Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: 5DcVeJJoHxvto+ItyCTKBpMEeg6nOrnYOD6EDZ5fIX0=
Subject key identifier: 83:09:94:57:4D:65:92:B1:81:56:28:FD:6A:83:6C:49:8B:14:FC:9C
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 019F90FF2E32B5ECBC01EB93FD69096D8771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 22:01:10 +0000
Manifest this update: Thu 23 Jul 2026 22:01:10 +0000
Manifest next update: Fri 24 Jul 2026 22:01:10 +0000
Files and hashes: 1: 6MGzgKRGAEVBJeFLAAA-0hwv8bM.roa (hash: c/OSFg+Ab/thk2V2RHBcooUkY2+y8JbiSIvQdXTA9a8=)
2: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: FyWTD0EFLOTpP71fWye/p2X3KpsSgU+ESynzJnMR3Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:2e:32:b5:ec:bc:01:eb:93:fd:69:09:6d:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Jul 23 22:01:10 2026 GMT
Not After : Jul 24 22:01:10 2026 GMT
Subject: CN=830994574d6592b1815628fd6a836c498b14fc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e4:8e:ae:a1:fb:ea:a1:f6:53:e5:9e:35:cb:
c7:5b:03:7e:73:cb:29:e5:61:8a:61:cd:59:74:69:
c8:52:4d:26:33:38:37:ea:4c:38:f7:93:ce:4c:87:
34:9c:50:7e:f7:4d:ae:29:b1:a3:ea:87:5e:e6:30:
c1:09:d3:21:be:ad:cc:bd:27:0c:6c:b4:cc:73:4c:
f7:d7:4d:e0:cb:59:2f:b7:dd:b9:10:67:99:b8:ff:
13:7a:7b:df:ec:90:4a:ec:5c:5f:01:2b:a0:23:b7:
1d:58:9d:e6:51:6a:6c:69:f2:7a:84:11:97:01:1e:
3b:d3:bb:3e:d1:68:d9:95:3d:bc:bb:64:2e:c1:c4:
18:f9:2e:38:04:b9:8b:1f:5a:d0:25:53:7d:4f:88:
d1:f6:06:2c:0c:16:89:4f:3c:2a:0a:6d:da:aa:9f:
32:c8:61:2f:30:fb:5f:f3:bb:af:b2:06:73:74:cc:
94:69:23:4b:bd:e7:3a:72:32:90:9f:c8:5d:8b:61:
27:84:1e:72:8f:df:40:75:97:23:03:1b:f1:b8:5a:
af:5b:aa:00:cf:15:69:6f:52:51:f7:45:9e:ed:d0:
4d:9c:e9:90:73:46:83:af:a2:ea:73:d4:16:65:15:
2b:1e:70:49:0a:f1:60:34:3f:81:01:a0:a9:df:43:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:94:57:4D:65:92:B1:81:56:28:FD:6A:83:6C:49:8B:14:FC:9C
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6c:5b:72:50:71:de:98:00:a6:6b:33:9c:1b:1b:21:7b:ca:
b1:29:cb:0b:80:e4:c5:56:e8:3e:1a:b3:68:bd:58:32:09:5c:
e5:64:a5:84:44:77:d7:21:b7:aa:5c:91:d3:5d:ed:3d:bd:6a:
3e:88:fb:4e:ee:58:a2:79:1f:96:0f:b1:d9:d7:a8:d9:fd:46:
6b:9e:cb:b1:5c:c5:72:66:23:18:03:16:49:4b:c2:31:f3:5c:
f4:1a:c5:fd:e7:92:01:3e:3d:8e:43:bb:79:33:60:cb:6f:0f:
c8:ae:c5:0b:3d:ce:02:8d:aa:7b:0f:01:94:ff:0c:52:c2:86:
d6:0f:61:38:84:23:ad:fc:57:2a:4f:a7:41:81:c2:12:a1:9f:
a5:cc:8c:c8:6f:f5:9e:fa:78:b4:6f:35:16:9e:e9:34:10:e1:
c0:ed:dc:31:e5:d5:32:ae:39:b8:58:fe:4d:ba:0a:a0:fb:af:
67:4c:e3:10:a1:13:c1:60:ba:4c:65:a1:05:5a:38:17:b4:31:
f0:da:87:8c:cb:60:0b:3a:91:65:bd:c3:5b:61:c2:c9:92:27:
ba:29:d3:b4:f9:6f:57:ec:f3:9e:7b:76:1f:db:06:7d:e6:b5:
05:35:48:e3:58:35:ee:ed:83:05:40:cd:15:12:b7:63:2f:72:
a3:4c:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:24:35 2026 by rpki-client