Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: pi055AV/MRBQepLS4PqklC1CJ6bfzTeiTjn6Sylz+I4=
Subject key identifier: D6:C6:E6:84:24:0F:12:7B:80:7B:6E:33:DD:C7:3D:DB:63:76:E7:1D
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 019E1C46ABEFDC8269B7984037C385983876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 13:00:54 +0000
Manifest this update: Tue 12 May 2026 13:00:54 +0000
Manifest next update: Wed 13 May 2026 13:00:54 +0000
Files and hashes: 1: 6MGzgKRGAEVBJeFLAAA-0hwv8bM.roa (hash: c/OSFg+Ab/thk2V2RHBcooUkY2+y8JbiSIvQdXTA9a8=)
2: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: uOJTY80e4cCPsrL3XsB8I8n8hmjmyutbRYv2XIBA77M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:ab:ef:dc:82:69:b7:98:40:37:c3:85:98:38:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: May 12 13:00:54 2026 GMT
Not After : May 13 13:00:54 2026 GMT
Subject: CN=d6c6e684240f127b807b6e33ddc73ddb6376e71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:79:f4:9d:ce:7e:c8:b2:ee:d7:36:81:d8:
7d:74:e3:9f:96:63:1e:81:55:f8:38:63:7a:4d:09:
f5:b5:23:bc:e0:a4:88:e7:ed:5c:90:1e:eb:62:7b:
8f:e6:f3:a1:a3:99:0f:1f:95:6d:36:84:8d:d8:4a:
93:67:a3:1e:6b:f0:38:37:78:02:6a:30:5b:1a:d0:
ca:b7:b1:8a:e7:63:5d:20:d9:8c:97:bc:14:09:80:
f1:36:cc:de:7d:01:f5:d4:71:c7:25:a3:d0:40:a3:
e2:25:a9:16:3c:72:73:f4:a0:46:a9:8e:17:99:fc:
bc:e1:11:36:50:1b:6c:dc:f6:64:82:05:45:0c:da:
bb:63:8f:1a:1a:24:1b:ee:5b:4b:cd:36:31:c5:de:
22:9e:48:fb:b7:e0:84:c7:a6:e1:08:cd:7b:ee:21:
3b:6d:aa:0f:12:22:ec:c5:8a:39:59:65:58:03:ce:
80:34:cd:39:51:04:4c:1a:16:d2:e9:76:4b:71:e4:
f0:e3:82:76:af:f5:55:68:ed:90:cd:20:35:87:c0:
5b:2d:45:e1:b2:32:cd:36:e8:d7:29:63:40:71:19:
ad:67:f6:e9:03:4e:e9:c2:49:6f:cd:97:15:80:7d:
4a:a3:31:8a:fc:e0:3a:c8:ce:7e:ec:b3:3c:ad:a6:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:E6:84:24:0F:12:7B:80:7B:6E:33:DD:C7:3D:DB:63:76:E7:1D
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:24:36:6c:10:0e:7f:78:43:5e:9a:5e:1f:b1:ba:7d:46:dd:
e6:15:46:2b:7b:e0:b6:e3:66:ea:56:4e:52:07:13:47:4b:2c:
3b:71:47:8d:c2:76:39:4f:0d:ad:68:9e:5b:a6:e0:e4:de:ce:
76:63:ef:50:24:54:a8:0d:59:6e:b7:0c:7a:b7:b5:2f:99:08:
a4:f7:3c:a6:6c:7c:55:e4:59:d6:c2:da:6b:2c:c8:2a:55:ea:
9f:6c:23:7c:e7:0a:39:62:53:1b:17:b7:d4:4b:db:81:93:52:
53:72:89:6d:13:f5:46:f6:1e:53:39:f0:78:42:5d:89:0f:67:
36:fc:e8:01:93:79:71:33:d1:19:b0:11:cd:d4:57:c5:c5:0d:
48:f9:cb:b3:44:56:b4:bf:b0:fc:7d:40:6b:87:d4:38:85:88:
e4:63:a6:e4:68:3d:0e:ab:e8:68:f5:e2:ec:49:92:d1:f8:00:
42:ab:4e:db:83:fb:e9:76:35:7e:fb:9a:70:53:f2:75:db:39:
4b:0a:32:36:e0:e6:9f:03:ff:09:6d:90:c4:e7:50:2f:23:cb:
d4:0a:91:72:9a:2c:88:c0:e5:3b:53:70:48:70:63:cd:9a:7a:
b9:c7:5c:a3:59:80:48:ab:c7:e7:ae:d0:c8:5a:e4:9a:6b:2a:
6e:3a:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:44 2026 by rpki-client