Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: u9naXQEPm0GBQWu/ABTExZDfswTHAB75PHzKUl6zV3Q=
Subject key identifier: 85:D2:85:D3:39:CB:27:49:8E:56:61:D1:99:9F:FB:23:34:50:56:1A
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 019D265F079BA4870EC4BF6E8E69411016F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:55 +0000
Manifest this update: Wed 25 Mar 2026 19:00:55 +0000
Manifest next update: Thu 26 Mar 2026 19:00:55 +0000
Files and hashes: 1: 5u4yfVKLM7CuktVTwTBtBI5l6mE.roa (hash: uO9x72nmQmlknEm+PYx41lDnMkhqVv8VEIukGO6B+TE=)
2: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: jJ9dzV4ryYAZGIYarKGZuZEGV/OEEeSauMhk7si5BEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:07:9b:a4:87:0e:c4:bf:6e:8e:69:41:10:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Mar 25 19:00:55 2026 GMT
Not After : Mar 26 19:00:55 2026 GMT
Subject: CN=85d285d339cb27498e5661d1999ffb233450561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:ad:d7:c0:04:14:2b:d7:42:a0:24:14:b9:
35:c6:e5:6b:12:03:0b:70:d2:2d:3e:b2:05:8d:71:
28:0e:fb:0f:2f:fd:c1:44:78:6c:f9:e5:27:93:c3:
4b:b8:fc:49:aa:9f:a3:e4:a5:ad:81:b0:8d:df:a5:
e3:f5:8f:14:a2:9e:a5:87:dd:a8:62:32:c2:e9:63:
e1:18:fc:75:79:a0:f5:89:f2:2d:58:88:fb:b3:bf:
06:56:f2:c1:a0:b9:12:f1:1d:38:30:0c:64:5c:4a:
fe:7f:5c:78:df:85:1a:ed:e8:41:b9:65:01:31:54:
25:86:8a:31:bd:40:0d:0f:93:3c:d5:62:94:cb:5b:
7a:8a:07:6e:90:74:f2:8e:a1:a3:21:89:45:9b:dd:
7c:9f:e1:5a:58:ab:f4:a6:34:59:7b:65:3a:3a:77:
1d:ed:c4:35:05:65:cf:54:55:a5:07:9c:46:de:9f:
76:ef:c1:9d:7b:a1:76:1e:53:0f:d8:d8:76:1c:b9:
8a:55:a2:d5:1e:0d:c9:12:b8:77:d1:bc:78:1c:00:
d2:89:ff:04:07:6b:fd:e2:e6:e8:c4:0b:e1:5d:4e:
aa:21:d0:53:88:d6:bd:01:d1:ab:a8:6e:25:3f:eb:
e3:c8:ac:27:02:ac:5e:ae:2b:fa:f3:3f:65:1e:2c:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:85:D3:39:CB:27:49:8E:56:61:D1:99:9F:FB:23:34:50:56:1A
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:71:9b:f9:80:40:c1:89:db:09:a5:c6:f8:aa:9d:03:95:
21:12:c5:ad:a0:85:8f:33:43:42:5d:ad:8e:a4:54:64:69:3d:
0b:5b:70:e2:ba:35:1e:59:9c:70:ca:61:ef:36:e1:47:2f:ce:
c8:50:d2:fa:9b:b8:a6:db:b0:13:e0:bc:77:ef:c5:2c:c9:1e:
c5:65:bf:45:1b:79:3c:a7:b6:45:49:3e:bc:bf:c9:62:07:91:
bd:94:f6:cb:c9:cd:ef:51:7a:d5:a5:eb:c7:cb:a4:eb:c3:85:
db:12:fe:f9:a7:fc:5b:71:26:db:69:25:3e:6c:c1:59:2f:60:
5a:3e:8e:21:14:db:94:c8:89:ec:4d:c8:12:a3:16:a7:ed:3a:
ae:7f:c9:bf:85:4e:4c:88:36:1d:58:e9:83:cd:8a:83:f8:a4:
fe:a1:dd:fd:5e:a7:1a:43:51:db:3e:a4:0e:5f:bf:9c:4d:7f:
5c:61:d4:e0:b0:35:c4:68:f7:28:d5:47:01:f6:0a:fa:4b:df:
4c:81:a4:7b:26:aa:cc:d3:a2:ca:ef:3d:fe:5b:f7:02:4d:44:
36:30:f1:ff:f5:8e:7c:67:8f:62:b5:36:46:99:bb:3e:05:1f:
c5:e7:a0:68:67:21:29:3c:59:fd:84:fb:77:80:89:8a:ba:57:
f0:d2:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:17 2026 by rpki-client