Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: 3vV1Rzb+rhD6pLTaAX9q1hQiJ6MT7qtysMvgm/nG0ao=
Subject key identifier: 9B:F4:AE:00:E8:B3:47:15:C5:68:7B:A0:46:DA:44:91:00:2D:6C:7F
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 01A0D5702D1D89EF1DE69621F31322C69812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 0DA0
Signing time: Thu 24 Sep 2026 22:01:33 +0000
Manifest this update: Thu 24 Sep 2026 22:01:33 +0000
Manifest next update: Fri 25 Sep 2026 22:01:33 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: pcLKiaRQCaqEQJGinemGurMiXkHK64UjDJDwibYMDl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:2d:1d:89:ef:1d:e6:96:21:f3:13:22:c6:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Sep 24 22:01:33 2026 GMT
Not After : Sep 25 22:01:33 2026 GMT
Subject: CN=9bf4ae00e8b34715c5687ba046da4491002d6c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:86:60:a6:e1:e4:8c:42:f8:ee:9a:29:c0:
65:c2:6b:d4:e3:bc:35:2a:eb:4d:88:93:86:6b:53:
9b:24:f8:da:34:10:68:cb:fc:0a:27:c2:17:bb:db:
cc:5e:ac:b7:c7:a1:dd:7e:28:79:c2:59:20:34:2a:
d0:0a:57:7a:b0:64:e0:bb:ae:bc:07:49:d6:91:4a:
5f:29:f0:68:b4:6a:02:7c:d5:8a:4e:d7:be:eb:b9:
40:52:ef:16:3c:ff:4a:69:13:aa:df:c0:01:b8:bf:
09:76:7e:18:88:a1:8a:27:a5:a7:00:f6:03:84:91:
d8:c9:a4:fe:34:0e:f5:38:11:c7:fa:9a:0a:f1:54:
26:a1:14:5b:26:7e:c1:30:82:8e:d5:4a:ac:a9:32:
3e:61:e4:e8:f3:65:93:d8:3b:fe:0a:cc:11:cd:39:
c6:48:a1:29:79:e4:de:f5:be:ea:5b:85:47:d9:c7:
30:58:10:f2:ac:ef:8b:ca:a1:d6:6f:65:9b:e2:01:
26:23:6d:23:47:76:0a:4d:a9:2a:e0:2c:76:76:3a:
16:e5:0c:a3:e5:b7:9a:b7:65:85:a9:4a:54:0a:52:
3f:5c:4a:a8:78:18:e9:9e:8c:da:30:5b:9d:32:f4:
87:f9:7b:1d:1e:0d:f8:e7:d5:43:ad:25:67:a3:fb:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:AE:00:E8:B3:47:15:C5:68:7B:A0:46:DA:44:91:00:2D:6C:7F
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:10:67:66:0f:0c:21:06:00:d0:48:dc:0c:46:3e:fa:bb:
0e:5c:5a:b1:51:44:ee:be:2e:8e:a6:78:2d:38:bb:0b:27:2a:
66:4a:90:c1:3d:2c:b1:64:1a:43:de:1a:0d:0b:ad:6e:3a:f8:
f8:12:04:0a:c1:3d:1d:f9:7d:41:bf:05:01:4e:a0:89:81:dd:
b4:44:16:eb:2b:7c:77:12:0d:db:f0:e6:c8:70:39:d3:3f:fe:
87:5e:86:c6:a6:6e:d7:d2:1b:2e:c9:f5:97:3b:64:68:08:1d:
b4:4b:43:91:9c:27:bd:f8:cf:9d:3c:cd:a4:44:62:7e:7e:b6:
9e:ab:17:5d:ff:cd:0f:a7:aa:15:b4:53:5e:46:40:2e:36:3c:
4f:18:b4:8f:2f:b6:79:b6:a5:e7:31:df:0d:ad:9a:f3:db:1b:
43:a4:23:14:a5:2d:20:55:82:cc:5c:09:23:03:26:a5:fe:be:
6f:2e:f8:e7:18:63:fa:c0:33:95:6a:10:f2:9c:74:62:81:7a:
da:7e:69:29:ce:f3:4c:e3:76:18:62:ac:8d:0e:a9:9a:5d:6c:
3c:77:a6:7e:67:cd:32:cf:f1:55:13:0d:d2:ab:10:e3:ab:4e:
8b:d3:b0:dc:99:5e:9d:bd:84:19:07:f8:68:ef:11:dd:5d:cc:
bc:d1:61:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcC0die8d5pYh8xMixpgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ2ZTgyMzQ5NDcyY2NhZmQwYTA2OWY1NzhmNjQ3YzMw
YTk4NDYwHhcNMjYwOTI0MjIwMTMzWhcNMjYwOTI1MjIwMTMzWjAzMTEwLwYDVQQD
Eyg5YmY0YWUwMGU4YjM0NzE1YzU2ODdiYTA0NmRhNDQ5MTAwMmQ2YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12yGYKbh5IxC+O6aKcBlwmvU47w1
KutNiJOGa1ObJPjaNBBoy/wKJ8IXu9vMXqy3x6Hdfih5wlkgNCrQCld6sGTgu668
B0nWkUpfKfBotGoCfNWKTte+67lAUu8WPP9KaROq38ABuL8Jdn4YiKGKJ6WnAPYD
hJHYyaT+NA71OBHH+poK8VQmoRRbJn7BMIKO1UqsqTI+YeTo82WT2Dv+CswRzTnG
SKEpeeTe9b7qW4VH2ccwWBDyrO+LyqHWb2Wb4gEmI20jR3YKTakq4Cx2djoW5Qyj
5beat2WFqUpUClI/XEqoeBjpnozaMFudMvSH+XsdHg3459VDrSVno/v71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv0rgDos0cVxWh7oEbaRJEALWx/MB8GA1UdIwQY
MBaAFAVdboI0lHLMr9CgafV49kfDCphGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEt
NWFhZTNhYjc4OTk1LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEtNWFhZTNhYjc4OTk1
LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNMQZ2YP
DCEGANBI3AxGPvq7DlxasVFE7r4ujqZ4LTi7CycqZkqQwT0ssWQaQ94aDQutbjr4
+BIECsE9Hfl9Qb8FAU6giYHdtEQW6yt8dxIN2/DmyHA50z/+h16GxqZu19IbLsn1
lztkaAgdtEtDkZwnvfjPnTzNpERifn62nqsXXf/ND6eqFbRTXkZALjY8Txi0jy+2
ebal5zHfDa2a89sbQ6QjFKUtIFWCzFwJIwMmpf6+by745xhj+sAzlWoQ8px0YoF6
2n5pKc7zTON2GGKsjQ6pml1sPHemfmfNMs/xVRMN0qsQ46tOi9Ow3Jlenb2EGQf4
aO8R3V3MvNFh+g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:56:11 2026 by rpki-client