Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: Tiv0P4kR+w/72if+O7mm+02nOcXs1cEDxfzXPjRAdjE=
Subject key identifier: FE:46:02:F1:E7:7D:58:9B:17:5E:5B:3A:0B:8A:93:FB:74:49:92:A2
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 01A17A3A99ED63091D324EBA3450B55CD883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 0487
Signing time: Mon 26 Oct 2026 22:00:22 +0000
Manifest this update: Mon 26 Oct 2026 22:00:22 +0000
Manifest next update: Tue 27 Oct 2026 22:00:22 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: g0i6G7+SnEOhO8SX0X6x9bnncsv/R7L14s/X8cQDFxM=)
2: MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa (hash: dr9Y4CPPNxDI1DdhIlx+imOECRhQA9dnFASgP9A+ij4=)
3: jy9vqTkbifn4fqhCmmiOuybdiuI.roa (hash: T5UDlp0R5kTRg3nCqn967Jf+poMh13cYAkRHHYTNxKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:99:ed:63:09:1d:32:4e:ba:34:50:b5:5c:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Oct 26 22:00:22 2026 GMT
Not After : Oct 27 22:00:22 2026 GMT
Subject: CN=fe4602f1e77d589b175e5b3a0b8a93fb744992a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:43:0b:fa:0f:b5:e5:30:45:02:47:d1:83:
a1:2f:30:8a:76:dd:87:3a:4d:05:b6:48:21:81:d1:
68:02:a2:5e:95:be:f6:41:7d:1f:72:91:a9:ed:bd:
04:71:cd:61:ad:3e:7b:4a:be:ff:bb:3b:fa:e7:c6:
63:69:4e:57:31:61:5f:ac:6c:54:44:90:08:15:bc:
21:fd:46:f0:46:9b:23:ce:16:8f:3a:df:9e:1b:fd:
c4:30:14:28:fe:eb:fe:74:76:0f:54:b9:47:6e:fa:
72:ae:cd:63:7a:e4:9a:60:0d:9f:1f:41:48:81:9c:
86:c9:b1:89:fe:32:49:45:65:7d:cb:b4:67:70:fc:
46:8f:a5:30:0e:2f:b4:8d:b7:6e:50:57:7c:89:ab:
89:58:db:fe:c2:85:9d:65:56:ba:61:be:ca:39:ee:
7e:91:50:fc:4e:2e:3e:10:ad:81:65:5c:8e:01:a9:
e0:20:21:94:08:6a:c1:ea:36:94:52:6e:47:55:eb:
7e:6b:9a:7e:9a:e6:2d:62:7e:e2:a0:99:de:65:ba:
fe:0a:5a:ae:23:76:66:ca:51:b7:7a:14:07:f0:79:
39:a8:34:47:1c:43:f2:cd:f0:f2:7d:a9:8a:a0:1c:
3a:67:0a:db:04:f0:6b:3a:3c:a1:76:2a:9c:7d:37:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:02:F1:E7:7D:58:9B:17:5E:5B:3A:0B:8A:93:FB:74:49:92:A2
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:53:45:53:9e:c7:1a:cd:f3:04:1b:ed:d6:78:ea:5c:22:fa:
4c:d2:5e:a9:fa:68:27:31:ec:d3:c0:b7:36:cb:7f:d1:67:1f:
1b:91:54:66:d2:ff:55:af:56:a7:04:e0:bb:dd:cb:81:11:0f:
6e:33:9c:ef:d2:48:79:66:15:85:6d:c8:da:62:40:f6:0f:55:
57:61:38:cf:ff:33:89:da:5a:a0:8a:27:25:6a:2e:6b:d8:3c:
54:23:9c:12:1e:a8:94:d5:52:5c:2a:ab:39:00:06:44:01:bb:
3a:1d:73:4f:7d:98:a1:53:33:5c:32:8f:de:37:e6:a6:14:94:
5b:37:42:a8:55:e2:c3:f3:30:73:6a:2f:39:4b:89:82:18:55:
34:2d:e2:f8:c1:78:15:0b:81:37:b3:af:b3:f1:79:40:42:5a:
05:4c:c5:8b:2a:39:a3:48:0c:14:4b:07:cf:5a:13:4b:08:63:
f8:65:05:92:2c:cf:a0:55:ce:47:b0:63:e0:97:71:da:c9:79:
c5:9f:77:6d:f7:92:ab:f9:2c:5c:3a:56:cd:b4:10:b4:41:09:
49:28:b7:e5:99:43:f4:3f:b5:6d:c7:b0:68:bc:e8:a7:09:e5:
c7:c3:41:fb:ea:c6:d1:2f:0b:f6:58:17:45:c1:68:a7:68:c3:
40:e0:84:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6OpntYwkdMk66NFC1XNiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0M2QyYzhkYTgzZjVjM2M5NGFlOTQwYTBlZmQyYTc3MTRm
ZjkwZTIwHhcNMjYxMDI2MjIwMDIyWhcNMjYxMDI3MjIwMDIyWjAzMTEwLwYDVQQD
EyhmZTQ2MDJmMWU3N2Q1ODliMTc1ZTViM2EwYjhhOTNmYjc0NDk5MmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwydDC/oPteUwRQJH0YOhLzCKdt2H
Ok0FtkghgdFoAqJelb72QX0fcpGp7b0Ecc1hrT57Sr7/uzv658ZjaU5XMWFfrGxU
RJAIFbwh/UbwRpsjzhaPOt+eG/3EMBQo/uv+dHYPVLlHbvpyrs1jeuSaYA2fH0FI
gZyGybGJ/jJJRWV9y7RncPxGj6UwDi+0jbduUFd8iauJWNv+woWdZVa6Yb7KOe5+
kVD8Ti4+EK2BZVyOAangICGUCGrB6jaUUm5HVet+a5p+muYtYn7ioJneZbr+Clqu
I3ZmylG3ehQH8Hk5qDRHHEPyzfDyfamKoBw6ZwrbBPBrOjyhdiqcfTdRPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5GAvHnfVibF15bOguKk/t0SZKiMB8GA1UdIwQY
MBaAFAQ9LI2oP1w8lK6UCg79KncU/5DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUt
M2JiYzY2MWI0Y2M1LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUtM2JiYzY2MWI0Y2M1
LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVNFU57H
Gs3zBBvt1njqXCL6TNJeqfpoJzHs08C3Nst/0WcfG5FUZtL/Va9WpwTgu93LgREP
bjOc79JIeWYVhW3I2mJA9g9VV2E4z/8zidpaoIonJWoua9g8VCOcEh6olNVSXCqr
OQAGRAG7Oh1zT32YoVMzXDKP3jfmphSUWzdCqFXiw/Mwc2ovOUuJghhVNC3i+MF4
FQuBN7Ovs/F5QEJaBUzFiyo5o0gMFEsHz1oTSwhj+GUFkizPoFXOR7Bj4Jdx2sl5
xZ93bfeSq/ksXDpWzbQQtEEJSSi35ZlD9D+1bcewaLzopwnlx8NB++rG0S8L9lgX
RcFop2jDQOCEmg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:38:17 2026 by rpki-client