Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier: pl5w3u8gwU/zcC+dv7BsnptxyfNJq2V4DpOrAoX7MfU=
Subject key identifier: 12:68:E5:78:15:01:EC:8E:5E:9A:F9:EB:43:EF:1A:2B:E3:C2:22:DA
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 019D2695E2C9F89F384B269805B893D299F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: yAEVGUqj6FeUM5f89eXzASvxz5hv5Pu+a0aIKXEqREE=)
2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e2:c9:f8:9f:38:4b:26:98:05:b8:93:d2:99:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=1268e5781501ec8e5e9af9eb43ef1a2be3c222da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:a1:20:3d:71:79:7d:13:d4:90:5b:fe:ee:
54:e2:ca:bc:8f:a5:ec:db:45:77:af:c3:6e:19:69:
c1:bd:a5:37:14:a2:88:a9:27:28:2e:1a:75:68:a6:
e4:31:6c:e8:d6:bb:17:df:cc:9b:58:a6:2a:61:03:
af:25:94:9d:44:ce:a7:1f:a4:6f:1e:f0:91:2f:7c:
c2:44:06:ea:8d:e0:fd:ad:e6:4b:f6:2e:ea:eb:ef:
e3:88:d9:5c:f8:bc:57:b3:34:16:fe:e1:73:c3:e5:
fe:aa:0d:41:7a:c7:f5:66:3c:6f:d6:6c:66:5b:e7:
9e:d3:81:dd:d3:84:a1:c3:59:7f:d3:b9:91:ad:13:
dc:ad:9a:40:4c:51:36:69:88:07:1e:28:98:61:53:
b4:84:8c:6b:d4:37:67:c1:46:42:a9:c4:2b:00:2f:
cd:53:d8:41:59:24:31:0b:00:33:61:9e:b0:2a:74:
cc:c9:97:a3:4a:98:60:77:82:e7:e2:08:ac:e3:5a:
b8:4b:58:e1:0f:4f:b3:de:78:dd:c7:b1:f4:68:78:
ac:9d:c7:37:43:5d:26:58:41:a3:fd:82:df:e8:63:
dd:b7:95:b5:b5:a3:29:d0:07:5f:6a:a3:fd:c9:9f:
b9:85:fb:3c:99:18:68:63:0d:d6:b6:ff:cb:02:45:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:E5:78:15:01:EC:8E:5E:9A:F9:EB:43:EF:1A:2B:E3:C2:22:DA
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ff:09:66:4b:e2:1d:3e:10:f4:d6:ae:fe:31:5e:ca:30:cf:
4a:92:3c:a5:7d:2b:53:0a:79:99:b1:da:15:56:f2:f8:7c:51:
c9:dd:4b:b1:b5:c6:27:55:d8:84:a4:9e:fb:10:65:2c:35:57:
8d:05:68:cc:ee:5a:b6:03:e9:50:45:3f:af:6b:82:39:e8:d2:
40:d0:e9:58:9c:83:65:c2:0c:c6:71:18:fa:b3:1e:6c:12:ba:
c1:ec:51:14:e5:78:96:7a:ec:85:1a:c7:46:a7:77:17:79:eb:
ae:cf:bc:73:9c:27:90:dd:46:12:0e:4a:18:f5:16:17:c3:e9:
7b:5b:bc:f3:2b:4d:e7:1d:5a:02:a8:ea:49:d0:06:cd:98:d6:
d9:f1:2d:64:18:e6:60:96:ac:6b:e9:c4:c3:1e:52:fe:49:00:
60:75:8e:e8:82:5f:77:04:23:29:06:33:46:75:7a:aa:27:f0:
72:22:ad:89:9f:09:24:16:7b:f2:79:26:92:28:fe:99:c0:59:
86:9a:00:fd:60:ca:79:ea:f1:df:06:82:07:0b:c2:55:22:97:
1a:16:8b:bf:fd:84:ac:4a:4f:19:f3:05:0a:04:5f:80:e9:29:
c6:d2:9b:94:2b:9e:9b:80:7d:9f:c9:b9:9f:b4:f3:43:12:ff:
8f:cc:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:14 2026 by rpki-client