Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: R6HDrc3ORLUH4SQeLM2w5ioy9F4FqmojEWjkLoF+xAE=
Subject key identifier: 23:E8:3D:70:0D:88:6F:47:49:C5:A8:CD:6A:3B:A0:35:26:74:CF:46
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 019D28F28C50AAB615A8B29993BEFCBD549E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0BC7
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: EtdyxAKOpEnTyFWOB3comB5TdCssI1g8jiRzkpyEj28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8c:50:aa:b6:15:a8:b2:99:93:be:fc:bd:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=23e83d700d886f4749c5a8cd6a3ba0352674cf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:89:39:43:9a:54:2f:a5:81:07:b7:43:2f:
71:fe:c7:a0:68:28:c7:5a:25:c6:8b:fc:88:72:ea:
22:76:0d:d2:92:d9:7a:c5:75:e6:6c:5e:2a:b5:8c:
c2:f2:5e:e1:aa:ac:90:5e:96:fd:46:b7:8d:05:15:
ce:32:1a:f3:45:01:6c:4f:06:af:bf:84:11:74:71:
88:ce:4e:c9:60:12:20:86:d5:ab:89:ca:f5:19:d0:
0f:14:36:53:c5:42:74:df:8c:c1:c8:c0:9a:df:36:
4f:48:2d:57:52:9f:91:67:0c:ac:92:11:4f:f2:22:
82:c5:bd:14:06:93:90:2e:87:ef:bf:75:4f:53:44:
53:06:30:17:2b:02:60:56:58:6b:9d:15:b4:a6:9f:
7f:55:19:4e:45:65:1f:e8:10:47:30:06:5b:1a:c8:
fb:1d:5f:03:1a:16:06:a3:91:65:c2:db:fd:72:f7:
45:bb:9a:3c:ca:7d:fc:b7:47:f2:a8:b6:fb:11:83:
4c:53:e6:cb:a1:5c:6e:a1:52:e2:ce:63:1f:f2:2f:
08:0a:a5:1b:69:a4:64:7d:1a:9a:3e:41:7a:1f:7f:
cb:0d:91:5c:55:20:31:20:a7:13:8e:bb:5d:53:36:
de:02:c9:1c:ac:32:27:d3:b6:01:ea:92:22:50:94:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:3D:70:0D:88:6F:47:49:C5:A8:CD:6A:3B:A0:35:26:74:CF:46
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:24:b8:d9:33:2a:e2:ca:14:a6:8c:32:c7:17:6b:ab:2d:8d:
d9:a9:9b:d5:92:11:91:f9:7c:db:d9:32:3f:3a:3f:2d:cb:a6:
a5:80:ef:d1:a0:fb:b2:b4:57:1d:60:fa:7d:fc:76:42:07:e5:
5e:58:be:6c:9c:5c:0c:de:c9:32:4d:d0:6a:bb:a0:a4:2f:51:
e2:0c:01:95:5b:22:f6:d8:6a:ed:5c:84:38:60:a7:03:b0:02:
b8:1c:3a:e7:38:53:dc:13:64:10:6c:0c:1f:5d:93:b2:51:1a:
96:51:35:8d:c7:13:18:3c:96:41:08:13:90:4f:ff:0b:cc:68:
a5:90:ec:ec:f6:f6:4f:09:43:d4:b8:3e:93:03:fc:35:97:b6:
0c:64:0d:b4:ad:d6:ff:61:fc:25:b2:d4:72:69:04:15:5f:3a:
db:ba:4d:95:d1:1c:2c:17:07:b8:98:8b:6d:b9:f9:10:00:80:
d5:67:91:56:d2:c2:84:51:37:f7:51:b2:b1:bb:6a:d4:97:52:
22:68:ab:90:ba:1b:1d:ce:b2:95:99:d5:e3:17:42:92:0c:84:
80:98:37:d8:1e:57:ef:0a:1c:00:c0:61:63:2a:ff:30:9d:d6:
5f:29:bc:6a:35:77:29:1b:1a:0b:c4:77:4e:cb:4a:ad:6c:c4:
9f:bb:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:08 2026 by rpki-client