
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier: zIdjTbwkEJ7dGorpquUDsVVw7e1mhhOhuzOgYgHThqo=
Subject key identifier: 92:34:9C:7D:8D:F6:40:3C:76:F8:89:8B:17:4D:8D:84:B7:37:CB:1A
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 019D2AA982D3F03F77E6D17211AF7A4D7907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number: 0CD7
Signing time: Thu 26 Mar 2026 15:00:45 +0000
Manifest this update: Thu 26 Mar 2026 15:00:45 +0000
Manifest next update: Fri 27 Mar 2026 15:00:45 +0000
Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: 4NWNrYB8J2LmWM/8bZ8tFVeRiqqJkbkV1aXrOy51N5o=)
2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:82:d3:f0:3f:77:e6:d1:72:11:af:7a:4d:79:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Mar 26 15:00:45 2026 GMT
Not After : Mar 27 15:00:45 2026 GMT
Subject: CN=92349c7d8df6403c76f8898b174d8d84b737cb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:68:41:f3:1e:76:0f:17:9b:01:ea:d4:28:
02:53:83:bf:87:63:6e:43:02:4e:40:8e:2c:b6:fa:
96:23:1d:cf:8a:b7:1b:9f:ad:70:af:ce:0c:8c:19:
9d:80:f1:ac:67:98:20:f4:17:97:98:fc:f9:09:cb:
c6:49:3a:d1:ef:0c:a0:d7:4c:fe:54:a6:f3:01:1e:
91:01:96:ab:8b:de:fd:fa:93:65:02:54:26:ed:51:
a2:a2:64:0b:95:30:17:b8:0c:9f:4f:2e:13:85:8b:
b0:87:d8:d7:c4:ac:32:fd:e9:84:eb:13:67:a4:38:
a2:f3:d2:ce:2e:8b:d3:7f:c7:78:e0:01:21:6f:e9:
e1:df:5b:30:e6:ed:ba:5c:8f:16:db:2a:ef:0e:47:
48:d3:9c:b8:09:48:ea:07:70:e6:c4:bb:39:b8:89:
20:67:f8:4b:fc:dc:b0:55:90:41:b7:c6:56:23:e8:
55:49:a3:ed:57:3e:75:c1:10:4a:3c:61:57:f8:2d:
94:cd:89:be:1f:c1:4a:96:32:e7:a0:20:6e:3b:79:
58:8a:86:cb:ab:74:28:c4:e2:dc:eb:7d:ab:be:2f:
1f:29:29:58:a2:e7:b2:22:0e:79:05:e9:7f:bf:19:
9f:64:b8:3f:7c:4d:d0:91:4a:e2:c5:28:71:88:d9:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:9C:7D:8D:F6:40:3C:76:F8:89:8B:17:4D:8D:84:B7:37:CB:1A
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:4f:fc:2e:22:be:d9:a7:60:fe:68:8b:19:ac:c4:d3:e6:
96:42:f1:3f:76:d8:25:da:28:64:e1:55:98:cb:11:7f:0e:ae:
47:f8:74:34:8c:0e:a4:e1:d3:0a:80:c0:f8:da:c7:1f:5f:ab:
9c:62:a5:ce:d9:61:21:dc:4f:bc:fb:73:00:73:a8:6a:bf:70:
e8:ad:19:a7:14:e3:3f:e5:b9:58:01:11:21:5f:22:ff:d5:ea:
09:17:f6:07:0e:95:9a:00:46:5c:a9:db:38:af:a8:6e:83:29:
7d:c2:b7:b8:0f:69:68:4d:8a:bb:af:3d:5f:1f:41:9a:a2:14:
82:65:9f:64:a6:16:f8:bf:85:c6:bd:5d:e5:59:34:fc:4d:4c:
fb:08:75:2e:31:c1:40:23:25:3d:83:87:29:17:fc:f2:62:31:
f2:63:68:82:ce:85:77:47:1c:7c:b5:d0:4a:56:fe:15:85:15:
c2:42:c9:da:04:8b:84:6d:03:27:5d:3a:2d:e7:45:e8:92:a1:
d1:ec:93:e0:a2:8e:47:cc:4c:9a:fd:92:eb:42:32:95:df:bc:
6d:1a:38:b1:64:76:e9:db:b6:56:e9:be:44:62:b2:fe:d4:78:
58:b1:4a:f9:41:25:ea:7f:b1:d9:31:58:84:53:b5:ec:35:97:
37:35:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:42 2026 by rpki-client