Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
File: BBdxOWPXl8qxnCqXKjdVarrjd10.mft (raw, json)
Hash identifier: nBKxjSUCqARsBTWFOD39VvkQMb7uvo+PUbb1/0GUY70=
Subject key identifier: 73:35:2F:1E:DA:C2:42:59:64:30:DA:4C:08:8C:8C:49:84:88:31:E9
Authority key identifier: 04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
Certificate issuer: /CN=0417713963d797cab19c2a972a37556abae3775d
Certificate serial: 019F9023577022D38A86ED53B84E470190A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
Manifest number: 01A7
Signing time: Thu 23 Jul 2026 18:01:02 +0000
Manifest this update: Thu 23 Jul 2026 18:01:02 +0000
Manifest next update: Fri 24 Jul 2026 18:01:02 +0000
Files and hashes: 1: 51pmhH6W4AK3WWsnVVnIrOwxdRQ.roa (hash: gyQzGLPGiPYb0c+BL3lvQWYvsv/NVK56hFx0AgBgsYY=)
2: BBdxOWPXl8qxnCqXKjdVarrjd10.crl (hash: 1x0+5taIVhUUioRJL0VJ3FkuUiKViPsq+iPTUiqWhKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:57:70:22:d3:8a:86:ed:53:b8:4e:47:01:90:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0417713963d797cab19c2a972a37556abae3775d
Validity
Not Before: Jul 23 18:01:02 2026 GMT
Not After : Jul 24 18:01:02 2026 GMT
Subject: CN=73352f1edac242596430da4c088c8c49848831e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:1f:45:7a:c0:c2:6e:75:ef:67:7c:fb:a6:
ce:f6:6a:77:ee:85:fd:b0:a6:a9:eb:b6:b7:b2:72:
74:8a:c2:88:40:4c:b9:14:f3:e7:64:bb:c7:81:60:
2e:e3:df:82:29:81:b3:22:66:6d:8b:8a:9a:f4:f2:
ad:6b:1a:ec:97:d8:d2:1e:7e:2e:3a:15:63:c9:dd:
7e:bf:73:63:4c:2f:a7:62:5b:c7:b9:ea:54:1f:94:
af:eb:cf:23:d5:bb:14:f9:2e:de:0e:22:8c:4b:9c:
4b:04:76:e7:bc:3a:12:90:e2:18:a6:fd:3a:e9:f5:
02:62:5c:56:4c:66:6d:59:d7:3c:79:f0:30:e6:ba:
08:08:cb:b8:f9:d7:c6:a9:46:aa:30:68:6b:1f:c2:
5e:88:36:4e:7d:e3:b2:37:f2:4a:ec:d3:03:72:31:
99:c3:03:b0:a0:a5:7d:92:fa:73:2d:da:45:56:e1:
cd:60:b3:45:72:af:2f:0b:84:8f:72:3e:89:ca:bc:
e3:63:ea:0c:42:5d:33:36:98:b5:20:a2:44:94:dd:
10:e7:f5:fb:43:e6:64:31:83:29:9f:04:c0:92:4f:
2a:b6:7c:93:ef:33:e6:fa:13:92:7a:cd:84:7c:9c:
02:45:19:23:63:df:7e:e3:e3:aa:4a:ba:bf:f4:d8:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:2F:1E:DA:C2:42:59:64:30:DA:4C:08:8C:8C:49:84:88:31:E9
X509v3 Authority Key Identifier:
keyid:04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:23:b3:71:4b:fc:3d:dc:0b:81:10:10:62:71:98:3c:8a:87:
59:6b:73:cb:bf:4d:27:7b:84:6a:fa:73:62:38:e4:3b:7b:b3:
a9:f1:84:2c:d9:31:ef:e6:2b:1d:cf:a5:75:49:3a:83:6a:05:
3b:f6:a5:ce:8f:c5:36:bd:82:3d:fd:b2:36:3e:a6:92:6a:14:
22:0c:c4:47:21:dc:75:28:2e:0c:76:61:13:70:f8:f1:39:9e:
c7:f7:de:28:e3:28:10:3f:a5:a3:27:0e:1c:48:bb:ae:7f:2e:
9d:dc:5b:d7:76:c6:1b:3e:97:83:ef:56:8a:31:e6:aa:6e:9e:
5d:c5:9d:f0:bf:96:29:37:f5:54:91:b9:7c:39:44:be:a4:05:
16:80:a6:74:8a:1a:8c:d7:ce:55:70:55:36:3e:62:fd:12:d8:
60:66:48:3d:fc:33:13:bb:2d:bc:4e:97:7d:52:dd:ef:88:ad:
52:b8:f8:b6:6a:1e:50:05:cc:5f:b5:43:58:12:79:83:5b:e4:
d6:e1:df:38:d1:4b:d8:12:90:57:28:f3:63:3e:e1:f4:d1:66:
fe:24:3e:1a:cf:49:e5:5c:00:6b:df:76:41:e2:c7:c0:2d:a4:
31:8a:c5:6c:4d:0d:8a:1a:0e:7c:f7:4a:4b:d1:68:36:68:dc:
e5:6f:15:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:12 2026 by rpki-client