Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier: BrgllAucSqJqVIKxrEO9gkoUCKzdFSx2mybyXC1aCGk=
Subject key identifier: 5B:B1:3C:EF:EB:D5:9F:70:AF:F5:A7:02:09:C5:59:65:C6:3B:D4:BE
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 01A1DF8387FA5B8A4BCF76F9C2138BE363B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 14:01:41 +0000
Manifest this update: Sun 15 Nov 2026 14:01:41 +0000
Manifest next update: Mon 16 Nov 2026 14:01:41 +0000
Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: td8QuLEV2ndnukFUnYzFYVBovFSshP+/2DC9xTOikys=)
2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:87:fa:5b:8a:4b:cf:76:f9:c2:13:8b:e3:63:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Nov 15 14:01:41 2026 GMT
Not After : Nov 16 14:01:41 2026 GMT
Subject: CN=5bb13cefebd59f70aff5a70209c55965c63bd4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:c6:81:a1:03:b2:9b:a0:92:c2:4a:44:45:
df:6e:e5:c3:e7:8d:55:c4:5d:66:f4:d5:05:12:e8:
e1:05:05:3a:91:3e:56:0c:a7:ed:58:20:9d:09:d1:
5b:92:9b:f0:bd:7c:7c:c4:75:2e:32:22:05:bd:fd:
02:f3:3b:d3:72:35:85:35:02:f3:61:e2:16:02:fa:
f7:e1:ca:f1:a5:1c:fb:33:73:c6:70:bf:92:6a:d2:
5f:c3:79:43:7a:7d:d7:2d:5b:7a:46:37:ca:35:e6:
8b:59:e6:9d:9d:ec:30:79:dc:78:f4:1d:6a:91:03:
32:0e:aa:40:fc:d9:99:49:76:01:30:ac:78:71:e8:
83:3e:14:1e:f3:2c:96:8c:8f:0f:54:77:0d:69:9c:
4f:eb:3e:e1:7a:4f:63:97:45:ee:fe:86:6d:d0:5e:
e0:99:25:2c:aa:79:12:cc:a5:6a:cd:69:f0:85:95:
38:38:38:75:85:9e:bc:02:91:c6:93:01:0e:04:20:
0f:ea:f5:18:28:e1:fc:2c:c5:f4:bd:cb:d8:9a:5d:
b7:a6:d9:c4:8a:66:54:b1:32:88:0e:eb:00:5e:c9:
25:63:33:67:1b:71:32:5d:78:17:50:4a:e0:cf:fb:
5b:46:24:d4:f1:27:f0:30:de:63:88:c7:1d:ac:2a:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:3C:EF:EB:D5:9F:70:AF:F5:A7:02:09:C5:59:65:C6:3B:D4:BE
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:77:88:cf:4c:c5:bf:cd:ff:be:61:37:09:07:84:8c:36:
b9:0e:c8:59:33:c0:7d:d1:7f:4d:76:b5:6d:25:5a:1c:26:a3:
7f:dc:de:63:e1:98:53:13:2c:73:a9:97:6c:a6:c8:a5:6f:4f:
f6:09:e9:b2:64:b8:82:45:37:c0:8d:c3:3d:fa:46:42:f7:c6:
70:a9:cc:69:13:54:32:eb:6e:cf:79:46:17:ea:d1:62:b7:26:
73:d3:ff:14:a9:97:48:30:78:17:88:c8:87:f5:c7:8b:bc:44:
a0:39:1e:6a:c5:72:bf:6b:f0:f4:11:fa:25:29:5b:08:2d:21:
e5:bf:d5:bd:b7:0c:91:00:11:eb:2f:94:5f:42:71:4b:b1:aa:
a5:dd:a6:4f:ff:b5:55:78:4a:66:97:1f:33:28:68:57:63:54:
8b:8b:63:79:17:82:bc:18:e5:b0:fc:ec:c2:2d:ee:57:14:12:
e0:a2:20:30:26:71:8a:e2:12:99:ec:7d:5b:8e:e4:2a:de:d2:
57:9d:b5:4a:9b:6d:60:61:03:60:47:f4:3d:1a:ea:95:0a:58:
ce:3f:99:22:ea:ef:2a:7d:bd:95:4f:33:98:5e:a4:0f:75:05:
56:0c:a1:5b:99:72:22:f5:3c:ec:9b:fd:52:ed:27:3a:44:79:
78:26:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:53:57 2026 by rpki-client