Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: Ns2p3WcblbZF6pGoTiL3k5IzKkBzd/3AoiIBJEPjbZY=
Subject key identifier: 57:02:17:17:80:9C:98:68:28:22:AB:B5:B3:72:B1:D4:A8:7A:16:79
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019E1E6CD759B1A3DF123B3DAEAA3B017455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:49 +0000
Manifest this update: Tue 12 May 2026 23:01:49 +0000
Manifest next update: Wed 13 May 2026 23:01:49 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: bqayZmeL2js8yF+TbFRqqdCCKwZ1AEcPmsSVrcUJMFE=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:d7:59:b1:a3:df:12:3b:3d:ae:aa:3b:01:74:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: May 12 23:01:49 2026 GMT
Not After : May 13 23:01:49 2026 GMT
Subject: CN=57021717809c98682822abb5b372b1d4a87a1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:f5:45:1c:95:cf:d5:4c:44:f2:97:d4:8e:
ec:2e:eb:12:b1:5b:ed:18:cc:dc:1a:a6:62:be:1b:
29:a6:18:82:0e:f8:24:52:a0:ee:eb:d4:fb:4f:60:
3f:0c:54:28:91:f4:56:37:41:f5:29:c2:7c:fd:65:
cd:48:94:11:ff:32:e7:77:44:96:9e:80:79:ca:9d:
3b:d0:40:b8:1c:c0:0e:81:97:ce:ad:a9:98:d1:37:
8f:e7:25:1b:95:a9:8b:3d:ba:8b:8d:0f:f2:36:5e:
b3:bb:c3:85:d7:58:0c:ec:50:9a:bc:e6:95:68:80:
b5:4f:2c:18:75:f2:63:bd:4e:9f:b5:11:61:a0:ca:
21:15:fc:1c:ee:bd:7c:0f:64:4e:d1:b6:1a:07:69:
c2:63:b9:e1:33:1d:70:77:8d:d8:0e:b3:75:fd:f6:
78:9c:a0:1b:55:00:8e:66:bb:20:d0:bc:89:1e:9f:
cd:c1:55:7e:98:47:d5:c2:d6:33:db:c0:c7:47:62:
e8:85:39:6d:1a:f3:5d:26:8b:39:68:cc:6f:48:b6:
59:4b:f6:e6:c2:31:cb:69:30:63:a4:53:26:a1:94:
01:02:ce:b4:cc:ee:37:27:00:70:80:fe:88:a0:a9:
6a:2d:be:72:71:58:69:32:23:5d:8e:ea:70:07:60:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:02:17:17:80:9C:98:68:28:22:AB:B5:B3:72:B1:D4:A8:7A:16:79
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b5:c2:84:e0:11:ea:11:9e:8a:01:00:8a:2a:a9:55:30:e0:
2a:64:4d:ec:39:9e:31:13:3f:ca:80:f5:8a:bc:7f:93:b1:78:
e2:da:8c:cf:67:cd:31:38:ca:ce:72:f7:ab:83:bd:c8:ab:70:
0f:01:f1:f1:81:86:03:90:1b:36:3d:95:71:32:90:10:09:9f:
f7:5d:dc:8f:f1:fb:5d:4c:80:cb:d3:d2:6a:21:d6:2a:04:f7:
f4:42:7d:c8:4a:8d:72:23:02:01:63:d6:9e:76:c7:52:46:81:
03:04:11:bb:d2:52:f4:e7:a2:fb:9d:c5:87:5d:a8:65:52:67:
4d:6c:cd:4b:d3:ec:d3:6d:e7:60:80:fa:62:36:21:eb:8d:a8:
04:3c:ea:3b:fb:b2:df:f6:e7:2c:04:b0:67:64:7b:b6:aa:12:
9d:a7:81:6c:d1:56:79:8a:dd:e7:c7:8a:7e:37:34:6c:db:b7:
10:cb:2a:67:9c:b6:7e:fc:2a:35:43:04:ee:75:c2:f4:a8:f2:
f0:be:9a:53:7e:a8:63:9b:d6:f0:c7:eb:43:ef:ab:f1:26:29:
4e:28:a4:37:39:bf:d4:7c:ff:1d:81:a3:8e:89:fe:d5:74:9b:
3a:f8:a6:30:41:72:f4:3e:9e:cb:6c:a3:f9:b8:19:7a:10:23:
af:7e:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:23 2026 by rpki-client