Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: cSDhV5c/rzzP2blllP4I1Zia3+6M05tH7LVT6++2ziA=
Subject key identifier: CA:4C:D2:8E:16:2D:DB:1F:7B:49:AF:27:A9:31:6B:1D:15:C3:2C:D2
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 019D386590166AB30DDA9101240EF00A410E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0BC1
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: dLhY3RSrQhq4tSY5p3YJvcs9sgZs179T29IFixdXK0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:90:16:6a:b3:0d:da:91:01:24:0e:f0:0a:41:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=ca4cd28e162ddb1f7b49af27a9316b1d15c32cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:75:45:c1:32:c9:ab:85:7b:e3:db:d8:78:
1d:63:29:2b:4a:75:6d:a3:ae:93:a5:f4:ba:be:c2:
08:df:bc:d9:cb:09:6d:ad:d7:cf:18:f0:4b:3d:2d:
ff:74:10:25:e6:d5:51:b3:e2:1e:ad:8d:c3:ac:6e:
c7:b3:44:e9:e4:48:9c:7e:03:55:14:88:a2:92:37:
5f:40:f5:d2:0a:cc:68:f0:31:ce:25:59:fb:38:79:
95:d4:7c:a6:b4:fd:07:06:13:94:59:d9:26:77:fe:
62:80:90:51:9e:db:05:bb:83:bf:5c:88:24:79:eb:
cf:49:1d:0e:cc:0b:3f:52:8f:06:0b:3e:88:87:05:
2d:c4:0f:79:70:b3:ef:53:06:72:a8:42:41:cc:cb:
93:0d:05:65:c2:fe:13:d1:3f:34:ef:48:50:e8:17:
f6:ea:dd:aa:13:c1:e0:16:e8:57:c2:35:bf:f8:1e:
11:99:72:87:ed:90:35:a7:81:28:46:9c:01:6c:1a:
6d:71:86:7e:66:82:60:e3:6f:32:4d:cf:bf:30:3b:
2f:c2:5c:03:97:59:de:9f:ca:5e:ab:b9:15:f3:88:
19:16:d1:b5:9e:ed:0c:9e:6f:f5:52:33:e3:87:d6:
b1:c8:1a:53:94:a4:84:3d:e1:0c:18:81:47:4e:84:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:D2:8E:16:2D:DB:1F:7B:49:AF:27:A9:31:6B:1D:15:C3:2C:D2
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:44:66:55:e7:68:55:f0:aa:2a:a6:2b:d5:db:d5:a0:8b:
21:62:17:26:2b:c4:ac:0b:90:12:11:69:19:28:56:3b:12:d7:
26:ba:01:ce:bc:d4:85:67:f0:41:b8:78:7d:46:8b:fe:21:23:
d7:bd:45:85:ca:a7:0d:74:c6:d6:5b:d8:2f:9d:c1:11:ad:44:
5e:bd:52:46:dd:d2:4e:4e:3c:ea:dd:4d:b7:ba:1b:8c:66:58:
46:ba:20:16:5e:6f:be:b1:5a:6f:3e:b9:5b:b6:bd:d5:68:22:
b5:4f:21:cf:5f:96:e1:34:8f:38:fc:25:62:39:4d:ec:f1:2a:
2c:b0:8f:97:8d:83:b0:49:cf:e3:f3:63:65:ed:72:14:0b:52:
13:39:fe:0f:2e:a0:e5:57:e5:06:8e:e0:90:41:c5:de:15:a1:
62:b3:20:62:c6:06:85:1d:6f:c9:3b:28:40:c4:d9:3c:48:fa:
e4:81:78:0d:3f:70:ae:ed:1d:d0:b9:78:41:bd:f8:e3:9b:0b:
8b:23:ec:b2:87:3f:3c:fe:fe:b6:86:dc:91:60:5d:c1:a7:6c:
2b:c1:f3:3d:5b:c9:03:06:b4:35:9c:a6:61:40:cd:42:5e:2b:
60:b4:72:63:c6:3b:28:f7:a4:fb:88:65:23:f5:71:d6:1a:9a:
c4:fd:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:16 2026 by rpki-client