Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: x7lTipI+lol553X3Y464Cwo/8NjdLHt78f0NDC+s4/o=
Subject key identifier: D9:02:5C:CA:3D:86:7E:DF:1B:C9:48:B9:9D:53:4E:06:AD:51:F2:AA
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 019D284DBD8B01A5985D1A39CCCD9E47D668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:16 +0000
Manifest this update: Thu 26 Mar 2026 04:01:16 +0000
Manifest next update: Fri 27 Mar 2026 04:01:16 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: TUntYZBmFosUwBvnUaN1dJjTN8c6AAUuh+QEd2KO0j8=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:bd:8b:01:a5:98:5d:1a:39:cc:cd:9e:47:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Mar 26 04:01:16 2026 GMT
Not After : Mar 27 04:01:16 2026 GMT
Subject: CN=d9025cca3d867edf1bc948b99d534e06ad51f2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:5e:44:72:b6:e7:82:7f:41:fb:35:93:a6:
a2:f4:37:5a:86:ea:d8:db:df:bd:81:c5:fc:3b:5d:
aa:8c:81:89:85:d5:8c:0c:20:63:00:17:67:56:ac:
72:d9:8b:32:18:fd:4c:2c:ab:b0:ca:2a:f5:27:dd:
50:34:a6:81:d6:0e:49:33:43:cc:54:49:13:48:3d:
ba:9b:a2:4d:41:24:5e:07:cf:3e:a5:01:42:70:e7:
eb:41:c2:c6:a2:09:f1:40:47:be:b2:7e:04:0a:a5:
5d:b9:8f:2b:4b:3d:67:5a:cf:38:9b:1b:ae:0a:00:
7e:c5:b5:61:1b:2b:09:78:21:e5:ca:3b:af:fd:8c:
7a:32:2d:70:5b:d3:04:80:4b:4e:ee:bb:47:79:6a:
9b:4a:c1:39:3b:2c:8c:7c:54:ac:58:94:0e:e3:0b:
23:99:dd:1c:ea:aa:bc:8d:69:35:44:b9:de:05:6c:
d1:b9:5d:8b:33:bf:64:be:6b:0f:04:70:96:79:4e:
ec:12:f6:d2:9c:d7:5e:18:a8:27:df:8d:e7:69:d8:
49:d1:4d:eb:7d:6d:6c:df:d4:2c:ac:3c:9c:d2:50:
62:23:b6:e1:2f:57:79:d4:54:62:d7:03:8c:c8:17:
3f:8c:22:7e:d9:ca:3a:52:70:9a:a8:f8:27:2c:db:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:5C:CA:3D:86:7E:DF:1B:C9:48:B9:9D:53:4E:06:AD:51:F2:AA
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:05:06:56:58:9b:80:43:11:66:05:dd:fe:8f:4e:52:38:
73:7c:5f:b0:02:7e:3b:03:8b:16:c5:a7:30:f0:ab:e1:0f:1c:
d6:43:f1:f0:e3:7e:e5:50:34:d9:c6:31:64:54:be:fd:96:e2:
ae:e7:d9:fa:f7:7e:c8:aa:4e:df:16:27:2c:da:08:ea:d5:75:
4d:e1:fd:26:39:17:f9:8a:77:b4:9a:df:fc:a5:62:d8:b6:6e:
1f:93:4e:dc:10:f6:4f:f3:3a:87:9a:4e:6b:93:51:65:db:7c:
20:c6:d2:63:7a:3a:9b:41:22:b7:26:5c:19:ba:16:cf:39:ed:
25:23:0c:ea:db:54:e2:ae:80:4b:67:dd:52:71:00:a2:73:5c:
a9:4e:38:d9:78:97:b0:af:ef:c6:b5:85:02:90:f2:30:0a:61:
e6:77:9d:b7:1f:81:27:bb:35:c1:a5:fe:9c:6e:47:c6:7b:a4:
f4:60:f9:06:9d:21:fe:42:84:e4:e7:b9:52:c4:3b:e6:a7:c1:
6a:df:cf:0d:8e:f8:f0:ed:4e:c6:c9:87:41:5b:96:23:34:a8:
7b:b8:52:03:30:09:de:c4:3d:f4:58:74:9b:c7:20:b3:35:02:
e1:eb:88:a1:91:04:68:f3:9b:cf:8f:b7:0b:d8:f6:54:30:ae:
ec:41:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:50 2026 by rpki-client