Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: G8V/xMi6HiAlwBlenPq9fkeuaIjkss0ZU4H7tPQXNt4=
Subject key identifier: 30:32:C1:AB:71:0E:F5:08:20:00:2D:E3:DE:0D:39:95:1C:7A:FD:71
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 01A1DF4C8C286ED3DDEF32979B80868E4061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 13:01:38 +0000
Manifest this update: Sun 15 Nov 2026 13:01:38 +0000
Manifest next update: Mon 16 Nov 2026 13:01:38 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: RhymoLGs4Ptyflsq2xB2wacbipmb8eAToZzD6xeegcg=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:8c:28:6e:d3:dd:ef:32:97:9b:80:86:8e:40:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Nov 15 13:01:38 2026 GMT
Not After : Nov 16 13:01:38 2026 GMT
Subject: CN=3032c1ab710ef50820002de3de0d39951c7afd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:13:28:83:f6:9a:6f:28:86:f2:6b:7e:57:
19:2f:6e:aa:37:ee:39:25:bb:2d:f1:76:64:7f:f0:
96:8f:5a:f8:ff:8e:dc:2f:ce:ff:ac:39:09:a8:2f:
b4:7d:9e:da:b0:c9:63:5c:96:22:a3:22:b0:1b:b2:
ed:a5:9e:bc:8c:62:fb:7a:8c:f2:1b:84:10:81:a8:
21:ba:b4:fd:57:9a:0f:bf:0a:e6:57:9e:53:bc:9d:
f1:1f:cc:c9:1e:9a:2b:f9:b1:90:73:07:3b:c1:c1:
65:73:8c:9f:c7:38:72:27:60:a6:1a:80:db:ad:2c:
ce:c3:f0:8b:69:a7:07:8f:22:87:53:f5:7d:a1:4c:
d7:82:13:37:72:d7:1e:c8:26:39:fa:61:e7:08:80:
e5:bf:ae:dc:60:b5:67:87:f3:cd:7f:b2:35:27:9e:
1f:43:6b:82:f8:3e:f6:33:c3:0a:65:b5:3f:90:bc:
37:bb:d4:18:8a:c9:b6:96:56:aa:56:5f:dd:eb:b9:
70:1c:42:cc:91:17:b4:7e:04:bc:79:84:9b:58:14:
59:78:5a:52:10:e0:97:ac:19:3d:62:0e:d9:c5:8b:
ab:5f:33:3f:48:35:e4:15:e3:69:8f:e4:b0:c6:40:
12:c6:34:f9:b9:ed:9f:b2:fc:98:de:27:71:62:b9:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:32:C1:AB:71:0E:F5:08:20:00:2D:E3:DE:0D:39:95:1C:7A:FD:71
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5c:f9:d3:d1:52:44:b2:d4:45:bf:fb:d6:5b:b7:5a:a4:34:
f5:52:e1:72:83:9c:99:0f:12:7e:19:6e:0f:52:9c:1d:cf:10:
cb:13:99:35:2e:b3:b6:ab:dd:4a:2d:59:38:4d:88:60:ad:d8:
8c:81:39:f1:24:89:e6:e8:e2:67:fe:41:18:b6:11:12:1f:49:
af:3e:98:6e:99:cc:2e:fe:ef:4f:0f:3d:e6:19:2e:1d:d2:8d:
44:29:8e:77:bc:f0:b9:7d:a9:7b:15:21:ca:2a:cc:63:10:a8:
ea:fd:2e:19:cb:21:97:11:b3:01:9f:d8:60:c7:7d:d1:cd:11:
00:95:c6:b3:1c:99:11:40:68:48:00:90:77:65:40:91:2d:8a:
29:e0:41:fe:e4:2f:46:33:29:4a:c5:87:7e:35:dd:86:e9:5c:
ed:18:31:2a:71:8f:d1:5c:49:41:b2:9f:78:d7:06:91:01:50:
37:a7:03:31:ad:a3:66:25:9e:43:aa:0c:1c:e0:e0:9f:2c:67:
0a:0a:1a:db:55:37:28:08:6c:e3:16:36:1b:fa:57:44:59:d4:
2c:e0:4e:17:71:5e:f3:b7:2b:08:df:e7:ed:ba:a0:70:eb:25:
bc:a8:2a:3c:3a:d3:62:a8:50:42:89:bb:d7:4d:b0:16:3b:a1:
de:c3:e9:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTIwobtPd7zKXm4CGjkBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5
MGVjZjQwHhcNMjYxMTE1MTMwMTM4WhcNMjYxMTE2MTMwMTM4WjAzMTEwLwYDVQQD
EygzMDMyYzFhYjcxMGVmNTA4MjAwMDJkZTNkZTBkMzk5NTFjN2FmZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wwTKIP2mm8ohvJrflcZL26qN+45
Jbst8XZkf/CWj1r4/47cL87/rDkJqC+0fZ7asMljXJYioyKwG7LtpZ68jGL7eozy
G4QQgaghurT9V5oPvwrmV55TvJ3xH8zJHpor+bGQcwc7wcFlc4yfxzhyJ2CmGoDb
rSzOw/CLaacHjyKHU/V9oUzXghM3ctceyCY5+mHnCIDlv67cYLVnh/PNf7I1J54f
Q2uC+D72M8MKZbU/kLw3u9QYism2llaqVl/d67lwHELMkRe0fgS8eYSbWBRZeFpS
EOCXrBk9Yg7ZxYurXzM/SDXkFeNpj+SwxkASxjT5ue2fsvyY3idxYrm5jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAywatxDvUIIAAt494NOZUcev1xMB8GA1UdIwQY
MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt
YzZkYzU4MTM3ZDA3LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3
LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1z509FS
RLLURb/71lu3WqQ09VLhcoOcmQ8SfhluD1KcHc8QyxOZNS6ztqvdSi1ZOE2IYK3Y
jIE58SSJ5ujiZ/5BGLYREh9Jrz6YbpnMLv7vTw895hkuHdKNRCmOd7zwuX2pexUh
yirMYxCo6v0uGcshlxGzAZ/YYMd90c0RAJXGsxyZEUBoSACQd2VAkS2KKeBB/uQv
RjMpSsWHfjXdhulc7RgxKnGP0VxJQbKfeNcGkQFQN6cDMa2jZiWeQ6oMHODgnyxn
Cgoa21U3KAhs4xY2G/pXRFnULOBOF3Fe87crCN/n7bqgcOslvKgqPDrTYqhQQom7
102wFjuh3sPphA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:12 2026 by rpki-client