Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: e7LlyG21tMV2QPtsmqRraLDdi68OGEmBLpq+A8iseDM=
Subject key identifier: 03:03:BB:24:56:12:91:FC:E3:63:CC:1F:3D:68:9B:44:A8:E3:3C:CD
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 019E1D90485552C9E356A85F10D6632BB8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:00:55 +0000
Manifest this update: Tue 12 May 2026 19:00:55 +0000
Manifest next update: Wed 13 May 2026 19:00:55 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: lntMAjvggPbWcSAI1ukb3Znq9V66kJ8HzeCPchWCn0U=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:48:55:52:c9:e3:56:a8:5f:10:d6:63:2b:b8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: May 12 19:00:55 2026 GMT
Not After : May 13 19:00:55 2026 GMT
Subject: CN=0303bb24561291fce363cc1f3d689b44a8e33ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:cc:90:0d:26:b1:46:66:22:e8:f5:16:2a:
23:13:54:23:3c:c2:ac:68:96:e9:e7:98:b3:51:a4:
2a:a0:c4:9b:0c:5f:5b:31:7d:65:34:c7:da:83:36:
6c:16:38:f3:f9:4c:fe:2f:5f:13:5f:e3:1b:a2:3a:
94:55:d7:79:f0:6e:87:7c:1e:38:8f:f7:4a:75:4a:
0f:59:97:7d:cf:a6:ad:7f:f1:eb:a6:4c:82:a4:aa:
05:00:19:87:57:84:93:ec:42:5d:40:d4:32:b8:46:
61:dc:45:2b:13:70:be:5b:de:c6:29:4a:19:1c:4a:
12:cc:e2:5d:69:7b:29:ad:ed:56:c0:a8:12:d8:c3:
66:cc:33:41:a4:f2:98:7d:c4:97:df:ae:42:52:2e:
a8:11:74:0d:bf:48:b8:28:80:97:70:cf:22:5f:4b:
84:fd:c9:4c:ec:5c:13:eb:07:79:8d:83:3f:bf:07:
aa:13:f0:62:53:0d:7f:2a:c9:0b:9b:8b:f1:4c:57:
aa:76:f8:f5:6d:db:40:28:11:ec:30:66:cd:3d:44:
2f:b3:20:60:49:95:2b:5d:79:25:f8:90:af:dd:c2:
86:2b:e6:d7:66:e3:34:42:fa:10:6b:b7:64:c3:4b:
13:5f:d3:98:e6:d1:ef:4a:c9:68:28:7c:d4:bd:55:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:03:BB:24:56:12:91:FC:E3:63:CC:1F:3D:68:9B:44:A8:E3:3C:CD
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:f9:19:38:aa:0c:ff:e6:3c:3a:80:bc:a4:f1:7a:2e:3d:
ad:d1:85:f3:35:9e:07:e9:93:53:e4:88:8c:25:8d:3a:90:5b:
48:e2:83:bf:75:f9:8c:e4:98:4b:a2:53:32:aa:15:49:6b:a5:
db:b2:a2:b1:96:85:a7:04:de:3e:6a:ad:df:2c:1a:10:9a:ad:
8a:d0:56:32:20:b0:f3:93:ab:2a:0f:70:65:d2:92:c5:6b:25:
19:ca:51:ce:0b:3e:b2:65:7f:a0:cb:73:c4:52:a9:fa:14:e0:
b9:6f:be:d1:b4:21:b0:41:93:40:d3:27:d2:d7:21:34:e1:16:
53:d9:88:69:33:6d:ae:9a:1a:47:10:02:6c:c4:0d:4f:72:58:
0d:d0:68:08:05:01:86:25:62:83:2f:a5:09:82:33:76:4b:a6:
92:bd:0e:22:2e:73:69:6d:0b:15:42:3d:e7:bc:95:80:23:06:
74:a9:49:c2:c1:ba:c4:39:27:0f:ab:d5:0c:45:3b:23:05:c9:
bf:fa:ad:eb:ce:10:66:8a:87:1a:f9:38:37:04:95:61:f7:fd:
85:5f:c9:36:70:4e:e9:e9:8f:34:80:2b:b4:ef:63:4d:fb:e1:
b5:23:86:ed:bc:a6:f7:8a:b9:f2:a5:13:2f:0d:2b:dd:24:af:
4b:cd:f3:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkEhVUsnjVqhfENZjK7i9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5
MGVjZjQwHhcNMjYwNTEyMTkwMDU1WhcNMjYwNTEzMTkwMDU1WjAzMTEwLwYDVQQD
EygwMzAzYmIyNDU2MTI5MWZjZTM2M2NjMWYzZDY4OWI0NGE4ZTMzY2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtufMkA0msUZmIuj1FiojE1QjPMKs
aJbp55izUaQqoMSbDF9bMX1lNMfagzZsFjjz+Uz+L18TX+MbojqUVdd58G6HfB44
j/dKdUoPWZd9z6atf/HrpkyCpKoFABmHV4ST7EJdQNQyuEZh3EUrE3C+W97GKUoZ
HEoSzOJdaXspre1WwKgS2MNmzDNBpPKYfcSX365CUi6oEXQNv0i4KICXcM8iX0uE
/clM7FwT6wd5jYM/vweqE/BiUw1/KskLm4vxTFeqdvj1bdtAKBHsMGbNPUQvsyBg
SZUrXXkl+JCv3cKGK+bXZuM0QvoQa7dkw0sTX9OY5tHvSsloKHzUvVU92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMDuyRWEpH842PMHz1om0So4zzNMB8GA1UdIwQY
MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt
YzZkYzU4MTM3ZDA3LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3
LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVj5GTiq
DP/mPDqAvKTxei49rdGF8zWeB+mTU+SIjCWNOpBbSOKDv3X5jOSYS6JTMqoVSWul
27KisZaFpwTePmqt3ywaEJqtitBWMiCw85OrKg9wZdKSxWslGcpRzgs+smV/oMtz
xFKp+hTguW++0bQhsEGTQNMn0tchNOEWU9mIaTNtrpoaRxACbMQNT3JYDdBoCAUB
hiVigy+lCYIzdkumkr0OIi5zaW0LFUI957yVgCMGdKlJwsG6xDknD6vVDEU7IwXJ
v/qt684QZoqHGvk4NwSVYff9hV/JNnBO6emPNIArtO9jTfvhtSOG7bym94q58qUT
Lw0r3SSvS83zfQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:39 2026 by rpki-client