Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
File: BpilU2SQ1wyON7dvMtpoTxIp2bo.mft (raw, json)
Hash identifier: agPdyntdxQ6dlEicvEEjMpM1LUYR2CdernX3tTSKtNg=
Subject key identifier: 8E:35:FC:C7:C6:36:7F:91:34:77:39:B1:7B:10:11:2A:74:FF:DF:08
Authority key identifier: 06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
Certificate issuer: /CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Certificate serial: 019E1EDA72A53BD5B4594042455F4BD4338B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
Manifest number: 03BC
Signing time: Wed 13 May 2026 01:01:32 +0000
Manifest this update: Wed 13 May 2026 01:01:32 +0000
Manifest next update: Thu 14 May 2026 01:01:32 +0000
Files and hashes: 1: BpilU2SQ1wyON7dvMtpoTxIp2bo.crl (hash: SRKLMq/MXnUIy8gIhEDJLozfSFenhOtm+JjoZXz7H74=)
2: L8utE5ZsoaEfVCAqlDJmPEjxUzc.roa (hash: CUEIlVOGs6w2qHtqNYoZZsm4LrWBVQZLAj9RVsaO+ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:72:a5:3b:d5:b4:59:40:42:45:5f:4b:d4:33:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Validity
Not Before: May 13 01:01:32 2026 GMT
Not After : May 14 01:01:32 2026 GMT
Subject: CN=8e35fcc7c6367f91347739b17b10112a74ffdf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:13:37:63:09:7a:79:47:f9:6f:0e:a3:6d:
ee:3b:2a:d2:07:1d:23:5c:39:a0:c9:37:26:dc:1a:
3f:c6:dd:b8:9b:3d:85:6f:42:8e:08:5c:72:0e:55:
98:29:d9:56:bc:63:ae:8c:cd:e1:6d:03:2e:ad:4d:
e0:6f:13:1a:dc:3f:f4:37:cf:14:6f:b3:9c:85:be:
cc:e6:39:9c:c5:eb:bc:4b:81:6a:9a:e6:e1:4b:1d:
03:d1:c2:da:5a:b1:50:44:2c:64:18:96:fc:df:04:
d2:03:24:64:d5:37:70:1d:bc:c2:a3:de:80:b5:d1:
fd:65:d8:33:33:7f:9d:6b:8a:d6:0d:e9:ee:e3:dc:
84:94:ef:f1:60:3b:23:b8:9a:4d:8f:31:19:8f:b2:
f4:be:12:0f:d3:1e:71:c5:f7:11:72:7d:4f:c8:e0:
9b:d2:d7:ba:50:f6:0f:87:60:f0:1d:77:23:76:3e:
ea:13:6e:16:99:e1:75:98:3b:0d:bf:ea:bb:d3:ba:
74:54:c1:35:8d:b8:42:25:68:b1:f9:2b:a6:bd:b7:
95:f3:2c:5c:a3:a1:be:5a:66:c6:ed:8d:aa:07:d8:
a5:56:6b:46:4e:aa:bc:c7:a1:f0:69:12:45:d7:f8:
73:e7:14:93:9d:45:0f:41:cc:27:22:3c:6e:4e:16:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:FC:C7:C6:36:7F:91:34:77:39:B1:7B:10:11:2A:74:FF:DF:08
X509v3 Authority Key Identifier:
keyid:06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:64:65:40:fd:84:a7:e8:38:12:f5:2f:bb:9e:a7:0d:55:
d6:77:f5:6b:e7:4d:f5:b0:51:f5:59:fc:27:3d:41:1f:2b:6d:
90:95:3b:2b:7b:30:7a:14:45:0d:0f:65:c4:9f:65:b3:4e:e5:
f8:f6:76:3c:9e:5d:0a:29:b9:86:a6:f0:29:ed:61:8a:ad:ca:
a5:fa:41:9c:f4:59:d3:b4:fe:35:d1:23:fb:94:93:87:b5:39:
e9:d0:af:17:ed:45:4d:f8:85:b2:da:11:94:2b:e4:be:4b:62:
7e:24:56:23:6a:6e:f4:29:5b:49:92:bd:53:e1:76:67:e1:31:
c1:e1:f5:df:67:65:96:73:a9:51:31:27:ec:b4:01:60:aa:e8:
e1:62:2d:85:ff:e3:b1:23:26:b9:74:75:90:54:24:08:aa:be:
1d:b9:84:d5:e5:2d:78:63:d6:5d:51:19:23:b0:fd:a2:4e:23:
b9:d6:67:8b:18:e7:59:ec:77:d6:19:41:b4:7b:d8:82:0e:fb:
20:c3:e9:e5:f3:0b:73:d5:c3:0b:bb:7a:ba:83:d6:60:5a:09:
73:86:ae:49:d7:7e:e3:ec:b8:e7:8d:ae:70:c6:62:45:6c:58:
61:1e:f9:90:86:51:c4:fc:90:3c:ea:c0:43:84:79:8e:67:6e:
a2:a5:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:58 2026 by rpki-client