Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: NNHfgW1MTi8XeRxA/EnyNsCziuK5RH2YXj4p19Pl9xA=
Subject key identifier: 24:35:2A:83:28:9B:97:87:8C:06:F7:28:D7:BA:D0:6B:E6:56:74:FB
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 01A0CD11697054360BDB59ECE903D0E02075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 1809
Signing time: Wed 23 Sep 2026 07:01:05 +0000
Manifest this update: Wed 23 Sep 2026 07:01:05 +0000
Manifest next update: Thu 24 Sep 2026 07:01:05 +0000
Files and hashes: 1: 1dYhzWKh39b-0GLPb-ct32MCxhk.roa (hash: HvZcxTszijTpa0P8i88U2ahY8WNXyPEFJPNOW2Ie54g=)
2: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: ubYnZOc519oNGfM9m+IUb/Q+UhX0fq6OKWhMvojhUYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:69:70:54:36:0b:db:59:ec:e9:03:d0:e0:20:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Sep 23 07:01:05 2026 GMT
Not After : Sep 24 07:01:05 2026 GMT
Subject: CN=24352a83289b97878c06f728d7bad06be65674fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:81:b3:68:b3:1b:6d:8d:f7:84:9b:9c:db:
6c:6b:92:bf:ec:8f:a6:e9:0c:52:da:37:b7:ae:e0:
4e:7f:83:55:60:87:f3:3e:24:8b:57:e5:57:52:63:
f9:83:e2:c0:72:b8:9c:ce:b2:72:ea:51:52:be:98:
79:c0:34:51:a6:47:42:bf:85:cf:7f:b4:cf:11:5e:
df:e7:c3:c2:cb:31:0e:bf:51:f9:ac:79:2e:ca:02:
b2:50:10:b3:85:a6:a9:03:2a:b5:af:48:67:af:81:
d9:ef:ed:78:f2:e3:2b:b4:f5:ed:6d:2a:e7:4a:de:
12:71:95:c4:58:09:95:8f:28:77:3f:2c:a8:eb:70:
dd:40:76:c0:3f:74:e5:c2:32:78:c6:2d:9a:b0:8c:
99:f8:a9:58:4f:9e:56:0f:3b:1b:76:95:0c:a5:73:
33:50:e3:d0:a8:4e:85:10:a3:27:63:f8:2f:ab:2a:
7d:c9:e8:a7:51:63:5b:49:7a:03:ed:be:b4:11:4a:
6d:75:ce:55:61:ab:f5:0f:37:99:3c:a8:8b:b1:8b:
bd:09:4e:a4:8b:51:a0:19:23:f9:1e:5c:d2:9c:9c:
38:83:42:5a:42:45:b8:f5:28:8f:30:67:14:dd:32:
f9:5f:ea:c7:7f:de:92:f0:22:d7:fd:4b:72:c4:4b:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:2A:83:28:9B:97:87:8C:06:F7:28:D7:BA:D0:6B:E6:56:74:FB
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:2f:20:5a:4e:6d:ab:7e:b4:fc:88:ca:06:29:77:16:a0:
b3:4e:bf:59:da:f2:df:e0:31:87:1d:93:10:f5:b1:51:1d:db:
04:f3:a8:4f:fd:d1:72:d3:a7:11:41:7a:a9:4d:d1:b5:b7:40:
64:84:37:08:ca:27:74:91:2a:61:f7:b9:3d:1e:b3:ec:f2:44:
a8:0b:6a:fd:d9:b4:a7:15:89:97:15:9c:7c:4a:31:e0:72:97:
bf:11:d5:87:39:8f:a0:ff:31:30:26:38:0a:40:0e:89:3d:4f:
77:a0:e7:99:0d:33:ff:04:41:e1:23:9d:86:c8:dc:55:da:40:
38:69:2b:03:1b:d9:f4:bb:40:e9:d9:1e:c1:8a:37:bf:04:76:
a2:e3:38:f1:ee:b1:1e:52:3a:60:fd:c9:99:c7:36:e2:86:aa:
74:d1:37:40:72:19:db:72:69:75:be:d6:40:f8:35:64:2d:28:
f4:4a:ad:ec:3a:64:a7:ab:87:13:13:11:ee:97:f1:5d:78:ab:
da:3b:ff:82:32:52:7c:1d:02:0e:3a:14:cc:8d:8d:fc:43:5e:
05:b5:d1:21:f0:4b:e6:c3:18:7a:e3:cd:d6:57:ac:6c:0a:4a:
cc:40:a3:5f:b9:3c:3b:40:f3:3f:11:90:c5:14:41:97:70:79:
7c:c2:e7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:43 2026 by rpki-client