Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
File: BsMIkdp--ppkRO_siLS-9VzLvlw.mft (raw, json)
Hash identifier: dY3jdWFZ4/R60m6uEw4wW6LtBiBDBbvLtc32EzU7YeY=
Subject key identifier: 45:C7:DA:BD:31:49:EB:F0:C1:79:9F:00:5B:3F:B1:69:A5:08:08:8C
Authority key identifier: 06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C
Certificate issuer: /CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
Certificate serial: 01A0D0121983B13F2820A1047BDD7A54E6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
Manifest number: 6A
Signing time: Wed 23 Sep 2026 21:00:42 +0000
Manifest this update: Wed 23 Sep 2026 21:00:42 +0000
Manifest next update: Thu 24 Sep 2026 21:00:42 +0000
Files and hashes: 1: BsMIkdp--ppkRO_siLS-9VzLvlw.crl (hash: BRCLIMTNnVmxsqr7m4Tw+B9ETBa5i8qW9SpfvjiBjbs=)
2: JuC5nZKnQ4ztYgFcDwtFq2XDq_Y.asa (hash: ctpPmQWy9cwdj8Hpp0Sbe6L0bxH2itmZpUY8mPfU7yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:19:83:b1:3f:28:20:a1:04:7b:dd:7a:54:e6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
Validity
Not Before: Sep 23 21:00:42 2026 GMT
Not After : Sep 24 21:00:42 2026 GMT
Subject: CN=45c7dabd3149ebf0c1799f005b3fb169a508088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:0d:88:2f:eb:bd:81:45:4b:27:a4:33:d9:
37:44:84:35:d9:d5:f2:e2:b2:35:a9:cd:57:cf:91:
c5:51:0a:cd:56:5c:05:54:19:4c:56:23:9c:3e:d0:
55:f7:b7:92:f2:b0:21:91:1d:4d:94:19:b7:aa:84:
93:49:5f:1a:77:35:53:92:00:16:85:a9:8d:c3:d6:
25:b5:dc:ef:19:1b:eb:81:e3:d3:45:d1:a8:00:1e:
97:56:11:10:a8:94:08:5a:0e:66:ec:00:ad:d4:09:
24:92:b4:0f:f1:a5:e7:41:ab:f0:2d:64:61:37:0d:
4a:e9:3b:38:e7:62:35:f9:2d:64:de:3d:18:aa:e3:
93:d4:f1:99:1c:6d:9b:de:8c:09:44:16:6f:c0:e4:
62:bb:6f:d3:1d:0a:26:fa:49:c6:38:27:ec:0d:ac:
72:8a:78:74:b0:19:69:6d:fb:29:91:58:4e:6e:36:
ec:49:7f:af:1d:6f:73:b1:32:de:36:d4:94:4b:bc:
61:74:96:58:1d:50:95:77:78:90:87:4a:3b:55:03:
1a:2e:05:4f:e3:dc:b0:73:db:c3:3b:3a:49:c3:13:
9f:1a:a1:47:b6:d6:5e:40:a3:4e:19:c7:ec:16:04:
3e:d5:6d:f8:b9:8b:f9:4e:6a:c7:a9:7b:1c:90:eb:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C7:DA:BD:31:49:EB:F0:C1:79:9F:00:5B:3F:B1:69:A5:08:08:8C
X509v3 Authority Key Identifier:
keyid:06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:ea:31:7a:cb:f8:e3:73:b2:54:cc:97:6a:73:09:8d:7a:
95:3f:ed:a1:2d:20:d6:e8:9d:bd:ca:dd:cd:eb:f8:81:01:2b:
8d:fd:cb:7f:6b:1d:d1:b4:09:37:8d:4b:90:6c:54:fc:c8:cb:
3e:2a:ee:f0:7a:4d:50:7b:e8:f8:24:70:f2:d6:32:3a:f4:84:
15:39:f1:6f:27:44:8f:b3:7c:2e:be:a9:f0:5e:13:e2:35:ba:
e0:b7:b4:a4:9e:ae:fc:06:ed:b0:f7:5c:53:49:c0:f3:31:70:
7c:ab:b7:0c:19:c3:b7:e4:d2:13:ba:4e:c7:c6:9e:47:82:76:
f2:b1:3a:1e:e4:1a:6f:03:8c:0f:d9:fa:6a:89:e3:f6:17:3e:
cf:24:5b:18:4a:7f:d5:e8:20:18:63:77:9f:d3:8c:6a:62:b9:
97:14:4c:29:2b:b8:d9:e2:41:93:6c:bc:6a:80:20:a7:27:8e:
7f:55:97:d9:7b:c0:2b:59:c7:65:80:ae:61:c4:c9:89:42:f9:
6a:d9:39:cf:3f:89:25:69:54:c7:9f:2b:b8:5a:12:23:85:dd:
f2:5f:c8:4b:53:fc:76:1f:c7:9c:28:a2:2e:87:0e:c3:28:ce:
f8:17:56:be:74:64:5f:e4:11:2d:af:70:e1:10:a4:82:74:c2:
45:dc:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:17:17 2026 by rpki-client