Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
File: Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft (raw, json)
Hash identifier: bEl+I+f67lsuNlRl1vtuWfJYcsMLIOFhta4nwiCV/yk=
Subject key identifier: 36:E6:7F:D6:44:29:96:F6:B6:8E:5A:F5:EB:F5:23:F9:D1:F3:17:60
Authority key identifier: 05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
Certificate issuer: /CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Certificate serial: 01A04085899F904BF56F1AF295822E7EC57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
Manifest number: 01D2
Signing time: Thu 27 Aug 2026 00:01:28 +0000
Manifest this update: Thu 27 Aug 2026 00:01:28 +0000
Manifest next update: Fri 28 Aug 2026 00:01:28 +0000
Files and hashes: 1: Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl (hash: wUk8By9cfZPI1TFjaVA9oWgXGaPDgP96QORb458mdnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:89:9f:90:4b:f5:6f:1a:f2:95:82:2e:7e:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Validity
Not Before: Aug 27 00:01:28 2026 GMT
Not After : Aug 28 00:01:28 2026 GMT
Subject: CN=36e67fd6442996f6b68e5af5ebf523f9d1f31760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:8a:aa:fc:a5:6d:fa:4a:e9:b2:ee:77:8a:
f4:a0:2b:7a:c2:05:7d:e7:94:75:a1:5b:76:e4:a8:
a9:5c:fc:af:a1:85:6f:a2:c7:9a:04:80:dd:b2:60:
75:c6:c6:e5:cf:23:5c:45:5b:e0:80:3e:d3:a7:fb:
77:88:93:3b:39:5c:b4:fa:03:2b:64:fd:32:59:3e:
5a:76:08:07:8a:5f:27:46:b2:e0:21:36:38:a6:61:
87:6c:78:e2:b3:8b:e9:31:6f:88:46:57:50:70:32:
da:7b:e2:b5:dc:43:a2:cf:9f:fe:5f:ae:c5:d5:0d:
b2:ed:cd:bf:86:4f:53:55:ec:25:48:f9:47:e3:ac:
01:f6:78:f5:16:63:8c:03:0a:65:5e:2d:b0:46:1a:
29:14:cf:6a:0b:c1:67:c2:04:00:09:70:4d:06:79:
79:69:0e:92:ae:8a:0b:2c:6c:77:9f:32:f2:d6:f6:
00:28:54:ed:69:4a:2c:ef:17:86:24:a2:cd:33:03:
23:6e:ce:67:7f:d1:69:7d:93:61:3d:2d:0e:2c:f3:
4a:b9:48:12:d1:68:02:d0:31:f2:31:20:a2:f6:98:
b4:93:06:8f:01:4a:72:ff:d2:8a:b5:62:c3:03:f1:
1f:dc:cc:9a:04:81:fe:4a:af:38:87:8d:fe:e7:1f:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:7F:D6:44:29:96:F6:B6:8E:5A:F5:EB:F5:23:F9:D1:F3:17:60
X509v3 Authority Key Identifier:
keyid:05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b6:4f:90:87:6d:52:51:94:fc:67:f6:fe:f0:6b:55:9c:35:
20:13:79:c9:6a:da:01:d1:c8:cf:71:6d:e3:b9:0c:5b:44:ff:
b6:1d:32:f7:e9:d3:1d:86:61:88:85:e3:82:5d:c7:38:63:b5:
71:d2:02:51:04:4a:ca:6b:07:4b:e5:e2:c0:9e:a8:f1:41:8c:
b4:3f:5e:ae:99:c8:eb:19:fe:b8:0d:e9:0d:88:6a:79:59:67:
e1:e8:f6:35:05:f8:f5:28:18:61:6c:23:3e:f7:7c:78:a7:df:
b3:f0:d4:5e:44:48:07:28:cf:c1:55:bc:a1:b3:76:4c:82:ce:
55:cf:8d:f7:1e:5b:57:73:b2:c0:43:ab:19:79:44:3b:1e:72:
a7:93:45:0d:2b:51:1f:48:c2:6c:cc:9c:8c:29:0e:1f:9f:92:
2e:b6:4e:a9:1b:fa:78:c6:5f:55:05:ce:ed:46:0c:13:70:4b:
14:d3:bd:05:7f:04:79:21:c8:44:22:f0:61:f5:a5:08:bd:e1:
38:35:52:af:fe:27:4c:50:dd:d5:42:a1:ac:e9:1d:13:b2:8f:
44:8a:e2:9b:aa:8b:12:25:2d:ae:8f:e6:a5:1c:f0:a1:99:e9:
58:63:05:95:13:8c:ce:bf:df:53:de:68:a3:22:46:0f:a5:12:
5c:89:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:37 2026 by rpki-client