Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: 8fe6GEOsmZjNLCDsHWk8thADbXdB9ZnmJY2NwDlLujE=
Subject key identifier: 32:7F:D4:2D:5B:AF:24:7C:C9:7E:F1:EC:48:E9:0C:43:6F:9D:88:34
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019D273AA68F46CE843F222D0E34958ABA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: zLVr81rvMuwnxUx30wTPiNTsHmZg22LYjj6s9pLre+c=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a6:8f:46:ce:84:3f:22:2d:0e:34:95:8a:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=327fd42d5baf247cc97ef1ec48e90c436f9d8834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:ef:3c:97:33:38:ea:e5:9a:8e:cc:f2:9f:
04:c0:d3:39:8c:88:0a:22:2f:27:dc:09:8c:a2:e1:
03:09:82:4a:c4:b8:e7:3f:e4:90:3d:89:d4:39:ba:
fc:4c:a5:cd:c4:df:62:37:15:01:e9:59:3a:02:18:
b4:39:88:a3:5e:85:65:4a:93:96:dd:23:36:f2:89:
28:d9:33:a9:bc:f1:47:b9:d9:65:ec:e0:4a:47:97:
25:49:95:f2:7e:0d:62:23:14:f0:d1:8d:d3:5a:b9:
f6:7e:e6:ca:f0:22:b6:78:20:23:04:b9:18:e1:18:
ea:ad:f5:3e:ff:88:8a:41:7e:5a:89:22:ee:e1:fc:
b9:33:7c:42:28:92:e1:99:ed:8c:7a:aa:50:6b:1f:
31:7d:dc:29:63:5b:28:f0:78:24:7b:d8:6c:ef:53:
36:79:6f:36:d4:34:b0:eb:51:07:8a:f2:83:84:8f:
6e:1d:9c:53:e5:40:1f:94:0e:66:97:6a:51:a9:1f:
e6:73:f9:b8:ca:13:1f:64:84:d2:0a:8f:cd:a8:bd:
9d:0f:fd:44:d9:f7:6b:51:10:31:09:6d:54:b9:5e:
d6:80:5e:32:45:43:1c:ec:f1:71:a2:a7:08:4b:21:
78:50:f6:36:0c:e7:46:2a:57:1f:09:7f:02:37:10:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:D4:2D:5B:AF:24:7C:C9:7E:F1:EC:48:E9:0C:43:6F:9D:88:34
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bc:69:86:3f:7a:87:07:d8:64:4c:cc:3c:bc:72:22:24:4f:
12:5f:8e:bf:8e:33:b1:4e:66:8f:75:8f:a0:95:57:15:c8:b4:
98:b8:5f:f5:da:2b:47:8f:cd:19:84:3d:92:e5:28:3d:16:f0:
1b:97:d3:21:9a:0f:fe:d6:ab:44:5b:91:5b:ce:31:01:1b:08:
5c:35:a0:9a:aa:df:10:43:76:60:6b:5e:eb:26:9d:86:bf:99:
65:93:2d:65:a5:3b:61:f2:bd:ab:aa:ec:f5:43:c2:6f:97:1f:
fa:ff:3b:28:6f:98:34:41:6d:b5:9e:6a:7b:4f:b5:cf:31:c5:
23:21:3c:39:d0:c3:d2:c5:52:7d:73:e6:75:58:cd:fc:d1:25:
e1:78:44:a0:d9:9f:2e:72:6d:94:86:87:1f:5a:99:66:a1:2f:
1f:45:cc:c8:1f:d2:e8:2e:34:4a:3d:32:04:2c:16:c8:4d:7d:
ac:af:28:4d:3d:c0:a1:72:d5:74:56:4a:26:7f:f1:cd:4c:a6:
49:97:63:c2:4e:7e:7b:3a:d6:a7:21:0a:e1:c7:a4:82:54:d7:
55:f5:36:ab:d4:e0:b9:42:0a:27:b6:73:7c:79:68:e6:c3:c7:
66:6f:52:a8:db:8d:ca:e8:ea:a9:e2:c1:98:08:9b:ef:88:79:
b8:c7:d9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqaPRs6EPyItDjSViroBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjYwMzI1MjMwMDQ4WhcNMjYwMzI2MjMwMDQ4WjAzMTEwLwYDVQQD
EygzMjdmZDQyZDViYWYyNDdjYzk3ZWYxZWM0OGU5MGM0MzZmOWQ4ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXPvPJczOOrlmo7M8p8EwNM5jIgK
Ii8n3AmMouEDCYJKxLjnP+SQPYnUObr8TKXNxN9iNxUB6Vk6Ahi0OYijXoVlSpOW
3SM28oko2TOpvPFHudll7OBKR5clSZXyfg1iIxTw0Y3TWrn2fubK8CK2eCAjBLkY
4RjqrfU+/4iKQX5aiSLu4fy5M3xCKJLhme2MeqpQax8xfdwpY1so8Hgke9hs71M2
eW821DSw61EHivKDhI9uHZxT5UAflA5ml2pRqR/mc/m4yhMfZITSCo/NqL2dD/1E
2fdrURAxCW1UuV7WgF4yRUMc7PFxoqcISyF4UPY2DOdGKlcfCX8CNxDkzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ/1C1bryR8yX7x7EjpDENvnYg0MB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7xphj96
hwfYZEzMPLxyIiRPEl+Ov44zsU5mj3WPoJVXFci0mLhf9dorR4/NGYQ9kuUoPRbw
G5fTIZoP/tarRFuRW84xARsIXDWgmqrfEEN2YGte6yadhr+ZZZMtZaU7YfK9q6rs
9UPCb5cf+v87KG+YNEFttZ5qe0+1zzHFIyE8OdDD0sVSfXPmdVjN/NEl4XhEoNmf
LnJtlIaHH1qZZqEvH0XMyB/S6C40Sj0yBCwWyE19rK8oTT3AoXLVdFZKJn/xzUym
SZdjwk5+ezrWpyEK4cekglTXVfU2q9TguUIKJ7ZzfHlo5sPHZm9SqNuNyujqqeLB
mAib74h5uMfZ1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:11 2026 by rpki-client