
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: J+QMR8yektGqrkdb7BnF7VTe8EOVO22phl47KZrumnk=
Subject key identifier: 0D:D0:80:C5:FD:88:C9:50:7E:12:0B:10:15:C9:88:F2:07:73:3B:66
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 01A13DB808D9FB7FA62887A67703656F65DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0DD6
Signing time: Thu 15 Oct 2026 04:00:33 +0000
Manifest this update: Thu 15 Oct 2026 04:00:33 +0000
Manifest next update: Fri 16 Oct 2026 04:00:33 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: hlyC46gmh1Dxeg4stvlOS1iB6KMypJdcFosQBRkL5J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:08:d9:fb:7f:a6:28:87:a6:77:03:65:6f:65:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Oct 15 04:00:33 2026 GMT
Not After : Oct 16 04:00:33 2026 GMT
Subject: CN=0dd080c5fd88c9507e120b1015c988f207733b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:76:f0:08:b9:84:db:3a:ea:89:2d:13:af:
f5:3a:20:a2:19:18:d0:0b:d2:83:22:0c:f4:f7:e2:
99:0d:ff:a4:a4:11:ce:6a:68:34:23:e8:64:22:68:
12:d2:70:e4:b9:27:73:d2:24:5f:e6:c7:75:6c:c3:
0c:e3:c1:db:4a:f3:d2:8f:22:a2:27:15:7b:e6:f7:
5c:3f:2a:f0:42:b3:7e:f2:45:af:30:d7:a0:26:38:
89:18:0d:b4:ab:53:c0:9f:b3:02:f8:6f:f2:b1:a0:
eb:15:ce:3f:75:31:ef:8b:9a:73:55:f9:78:7e:00:
00:84:71:55:40:99:a7:d7:70:4e:96:2d:ee:a9:43:
b4:bd:f2:96:8c:17:25:60:78:f4:2b:d4:b3:a1:8c:
d3:46:9b:e3:50:70:08:7f:c9:79:c0:93:b7:b3:56:
ed:91:1e:33:8e:2b:34:3f:45:7d:20:b3:dd:ca:f2:
9f:e6:1e:d7:fd:b6:ad:79:f1:61:74:c3:7c:21:d2:
da:c3:04:62:f4:15:17:dd:9d:52:6f:55:51:c6:f2:
0a:18:80:51:d2:64:0b:5e:19:e4:ca:c4:ed:8c:3f:
63:5f:45:af:f9:82:71:9e:4e:b2:8f:39:bd:b8:93:
99:d0:6e:18:c7:b5:ee:e3:a8:ab:58:05:40:f4:82:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D0:80:C5:FD:88:C9:50:7E:12:0B:10:15:C9:88:F2:07:73:3B:66
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:83:7d:38:73:5b:26:92:f7:f0:51:fc:26:3f:3b:c2:28:cd:
12:cd:62:5d:27:c0:78:80:c9:b9:aa:0a:3f:83:f1:05:f2:2a:
ea:78:9d:9f:cf:ee:ef:d7:26:d3:3e:ca:78:7d:9f:70:a4:5c:
2c:dc:42:b3:d3:ac:70:ea:59:31:db:8f:44:f3:f4:0b:84:45:
45:d3:85:2d:03:d7:b6:96:a8:87:08:12:3a:cd:c7:b2:11:0d:
3e:c3:22:7a:b8:58:0c:a8:84:d5:af:14:c7:c2:86:3b:49:f1:
f3:e4:21:05:83:1c:81:56:31:ac:d2:63:fa:c7:1d:f0:71:db:
9c:83:12:27:b5:03:77:4a:4f:50:e6:0e:87:4d:19:66:4d:a2:
67:2c:d6:77:26:a5:a6:ca:6f:a4:5a:74:84:fa:23:83:dd:80:
18:c5:54:cd:15:11:d6:85:e8:d9:e8:e7:0a:a3:07:6e:65:e9:
c4:a3:54:9a:d4:ef:e1:0f:78:5b:a6:12:14:6e:a7:bf:88:bb:
d3:15:a2:16:1f:1a:07:82:d0:20:08:f9:5b:7f:31:52:4e:f6:
9b:e1:96:6a:d5:bc:97:12:c8:3b:eb:81:b5:80:a2:75:79:3e:
65:ab:fd:cd:23:51:37:ab:b8:de:2b:a0:50:9f:65:66:ea:0c:
2c:09:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:22:49 2026 by rpki-client