Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
File: BBdxOWPXl8qxnCqXKjdVarrjd10.mft (raw, json)
Hash identifier: FFHZHrjTsvyxX4u//ONYvmgCDfOFlY6BjQi+dX0Uj9g=
Subject key identifier: AD:4B:6A:D2:CC:88:56:2E:FA:FF:D4:EF:88:D9:32:56:4E:24:40:FC
Authority key identifier: 04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
Certificate issuer: /CN=0417713963d797cab19c2a972a37556abae3775d
Certificate serial: 01A0D8725F9D0E6A8A94874CEB38247E4558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
Manifest number: 0251
Signing time: Fri 25 Sep 2026 12:02:49 +0000
Manifest this update: Fri 25 Sep 2026 12:02:49 +0000
Manifest next update: Sat 26 Sep 2026 12:02:49 +0000
Files and hashes: 1: 51pmhH6W4AK3WWsnVVnIrOwxdRQ.roa (hash: gyQzGLPGiPYb0c+BL3lvQWYvsv/NVK56hFx0AgBgsYY=)
2: BBdxOWPXl8qxnCqXKjdVarrjd10.crl (hash: X1JBGDOrwHAJVH1ErfQAYQugeNXiKVomdXk1OfTKsbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:5f:9d:0e:6a:8a:94:87:4c:eb:38:24:7e:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0417713963d797cab19c2a972a37556abae3775d
Validity
Not Before: Sep 25 12:02:49 2026 GMT
Not After : Sep 26 12:02:49 2026 GMT
Subject: CN=ad4b6ad2cc88562efaffd4ef88d932564e2440fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4d:0a:4a:59:1f:f9:bf:ee:67:9d:d1:9e:35:
44:52:2c:1e:61:ea:58:b3:dd:e0:c3:3e:48:50:eb:
a0:d4:36:3b:c9:70:b2:cd:5a:a0:d4:36:18:e5:28:
7d:7b:73:17:41:da:a4:9f:0c:b7:ac:3f:96:ed:2d:
bc:61:ee:0c:60:70:10:38:e4:81:9c:18:bb:5a:f7:
12:35:d7:24:6d:6a:2a:22:1f:d7:4f:0e:b7:aa:36:
60:82:78:f5:b2:97:4c:40:b0:6e:40:5a:85:8e:eb:
8f:ab:60:21:c8:6e:e1:0c:26:f0:74:14:93:7c:4b:
8c:89:51:f8:81:f2:21:5a:fb:4f:e5:da:0f:b2:e7:
9c:ce:db:c9:88:ae:32:3b:4b:f4:62:83:86:d7:cc:
1b:be:98:d3:6f:b2:7c:a1:6e:a0:17:4f:f1:85:3c:
0e:c1:9b:86:33:1c:f7:f9:56:66:12:2b:86:aa:e9:
b5:60:23:f3:61:71:1a:be:65:b2:91:c2:04:c0:6e:
1f:ea:50:a7:de:52:2c:27:6c:39:c8:fa:69:ff:55:
f5:75:f8:78:b4:7f:88:3f:f0:e9:b3:c5:c2:41:e5:
7f:bc:fb:b5:94:75:c3:ea:7d:bb:fa:06:99:67:80:
ae:6f:d0:c5:bb:5e:e4:d4:12:46:41:54:75:5a:3a:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4B:6A:D2:CC:88:56:2E:FA:FF:D4:EF:88:D9:32:56:4E:24:40:FC
X509v3 Authority Key Identifier:
keyid:04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f3:90:ef:76:f8:69:3b:fb:bb:7d:6d:93:27:b1:a0:5b:b1:
41:61:68:70:1d:49:ba:dc:a8:a5:bb:96:c6:03:f2:e1:c6:43:
51:be:49:41:e2:43:d6:6a:63:c8:44:26:0c:16:8a:4e:7e:de:
ed:af:5e:db:d9:b0:de:01:95:75:d7:79:cb:44:f0:92:4a:0c:
25:60:1e:88:8e:a9:b4:44:61:ce:31:c7:89:c1:6f:11:a9:70:
1e:b8:c8:e5:46:8e:1e:58:6c:07:47:d2:28:92:2b:86:72:a0:
1b:f6:a8:69:eb:d8:0c:cc:7d:68:4c:32:5d:5e:19:ea:e5:52:
e5:ce:0b:0f:e8:dd:5f:70:95:1e:a4:ce:fe:a1:8d:52:79:a2:
3a:14:e5:e4:4a:e5:89:b9:8a:a3:08:e8:57:f4:91:f3:93:2e:
cd:47:2b:fa:04:ac:88:c0:5d:a6:73:79:3a:4e:f6:5e:55:ca:
d6:89:ed:82:1f:5b:5c:aa:1c:a1:5a:83:1c:53:a9:f7:3c:fa:
0b:15:22:f9:d6:5b:da:4d:41:ab:69:8a:87:e4:2f:2c:f9:74:
f7:1c:8b:b7:63:13:93:0c:89:1f:39:f9:b3:f3:04:cc:aa:95:
0b:61:8a:92:93:8b:2e:a4:1a:cf:30:82:67:35:53:1b:34:8c:
56:18:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:57:57 2026 by rpki-client