Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: KYP9XVxdgg9tCSsjbZOkbVf5W0Nn5olO/p9LtTmZPRI=
Subject key identifier: F1:E8:C6:61:24:E4:FF:96:CD:1B:D9:DF:9E:4A:CF:28:05:7B:38:E3
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 019D2704C27CEEDA63E3A5BF49709CF70510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 22:01:56 +0000
Manifest this update: Wed 25 Mar 2026 22:01:56 +0000
Manifest next update: Thu 26 Mar 2026 22:01:56 +0000
Files and hashes: 1: 6MGzgKRGAEVBJeFLAAA-0hwv8bM.roa (hash: c/OSFg+Ab/thk2V2RHBcooUkY2+y8JbiSIvQdXTA9a8=)
2: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: zKfdpJjtLqtjdpXmM0sRGwhJyDje9EoHtz22SBiY8GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c2:7c:ee:da:63:e3:a5:bf:49:70:9c:f7:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Mar 25 22:01:56 2026 GMT
Not After : Mar 26 22:01:56 2026 GMT
Subject: CN=f1e8c66124e4ff96cd1bd9df9e4acf28057b38e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:66:6b:1e:f3:e0:5a:ca:82:a2:fe:dc:a9:
b0:3e:72:d8:d8:74:29:7e:23:8d:38:7d:9f:19:54:
c2:fb:e3:8a:be:ac:c4:ad:53:0b:0d:9d:87:e3:0a:
34:e4:4a:06:17:14:5c:1e:97:dd:d6:02:99:cc:80:
90:1a:3d:f7:f0:8b:ce:96:00:25:df:12:27:82:ee:
97:b0:f9:8f:72:06:01:23:fb:a3:54:92:63:bc:97:
d1:1a:37:da:26:78:9a:74:a2:f2:3f:98:68:5e:6a:
07:ef:d4:83:fb:45:1d:3c:b6:19:5d:63:ef:f5:69:
16:f7:2b:b7:19:1f:17:06:14:63:de:0c:35:6a:dd:
d1:b0:61:17:37:be:3b:bf:13:4a:fb:39:16:64:fb:
75:46:39:5c:49:d5:fa:d2:2c:df:d1:6c:a5:3e:ce:
1f:cb:a4:7b:e5:5f:8f:d3:79:bc:b6:2d:92:91:f7:
c6:da:96:d2:1e:c6:be:05:24:4c:4f:8a:a8:ec:1b:
05:5c:ba:67:33:af:28:b0:72:8e:75:b8:ea:96:7c:
ab:09:af:2c:fc:84:41:3a:87:a3:66:1c:96:47:b9:
1f:6f:c6:b5:22:f2:5b:47:26:77:f7:02:c9:ff:1a:
05:91:3e:a2:3d:93:69:be:db:15:47:64:fc:4f:85:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E8:C6:61:24:E4:FF:96:CD:1B:D9:DF:9E:4A:CF:28:05:7B:38:E3
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:b9:3b:a8:28:20:05:71:5f:d5:79:c1:1b:fd:8c:c2:5e:
60:fd:a0:51:f1:80:73:bf:fd:98:25:74:96:ed:ec:fa:b3:6f:
02:ea:52:a5:eb:37:5b:e7:a2:22:6c:17:ca:cd:7a:4f:87:6b:
05:31:87:15:4d:a6:1e:97:11:2b:af:1a:80:7d:1a:4e:37:57:
9e:c2:eb:a4:ad:f8:aa:75:db:4c:c1:f1:a8:1b:53:b2:60:5f:
34:e9:ea:9e:13:a4:5b:4b:2a:12:18:1b:8c:97:d4:da:94:2a:
39:ad:b0:2b:04:ad:8e:bb:8a:cc:46:62:ae:c0:7e:cf:00:53:
e6:cc:b5:61:ec:d8:a4:3e:07:df:71:7f:23:38:bb:e7:ad:4d:
8d:57:b8:a8:8f:7a:e1:c5:2b:aa:34:70:57:0c:64:2b:98:02:
75:e4:6f:97:8b:66:7a:58:47:4f:e3:35:4a:27:6e:bd:fc:5e:
a7:29:8e:75:b5:6a:e5:d2:6c:07:0b:96:6f:8e:5f:8b:26:69:
a9:d9:cb:7b:66:cd:ef:e5:19:12:7a:85:68:00:7f:70:3b:f6:
74:f2:31:23:82:b3:35:34:ef:ab:cb:57:65:b5:d5:57:a3:7e:
cd:2f:76:b4:ba:b0:e4:d7:a9:7e:6a:2f:11:ce:1e:a7:fa:b0:
cf:11:3a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:55 2026 by rpki-client