Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: f6MzG0YHdzEYWPbBaFjaT9cugG0r65TibCmJL5tYp1E=
Subject key identifier: EB:86:0D:81:15:08:CD:B0:5B:E9:6E:72:A6:F1:19:D7:9D:C6:8F:EF
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 019FA33BD2E2C7E3477B98B65304D14B973C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 0390
Signing time: Mon 27 Jul 2026 11:00:34 +0000
Manifest this update: Mon 27 Jul 2026 11:00:34 +0000
Manifest next update: Tue 28 Jul 2026 11:00:34 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: oICu3bUZnHY/oSFTEDGZM7Uqv1YasdDi1tyOl/1m3eo=)
2: MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa (hash: dr9Y4CPPNxDI1DdhIlx+imOECRhQA9dnFASgP9A+ij4=)
3: Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa (hash: gWG2uNDqwP4RF3btrRpyjXejBso2oQJiOb7vaAvc7tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:d2:e2:c7:e3:47:7b:98:b6:53:04:d1:4b:97:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Jul 27 11:00:34 2026 GMT
Not After : Jul 28 11:00:34 2026 GMT
Subject: CN=eb860d811508cdb05be96e72a6f119d79dc68fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:54:2f:d3:ba:f2:ab:1c:cf:0c:4c:44:5d:
76:c1:27:f7:6a:8d:e9:5b:9f:84:3d:50:17:f4:95:
84:53:38:cc:ca:6d:c4:be:8d:d2:67:de:56:84:3e:
10:a7:ba:f2:9d:fe:80:a2:b4:03:a4:89:71:bd:3d:
86:e9:cd:ae:71:51:c3:cb:2f:e7:44:4f:67:82:45:
90:1d:84:41:60:b2:69:4b:f8:62:c3:d1:36:b3:d7:
6b:57:65:df:79:1c:f8:d4:90:29:c3:e7:95:db:7f:
12:94:2d:14:d9:79:1a:7a:29:b6:b8:28:66:37:f2:
90:83:38:a5:3a:ac:3c:c8:4b:19:d2:96:94:36:b1:
8d:d6:07:ac:10:d8:5a:56:3a:46:31:0b:3a:3d:f9:
ec:46:0a:09:4b:1e:67:19:a6:81:a6:cb:35:2a:5f:
3e:e4:59:c5:0f:cf:6c:a2:6b:95:6d:ec:81:13:be:
22:c5:02:bc:2b:e3:6f:8c:d2:85:a1:b2:b0:66:05:
13:a3:5a:48:d9:91:18:57:77:40:9b:8d:7b:65:2e:
2e:65:26:0b:cc:68:16:3f:61:33:f9:b7:e8:90:48:
85:6e:4f:00:fe:ea:50:50:7c:fd:3f:31:03:83:99:
b5:36:41:46:b6:01:f5:07:0c:a9:ce:41:7c:f1:38:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:86:0D:81:15:08:CD:B0:5B:E9:6E:72:A6:F1:19:D7:9D:C6:8F:EF
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:41:21:66:7c:1b:22:80:49:ce:8a:8b:1c:37:2f:3f:e6:7e:
1a:ba:c1:68:32:47:13:e5:ef:20:5e:12:7e:04:86:89:1f:a1:
ca:aa:63:03:94:45:d8:f1:71:e7:51:fb:f0:cf:de:24:fd:21:
27:b8:b4:c9:ef:83:12:86:41:1e:65:f2:a2:32:dc:f3:fc:72:
61:78:2b:89:f5:52:c6:ac:93:62:ac:c1:d6:c5:f5:5f:d6:ac:
78:69:ac:c0:32:b7:77:71:cc:23:68:6f:75:9a:30:f1:37:bd:
6a:01:7e:a0:35:19:ae:69:d6:24:e5:c4:d4:13:4a:e8:32:be:
1c:de:e1:d6:3f:47:6c:95:70:62:4d:b4:62:8f:f3:f6:22:97:
27:64:e5:43:8a:d9:01:fb:08:fc:8a:be:b1:61:5f:4a:a1:eb:
69:de:1d:c4:c4:b6:49:15:d4:40:f9:ea:e3:62:1c:41:cf:39:
ff:4d:74:98:88:bb:17:c9:cf:3e:9a:de:3f:9c:8b:a2:84:e9:
9a:18:57:bb:a8:31:9e:58:b5:a5:91:3b:b5:31:5a:04:44:f4:
62:68:75:57:41:64:14:df:7f:05:a9:0d:a9:39:ac:26:48:ec:
78:2f:69:ba:71:31:fe:a6:7d:10:b8:f3:46:dc:5f:4f:e4:80:
c9:45:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:07:47 2026 by rpki-client