Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: Tx7y6mmvx1WNl8mscl19jIKVmF+C0ckeAz6tZ/Ewqvw=
Subject key identifier: 51:8B:6F:CC:46:F5:35:33:6E:BB:F0:D3:DA:17:97:08:4E:2A:FC:B3
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 019DECDABD94C280A90D4377EE818409CC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 0AFC
Signing time: Sun 03 May 2026 08:00:51 +0000
Manifest this update: Sun 03 May 2026 08:00:51 +0000
Manifest next update: Mon 04 May 2026 08:00:51 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: Ftm3hCeP6ZcJAbstgTaKjqyxOxpBGRMeOhSs/BaWQJY=)
2: QfmQSbGn-rduzrFqyr6Sbemoe_M.roa (hash: osfrqMp9JnWBuxKfciaGluVi+EkA7SyhrK0LWIgUKOM=)
3: UPMg7rWjV3hDDE0mnmogG2n2blk.roa (hash: JwH0lLPwflRE6ZZP7SZUGCLHGbBuaoFOuDPOldCNPLk=)
4: V1ivFQWDP77i8oEcG_p8QyZQJAM.roa (hash: dOMZrRoKiVBS9GiMZZVqHJQh/9Gux0X1bI6FS/AevuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:da:bd:94:c2:80:a9:0d:43:77:ee:81:84:09:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: May 3 08:00:51 2026 GMT
Not After : May 4 08:00:51 2026 GMT
Subject: CN=518b6fcc46f535336ebbf0d3da1797084e2afcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:d1:c0:24:8c:16:f7:60:fb:70:3c:9a:72:
b2:dd:bf:55:4d:4c:f7:68:6d:d1:3c:7f:19:fc:39:
bd:c0:f4:02:a3:6a:b9:26:04:53:a0:5b:5b:df:d9:
a1:c7:54:1d:0c:9f:07:e0:f4:34:15:4a:d7:b3:6c:
f1:a1:7f:62:1e:b7:55:62:5a:07:b5:a9:ea:e6:df:
28:ca:af:2f:e6:de:98:ee:6c:32:bf:c5:fd:81:df:
eb:eb:ed:04:13:8f:ba:fb:0d:6c:72:3f:25:76:70:
6a:47:f2:b0:a1:71:f9:71:c4:6e:12:cd:b7:06:14:
89:8c:6e:96:ef:3a:ff:75:62:c4:dc:84:11:ef:e2:
89:e9:7f:ef:6c:79:c6:48:e9:8f:06:b9:55:ff:80:
fe:59:1d:82:4c:cb:ff:ca:6a:19:38:6b:dd:a8:bf:
06:19:6d:62:bc:dc:c6:2b:1c:36:e0:26:43:df:77:
6a:92:f6:30:d2:19:28:1e:34:65:a7:74:97:1d:87:
44:9a:0a:a7:23:83:60:b0:9a:25:5d:35:e3:e9:cd:
5b:50:5e:61:e6:bc:f5:d7:9e:95:df:d9:77:23:47:
9d:49:89:08:97:cb:6a:da:c7:66:8c:8d:7a:dc:59:
63:23:ed:23:3e:ac:1d:35:53:64:c4:93:fe:6b:4f:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:6F:CC:46:F5:35:33:6E:BB:F0:D3:DA:17:97:08:4E:2A:FC:B3
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:6d:d4:e2:80:3a:e9:5c:c0:91:cb:56:71:3b:25:76:c4:
53:ee:69:a1:f1:70:6f:19:f2:8b:bf:f2:35:31:85:12:87:4f:
af:6a:e0:1d:13:1f:66:e7:25:84:c5:b9:df:43:e1:cd:1b:7f:
28:5c:65:8d:99:bf:2e:fa:75:2a:2e:b6:bb:79:f3:dd:f9:97:
c0:d9:c9:07:fc:7f:44:8c:84:57:64:fb:75:62:fd:45:95:9e:
42:4c:8b:e9:bd:9c:2f:3d:9f:07:8e:2c:5d:fb:45:15:96:ae:
03:22:ab:61:ed:c0:92:14:af:5f:4b:51:00:df:fa:bf:0f:9a:
99:53:18:c4:66:c3:72:4d:74:84:b3:56:46:ed:b3:6f:35:4b:
4c:4a:37:5b:51:16:ed:ab:c7:c4:2f:a2:be:d6:21:e4:42:4f:
1f:01:02:c7:86:a7:9a:31:b5:a5:77:69:f9:68:57:b2:58:1c:
a1:3c:36:94:24:6a:4a:55:00:65:8a:a2:48:57:30:3d:05:6b:
9b:ce:2c:3a:b6:f4:0a:e5:d1:af:09:11:3c:35:df:c7:d8:13:
35:52:80:12:1d:21:d4:2c:ff:6e:9f:19:8d:f5:c9:92:3a:48:
9e:6e:06:24:90:8c:3b:b4:c7:82:6c:3a:1f:2a:95:32:60:f0:
f4:a4:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:43 2026 by rpki-client