Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: F6bWKUC7N7wY6gj2fDdwvfP1Lb6q5VVdW5d2o0emnKg=
Subject key identifier: 27:E3:0E:32:A8:AD:AE:B2:E4:06:48:E9:CB:9B:BA:FE:AE:9E:19:8B
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 01A08A55BE1A45B8A10920240CEA614C6D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 0409
Signing time: Thu 10 Sep 2026 08:01:09 +0000
Manifest this update: Thu 10 Sep 2026 08:01:09 +0000
Manifest next update: Fri 11 Sep 2026 08:01:09 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: b9hCdo975vtPpcJeYBJ7qdKu7NFQo3/QlzqQRLiLy1A=)
2: MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa (hash: dr9Y4CPPNxDI1DdhIlx+imOECRhQA9dnFASgP9A+ij4=)
3: vI5YIn1gmoiJ1XhTruhkEMslvdk.roa (hash: MwcmXVuCGhpSZPWmXs+pxNPa7hJBYp1BPE8MntYWY7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:be:1a:45:b8:a1:09:20:24:0c:ea:61:4c:6d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Sep 10 08:01:09 2026 GMT
Not After : Sep 11 08:01:09 2026 GMT
Subject: CN=27e30e32a8adaeb2e40648e9cb9bbafeae9e198b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:23:c7:e7:aa:1a:75:b2:6f:a4:17:0a:ce:
06:0e:91:64:7a:c8:f4:5a:ce:01:86:53:89:23:4a:
f9:fe:eb:d6:c1:0e:ae:46:18:88:06:ff:27:57:8d:
07:81:57:45:aa:8e:e7:49:55:d1:6e:1f:97:c1:8a:
8f:73:0a:64:c5:f0:8e:b5:2e:76:0e:5c:db:7d:5a:
07:7f:47:5d:64:c9:53:27:d1:d2:0d:c5:47:c8:1a:
aa:9a:9d:3d:8c:c6:c4:ce:9d:4c:bd:fb:31:9e:c2:
a8:0e:41:e9:3f:7e:0c:6e:40:8b:58:45:fc:4e:13:
f5:13:83:86:f2:7d:05:ca:b9:0b:08:d4:16:87:9b:
e6:0b:06:c6:c9:96:88:5f:c1:25:bf:94:ca:0f:ba:
5a:0c:23:cf:4b:ec:9b:39:cf:96:b5:62:63:60:77:
ef:7e:24:50:99:c3:b6:8d:ec:b8:11:a7:a2:f6:a6:
36:99:cb:f8:ec:c6:04:65:aa:a1:b6:f6:c6:0c:7c:
4c:a0:67:8b:46:10:9e:5b:4c:66:d9:b2:38:4a:bb:
4b:f1:3e:35:e4:70:bc:05:02:71:cb:fb:78:66:1a:
12:70:db:9d:4b:69:05:90:d7:67:a8:a4:53:e6:7a:
2b:a3:19:f0:82:24:a6:99:46:9b:af:14:63:ae:bc:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:0E:32:A8:AD:AE:B2:E4:06:48:E9:CB:9B:BA:FE:AE:9E:19:8B
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b3:34:a6:40:ba:66:24:23:8e:5c:23:9b:90:43:f8:d0:d9:
fd:86:5b:cf:42:f8:6e:29:22:ea:6d:4a:92:3d:84:50:15:b1:
33:3b:f1:17:24:36:ca:11:eb:3c:b6:c0:f7:1a:74:80:de:1b:
9f:17:98:c4:03:31:04:74:e0:66:07:e0:41:82:c2:03:a8:d9:
3e:0b:a9:a0:67:e7:8b:09:80:b5:61:e3:fd:92:be:e7:1f:c7:
4b:b9:e1:20:96:3b:b3:b5:49:27:29:34:39:c2:ae:45:07:d8:
aa:58:a2:16:99:6d:47:c6:1a:f0:c4:91:6f:12:81:44:1d:d9:
d8:fb:ff:32:79:cd:ce:ed:87:cf:ca:df:15:d1:f8:8b:32:ba:
8b:19:a9:46:d7:45:53:d4:aa:69:07:d1:2c:89:d5:8c:40:97:
50:66:a4:d9:eb:22:01:c1:da:2b:97:f1:5c:15:7d:be:22:c3:
8a:52:3f:cc:22:10:aa:16:5f:57:27:2a:6a:22:3b:46:1e:81:
b5:e8:36:29:4a:f3:76:e5:16:63:8f:19:4f:72:f0:58:b7:fe:
db:d8:12:3d:58:d5:56:a1:e2:8a:bc:59:e0:65:11:f4:0d:bd:
c2:8f:86:70:70:48:a7:02:e9:df:16:4c:2a:ff:d1:04:7d:2b:
cf:c7:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:18 2026 by rpki-client