Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
File: Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft (raw, json)
Hash identifier: jBOn+khG8fPOMiryP2g5eI5t1aOmz+7FXYa5pLsnyz4=
Subject key identifier: 8B:27:C9:EE:7D:8C:52:43:58:44:50:B3:50:09:BD:32:1D:F6:E5:B8
Authority key identifier: 05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
Certificate issuer: /CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Certificate serial: 019D3A1D2172971EF4D92FBF479533C17227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
Manifest number: 41
Signing time: Sun 29 Mar 2026 15:01:20 +0000
Manifest this update: Sun 29 Mar 2026 15:01:20 +0000
Manifest next update: Mon 30 Mar 2026 15:01:20 +0000
Files and hashes: 1: Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl (hash: GGuhSqo427GFIfZHkWB/S4ACD1qGhzW72QGFdghOADE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:21:72:97:1e:f4:d9:2f:bf:47:95:33:c1:72:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Validity
Not Before: Mar 29 15:01:20 2026 GMT
Not After : Mar 30 15:01:20 2026 GMT
Subject: CN=8b27c9ee7d8c5243584450b35009bd321df6e5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6f:fd:83:6a:bc:25:8d:48:7d:e3:69:a8:a1:
4e:b8:d8:eb:a4:bd:f8:14:06:36:27:ab:7f:48:4c:
ee:b1:42:c0:88:3f:0e:76:42:f0:2b:78:74:a2:d1:
c6:82:4c:89:98:36:e4:3d:e8:3b:18:ab:cb:a3:58:
12:4a:62:ac:81:a2:f3:d2:be:41:16:13:eb:ba:98:
cc:41:07:a0:36:f9:bc:87:4c:ba:76:75:77:7a:13:
c3:31:9c:34:2f:0b:bc:0c:e6:91:e6:46:b0:b4:ad:
7d:c5:98:0b:40:73:a7:15:77:ed:21:a6:48:8f:05:
db:87:79:06:95:a9:8e:d7:3e:3b:50:7c:bf:02:f7:
cf:64:b0:86:40:b1:e9:26:c9:d7:93:1c:37:64:0d:
b3:03:96:85:0d:8e:59:4a:8e:f1:ec:4e:09:39:28:
32:98:42:4d:07:6f:11:c1:e0:e9:cf:1e:0b:a3:47:
4f:20:b1:43:9a:7a:1b:b9:19:c2:a3:30:b4:30:1b:
1c:87:aa:31:70:ba:cb:cd:2f:0c:46:29:34:a7:55:
99:57:97:c6:58:08:94:1c:18:e2:41:9c:61:ad:da:
d1:c8:39:92:e8:cb:81:5c:d4:2f:5b:c9:a0:51:79:
bd:50:3c:2b:bd:00:3f:5d:bc:a0:c9:7b:47:7f:29:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:C9:EE:7D:8C:52:43:58:44:50:B3:50:09:BD:32:1D:F6:E5:B8
X509v3 Authority Key Identifier:
keyid:05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:40:12:a3:fd:7c:cf:7e:e5:d7:20:bb:4d:14:b0:a7:98:
41:53:26:fe:79:f0:fe:62:ff:1b:fb:bf:fc:8f:ab:39:61:b7:
f2:69:ac:67:ed:ff:31:aa:79:3b:a4:3c:13:fc:20:d5:6a:b7:
01:57:02:f4:12:78:73:24:d0:e5:4f:c2:da:73:72:5d:2d:71:
f4:8f:6d:c2:df:4a:69:0e:c9:69:92:98:c0:00:96:ae:3a:ad:
6c:19:af:15:83:47:6d:1c:87:b9:77:8b:bf:71:91:a4:d2:d4:
37:0d:cc:2e:39:ef:8b:5c:18:a2:02:68:a4:11:05:c4:f8:ec:
af:6f:20:a5:2e:d2:f3:3f:97:6b:8e:22:28:d7:57:9f:65:e8:
87:c5:2f:63:ff:92:e7:e6:c7:56:eb:2b:90:67:8a:80:2e:31:
b0:f2:03:ea:ce:4a:04:d8:f1:55:4c:2a:d3:56:08:39:df:63:
5b:54:13:6c:82:17:c2:2e:69:f6:41:46:94:d5:d6:c6:39:e0:
37:4e:ff:d6:8b:fb:40:e3:8d:4f:6d:e1:78:d1:36:d5:9c:4a:
f7:19:47:91:7f:30:f3:06:ca:e9:cb:d2:8b:c6:03:9a:e3:c8:
73:00:14:40:8e:8e:f6:f1:ab:c0:66:92:f2:f7:7c:c0:bc:4b:
a5:01:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:39:53 2026 by rpki-client