Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
File: BpilU2SQ1wyON7dvMtpoTxIp2bo.mft (raw, json)
Hash identifier: 130S/Vd1t3xJDv71whLqwvHlzj1JQR4OtTmdhK2heCY=
Subject key identifier: 72:51:56:08:E5:A6:93:5F:6D:6A:FA:B9:61:5B:56:1D:2F:DD:8F:F8
Authority key identifier: 06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
Certificate issuer: /CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Certificate serial: 019D27A94A26BFE9CFBB75F59BE5D784AA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 01:01:39 +0000
Manifest this update: Thu 26 Mar 2026 01:01:39 +0000
Manifest next update: Fri 27 Mar 2026 01:01:39 +0000
Files and hashes: 1: BpilU2SQ1wyON7dvMtpoTxIp2bo.crl (hash: XYueyQxY8ljf5F1cMs+ibwXBneHyKczKSPQbya9lUNE=)
2: L8utE5ZsoaEfVCAqlDJmPEjxUzc.roa (hash: CUEIlVOGs6w2qHtqNYoZZsm4LrWBVQZLAj9RVsaO+ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4a:26:bf:e9:cf:bb:75:f5:9b:e5:d7:84:aa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Validity
Not Before: Mar 26 01:01:39 2026 GMT
Not After : Mar 27 01:01:39 2026 GMT
Subject: CN=72515608e5a6935f6d6afab9615b561d2fdd8ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:db:c8:03:65:fe:7c:72:78:4f:9b:e5:35:
05:98:2c:45:e5:e7:db:fd:ea:70:29:8a:3b:3b:a8:
81:10:93:9a:b3:3f:f6:89:b9:1b:b4:a8:ec:d2:ab:
f8:cd:ab:f3:65:18:45:41:5b:bf:50:9b:04:e9:a2:
ee:29:71:37:ba:61:7d:95:07:73:72:28:fd:35:0b:
ad:ed:af:60:94:51:a4:98:86:b4:e3:a9:fd:5d:46:
4a:10:cf:ea:66:9f:7c:cb:38:60:34:36:0a:a3:2c:
79:47:b2:4b:0c:e9:03:8e:0d:2c:af:3d:42:78:72:
74:d3:25:ea:d6:dc:df:e2:9b:15:33:73:89:47:49:
2c:55:d0:39:77:38:87:09:18:f2:f7:01:bc:75:da:
81:0a:f4:37:2c:fc:ab:b6:bc:fb:b1:f2:20:02:f6:
94:28:84:e5:61:6a:d4:d3:9e:35:64:38:4b:5f:9c:
8b:bd:73:8b:f3:7c:9b:ad:1e:dd:c1:2e:dc:e7:b7:
3d:df:a2:8a:b9:71:76:9b:16:1a:ec:bd:bc:e1:2a:
9e:64:46:f9:7b:20:e5:9f:fa:00:1c:90:c6:77:88:
09:ac:54:91:b6:e5:2d:db:04:3b:fc:37:d5:45:e2:
cf:fb:2c:5e:71:fb:3d:66:71:e8:70:3a:68:9f:ef:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:56:08:E5:A6:93:5F:6D:6A:FA:B9:61:5B:56:1D:2F:DD:8F:F8
X509v3 Authority Key Identifier:
keyid:06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d5:e5:b8:cd:75:66:37:52:f5:7f:23:61:ee:85:9f:97:2e:
1b:5e:2a:c9:86:68:b1:dd:ee:f5:ae:46:51:b0:3b:79:5c:27:
cb:9d:cd:c4:ce:81:3d:1f:16:84:d8:78:73:05:fb:b4:1b:67:
51:16:87:de:10:fa:b4:ba:40:a8:e6:00:3c:29:41:78:cc:35:
64:76:00:7d:c5:05:17:66:91:71:eb:fe:5d:0e:9e:86:95:68:
32:4c:8f:92:3e:30:ac:be:b8:d8:99:ce:ce:de:5f:a6:d9:7d:
fa:fb:3f:ca:b1:38:07:99:17:49:cd:d2:18:fa:a2:8d:01:7b:
d7:ce:3c:7b:65:22:78:90:3c:fb:2e:6f:5f:6d:67:96:ee:92:
2b:fd:0c:81:34:4f:7a:12:ae:60:11:c0:c9:ee:d6:73:d7:03:
78:03:c9:a8:77:61:c2:10:05:4d:8b:06:3f:54:c0:98:69:b0:
bf:86:de:74:b7:d4:9d:fa:23:15:d0:1d:16:9c:fa:5f:bb:bb:
ab:58:eb:cc:b3:3c:25:11:50:21:9d:69:da:ba:31:f2:6b:46:
4f:15:a5:45:27:17:37:e8:5e:df:4d:52:7d:f2:3c:aa:61:5e:
01:a6:31:1e:81:b0:df:be:06:94:c0:d5:3f:60:be:b7:d6:a5:
fd:15:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:28 2026 by rpki-client