCNDLIHxRLGSLez9GUgyOhirMWcoxKZAy7LaUZOEkk
LiQQVHMYnqhQXkpachOkAWGGM2Go4lGzlSqTu3Ontzh1jwPEhvrPzX+aBVor+TDL
VYkl7Y9hT8phYZWqaJYQX8TsX+3vpV/fAa217GnXaDxf7L2fIBNwH4CLCWDUmnYP
PhXd+lMGRg6BIN+9QFEw3ogtZSxhN4MQrQiOv67/PssGKgvDnx74Ko+t7kKq46fD
2dik09OrMG8JrdkZnW04nYv+c9Y73287/rxmggHZ0/VbmEDXGRELVPHJ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBCpJ/LnSbjxFr65FBq0niuRS0LMB8GA1UdIwQY
MBaAFAb5Lmgx3x8uvNXV6w5ZmcWwR1xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEt
NTAyYjc3Y2U5MmY4LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEtNTAyYjc3Y2U5MmY4
LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZy2QAz8
IUUfXwjj4c5higFTmRXc2NMT0A/+5dm7hS3a7sB1EVUgYKeRtofHgS2wM1w2E3vF
NGuAyWydoXrmPKHFo9tNFktl4DAPslzLDRN8GqXZ//C5WYnlCislGMyzEr7dQVE+
1jM+wGj/qXQceeQL53GmQTWPjPvO8ss/9tmxtogFGb9SzsxfPDcoCWq3qIWI3cfm
pIKDCNvsWPxePcMiPCvm4HVoi1wRpv+a/7Fw3+0PtSPNX19M0RYASd428T1NNKyU
GJ+5e8fKU+kqcbc6Mos5rlaVwih30udj2kjNFFIJSB7j7uo15qLhTne1mSfHYIo8
Pyh9Vm5WCBAygQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:17 2026 by rpki-client