Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: D7hCDMMczoi6/JYxy/9RKz39lu+KODBw0ZEYSbMZe5o=
Subject key identifier: BA:24:CE:34:9C:B0:AA:7B:40:EC:D4:15:1D:B6:63:2A:D1:BC:A8:24
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 01A0CFDAC0D18CD00D9C2948F0A9ACAA11D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 20:00:14 +0000
Manifest this update: Wed 23 Sep 2026 20:00:14 +0000
Manifest next update: Thu 24 Sep 2026 20:00:14 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: 5u4HVh9mSD9cQLLIbTBBlEXJ1kCSih3IwDWEvI8kwIc=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:c0:d1:8c:d0:0d:9c:29:48:f0:a9:ac:aa:11:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Sep 23 20:00:14 2026 GMT
Not After : Sep 24 20:00:14 2026 GMT
Subject: CN=ba24ce349cb0aa7b40ecd4151db6632ad1bca824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:f4:3e:d4:31:2e:79:2e:fb:f3:6e:51:d7:
80:3d:fb:49:68:61:3b:d6:40:50:bb:0d:3f:c9:bd:
33:a6:ac:d7:61:58:60:de:1f:8d:a6:39:42:1f:6b:
57:de:a8:ae:aa:57:e7:bb:70:61:fa:61:a2:d3:7e:
ff:c6:85:2f:f4:d9:a9:60:c1:6c:e5:1c:48:5e:ac:
b0:cd:25:f8:86:ef:d3:c0:a6:67:cd:0f:58:77:f5:
73:d8:d6:fa:2f:17:82:52:72:fb:bc:08:8e:1b:e8:
ca:bf:22:9a:c7:0c:62:73:5b:03:21:e4:a9:0e:1d:
71:8b:ad:5a:f7:20:01:81:1c:72:4a:2c:69:b9:3f:
29:5f:85:b5:50:b0:b4:6a:ff:0f:39:44:21:81:10:
e3:bd:5f:c6:48:2f:4e:f6:da:3c:e1:6f:7d:84:3c:
e9:67:1b:c5:7e:ba:33:f4:38:bf:97:9b:66:e8:ee:
9f:b7:c3:52:cf:0d:8e:9e:b5:35:45:3f:82:6f:e1:
9f:64:fb:ab:c2:ba:02:d4:b2:58:5c:d2:83:01:3c:
c2:69:dd:26:37:64:df:e2:3c:b5:fd:4f:72:ae:e3:
1d:d2:37:89:88:c7:01:fa:6a:37:8f:96:24:9a:53:
74:ad:b1:ab:da:08:28:8c:91:1e:b3:f6:da:5a:31:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:24:CE:34:9C:B0:AA:7B:40:EC:D4:15:1D:B6:63:2A:D1:BC:A8:24
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:47:1b:94:52:bc:fb:19:2f:9e:9e:8a:82:3d:57:f5:48:f6:
d3:00:c8:0c:7a:af:a1:fd:09:74:b7:fe:1d:bd:38:e8:76:ec:
52:b4:43:c9:6c:13:59:d0:ba:38:26:89:43:7f:0f:24:da:c4:
95:32:e9:4b:a3:a1:16:ae:9d:de:f8:9c:30:b4:31:78:20:77:
9f:be:e4:11:87:d2:6e:43:93:8e:32:43:13:b2:a1:2d:91:c3:
9c:7d:fa:24:b1:d4:b1:a6:ad:21:de:53:8a:68:7b:17:4a:6f:
cf:cb:fb:5d:e8:85:3a:6f:32:2e:68:74:04:ae:e2:e8:51:dd:
30:2b:b9:4e:41:44:a3:33:a0:01:31:60:e9:14:5d:e3:0b:77:
bb:c5:d8:d0:7a:34:5e:af:9f:03:86:7b:ef:f1:74:78:25:cf:
0f:5f:32:ae:33:36:1a:4f:22:21:30:7a:85:6b:68:59:02:05:
73:ff:3c:4e:39:44:58:f1:4d:ef:11:b5:a9:5c:d1:fb:35:c7:
05:d3:bb:b7:3e:04:cd:51:75:99:dd:ad:2b:35:cf:e1:48:ef:
b1:15:aa:7f:19:51:92:88:13:59:38:89:49:d5:61:44:d7:f8:
8e:c2:49:bf:fe:90:68:51:41:ec:3c:d3:6f:9e:52:71:3a:34:
11:d0:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:30:52 2026 by rpki-client