Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: cQZr0eG2+/IJJaTuAnSHrh0sLIctLrX3UF5nUWZeSfo=
Subject key identifier: 19:74:BF:A4:4F:0E:20:E6:D9:26:9D:40:E6:4E:1E:98:26:88:0A:1B
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 019D28F226027FA3BC8CF013844535D26869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:00:51 +0000
Manifest this update: Thu 26 Mar 2026 07:00:51 +0000
Manifest next update: Fri 27 Mar 2026 07:00:51 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: veja3w24c6ec1xLjxiHPKO6do68lkpdob1THdK4dZmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:26:02:7f:a3:bc:8c:f0:13:84:45:35:d2:68:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Mar 26 07:00:51 2026 GMT
Not After : Mar 27 07:00:51 2026 GMT
Subject: CN=1974bfa44f0e20e6d9269d40e64e1e9826880a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:70:f5:92:45:10:25:b9:10:63:fe:f8:07:
5e:12:25:a7:0a:c1:b7:73:21:36:7e:80:02:c3:a6:
64:07:bb:53:a3:8f:63:34:d8:8d:a5:0d:bf:eb:83:
41:4c:4d:7a:06:8a:bb:fe:fa:1f:b6:27:f1:5a:60:
9f:26:00:c7:34:8d:7f:6a:4e:08:ac:93:4f:c1:75:
28:12:55:24:24:44:58:ea:b7:d5:64:ee:7d:ba:3f:
cb:4f:6b:bc:4a:ec:69:c9:0f:4f:07:76:e2:e0:01:
9d:ce:b0:62:bb:eb:36:2a:0b:87:57:52:8d:d2:f0:
03:35:8d:e9:45:b6:99:f6:45:bd:29:fb:62:da:04:
45:2c:1b:d6:32:ee:68:e6:0d:85:65:03:e4:11:08:
e6:dc:62:29:56:3d:ab:5a:f1:b0:db:7e:15:81:46:
21:70:e1:70:13:09:be:56:ca:1c:75:91:d8:01:03:
1c:d3:f3:32:57:cb:45:b3:d2:78:9c:28:61:b4:eb:
e3:c3:9f:6d:2f:d4:53:f7:25:00:b3:ac:11:e4:51:
e5:4e:f2:2f:6b:39:82:fd:a7:15:76:12:01:eb:41:
78:e7:2f:d9:3c:38:9f:22:7f:04:2d:a6:cb:ac:c2:
a2:2e:16:e4:af:0d:8d:fb:01:74:2e:f0:7c:4f:fb:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:BF:A4:4F:0E:20:E6:D9:26:9D:40:E6:4E:1E:98:26:88:0A:1B
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:53:cb:d5:77:72:bb:b5:b0:78:2e:95:37:f4:7f:47:f5:60:
a8:45:9e:ff:9c:ac:b6:2f:04:b0:37:ed:52:6d:d2:39:31:54:
dd:96:11:2e:e3:68:a0:85:88:bc:f9:1d:09:35:84:58:85:27:
c6:1a:59:9e:8b:16:ba:d2:c7:2d:04:c3:3f:da:29:7b:9d:db:
b1:c7:47:28:f5:78:cc:fe:42:8f:6b:f9:ea:16:2f:ce:53:2f:
21:7b:35:6f:59:23:ca:8a:37:d1:42:68:e2:f2:25:2d:e0:76:
7a:08:8c:a7:c5:a3:1d:db:49:fe:c3:52:3a:70:e7:a9:e6:9a:
55:b4:d1:9b:52:ba:8f:9a:7f:8d:43:54:10:61:e6:51:7e:79:
b6:a3:1f:85:9b:57:2b:73:be:46:e3:a6:f2:9d:f6:a1:e6:c5:
fe:7d:d0:e8:07:c1:f2:66:66:f9:68:db:75:21:d8:d2:8d:fa:
ee:f9:51:36:e5:ea:0e:d7:36:24:b3:14:ba:f6:80:19:96:33:
0c:09:4c:51:11:15:f1:ba:39:1c:ea:e8:84:c8:42:03:cc:64:
77:15:13:9f:ac:cf:ee:44:da:2c:16:91:38:db:c6:44:6e:44:
da:70:44:de:c9:5b:ab:d6:f9:96:aa:d0:83:d4:f1:2f:a0:51:
e6:eb:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:30 2026 by rpki-client