Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: V/TIESPQMNiCC6XfGgYM2bXgcM6Hh/mSqC9CGu+wAiM=
Subject key identifier: 52:90:A0:CB:0F:A2:11:82:49:FD:BC:59:B8:CC:5D:87:EE:8F:E6:E2
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 01A0D3B8C90C7655930DC419F04FD84BDBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 14:01:37 +0000
Manifest this update: Thu 24 Sep 2026 14:01:37 +0000
Manifest next update: Fri 25 Sep 2026 14:01:37 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: HYxMoGGbl2obtbVciC8InPFeIEnb9f39Kh1fSjYKnqY=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:c9:0c:76:55:93:0d:c4:19:f0:4f:d8:4b:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Sep 24 14:01:37 2026 GMT
Not After : Sep 25 14:01:37 2026 GMT
Subject: CN=5290a0cb0fa2118249fdbc59b8cc5d87ee8fe6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:c4:c5:80:95:16:84:8f:11:72:3e:e7:72:
97:48:27:0d:64:18:8d:31:3b:c5:fc:76:d9:ef:45:
63:d9:a0:19:ab:b5:24:34:ce:47:63:70:09:a1:6d:
15:43:51:4a:c7:e3:b8:f1:4c:6f:06:dc:1f:2a:11:
93:0d:42:91:7b:bb:e4:dc:9b:18:81:17:ed:23:42:
10:ed:7a:12:d3:91:6a:f6:fe:e9:4e:c5:24:f6:39:
b7:70:c2:56:84:de:5d:16:8b:0b:7d:8c:f7:3e:13:
7b:cf:32:07:e5:5c:2b:68:22:be:94:1b:5c:87:61:
f1:1b:0c:06:88:07:03:83:bb:e4:d2:fb:a1:36:ce:
39:f8:09:f6:a5:4c:7e:b0:fc:16:8b:90:ff:ae:a1:
e7:be:d0:71:01:f0:ec:e6:29:24:88:39:64:2a:56:
59:bd:50:32:b0:5a:df:2d:fe:a7:6d:b1:ea:10:13:
58:95:05:19:8a:85:da:0a:2b:94:4e:3e:df:45:cd:
ac:a6:6b:e9:6a:f4:5a:99:91:4d:60:54:f9:02:c5:
eb:e8:6e:02:17:44:07:32:fa:c3:fa:48:ab:52:69:
cb:15:d5:ec:d8:23:79:f7:cf:d6:97:44:4f:85:28:
ff:5c:08:fb:fa:ae:1a:6a:20:cb:bd:19:5b:68:86:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:90:A0:CB:0F:A2:11:82:49:FD:BC:59:B8:CC:5D:87:EE:8F:E6:E2
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e8:fc:15:26:8c:81:ed:3c:ce:31:09:55:f7:66:2b:bb:c5:
00:c6:eb:fb:a7:b5:66:a0:04:fb:be:13:9d:1c:9a:d8:8f:b0:
78:99:c6:d6:2f:f6:6e:65:91:08:32:66:ea:e7:ad:76:66:65:
1d:13:6b:26:95:c4:92:da:3c:d1:d8:fa:6a:cb:1d:d1:93:de:
4b:9d:0c:5a:14:28:05:00:60:c1:9c:d0:f4:c9:b4:61:96:0e:
37:2d:5b:ed:8d:71:25:ad:94:bf:8d:40:39:45:20:ac:8e:13:
1d:51:b6:83:4a:69:38:a2:a7:d9:fd:85:30:ad:65:51:80:10:
da:d8:58:a1:e6:69:2b:6c:53:44:5d:a2:b6:89:8e:f3:fb:48:
dc:6e:0a:13:a3:41:1d:dc:47:63:cd:e1:76:f5:48:14:a0:1e:
2a:a2:f8:12:f1:8b:03:29:0a:15:c5:75:8b:dd:6c:51:1d:1a:
d4:02:21:d8:e5:f0:fb:24:06:ba:d1:b0:06:34:23:8f:6f:3a:
87:99:ef:9c:38:93:dd:72:54:29:73:55:1d:fa:f2:07:09:08:
2c:95:ca:7b:30:f7:a8:a9:03:34:2c:5d:07:4d:35:be:ef:16:
34:5d:31:6c:d7:38:90:af:92:f2:b4:f5:4f:b3:eb:21:76:03:
f8:3e:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:46:44 2026 by rpki-client