Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: tArdwSdYz4XD09t7UR+nw1fThDzOqvN9K9hDOW+s5mA=
Subject key identifier: 7F:19:03:92:CC:B3:FA:36:09:31:76:33:6F:A7:F9:49:6B:09:19:D7
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 019D27049DCA41C7465BAEFFDE76C5C3F54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 0BB8
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: I5Facp4Qbs9v9gtsMe5eEZZV6slSHEP3DOJ/FXn5lIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9d:ca:41:c7:46:5b:ae:ff:de:76:c5:c3:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=7f190392ccb3fa36093176336fa7f9496b0919d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:72:14:3a:b1:75:25:bb:c4:c8:5f:b8:7d:
65:8c:53:ce:a9:16:dc:ce:39:32:74:8a:cb:3f:d3:
38:ec:5c:ec:fe:c7:9a:0e:f7:15:a8:01:45:fa:72:
d9:48:ff:00:e2:1c:3f:00:69:24:56:ee:aa:09:03:
a2:1a:f6:86:49:2c:ac:04:a6:66:86:a5:28:f5:93:
f1:12:b1:99:08:e7:15:65:32:fe:72:a5:2d:7e:36:
dc:01:4b:34:16:ca:89:60:00:6c:b0:3a:81:ca:81:
9f:76:e5:01:01:bd:1f:29:81:d3:b7:ac:19:75:35:
d5:9c:f5:1a:1c:8f:d7:ec:ef:be:04:47:6f:55:d3:
5d:b8:0b:e6:74:d3:d5:b1:b9:d0:37:79:61:50:cf:
b8:9c:73:ba:36:3f:e2:25:a6:8c:6f:27:50:a0:cd:
f3:34:b2:0e:32:77:c2:04:43:ba:7a:9c:45:c4:47:
da:67:6c:93:57:99:b1:9d:76:de:e2:f2:31:7b:0c:
09:c6:ce:d8:e3:fc:62:ac:ee:67:e4:f7:e5:74:4b:
4f:4c:72:9f:3c:7f:2d:ec:95:e4:21:1e:3b:0f:80:
14:c0:1d:06:1e:15:c2:11:a2:7c:1c:a9:90:49:73:
8d:5a:b9:fd:9e:de:d5:56:de:c7:ab:5b:7b:c3:56:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:03:92:CC:B3:FA:36:09:31:76:33:6F:A7:F9:49:6B:09:19:D7
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:79:ed:c9:9e:a3:c8:94:2a:22:98:65:2b:d6:fd:89:90:62:
2a:65:5b:1b:c4:05:d7:94:7f:43:08:f0:db:a0:37:d7:0e:59:
f8:5b:e6:0a:1e:90:03:21:fd:d8:04:0d:62:3b:9d:ad:bf:23:
8e:d3:4a:fd:b9:91:86:9c:c9:93:39:30:63:09:27:42:c1:04:
31:4a:39:8d:f4:0a:ac:c6:9a:ae:06:0e:80:9b:d6:a5:05:51:
34:f9:6c:9e:61:e2:a5:f2:ac:71:34:6e:51:9f:2e:51:27:0a:
7c:ad:ca:cb:ce:f4:b3:fc:53:0b:36:a8:9c:96:5a:09:e2:a5:
9c:9c:41:93:e2:11:23:5d:1b:55:e8:41:24:9d:c4:a7:19:3b:
a3:e8:7b:42:64:f1:98:82:0c:1c:47:ab:38:92:05:47:f0:43:
89:5d:ed:d0:88:ce:0f:70:95:68:3b:f4:e6:e4:9c:38:ee:6d:
08:69:2f:f4:0b:63:a1:18:1f:8e:2c:f3:fd:4f:d4:c9:64:e0:
f7:81:81:fc:6a:03:9f:f3:86:ad:69:25:7d:c6:d9:54:10:ac:
95:96:bf:f1:f2:b1:d5:57:07:a5:45:e0:78:5c:fb:9f:18:ad:
e2:62:40:cd:d3:8b:d9:ed:54:c6:d9:21:62:46:86:53:07:9e:
c5:24:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:22 2026 by rpki-client