Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: yPuVhIXIB+sgN67XXSJ4T4xB5bYPxiXAUy/hDYdVM3Y=
Subject key identifier: 0D:BA:CB:7A:F4:DE:22:30:92:05:98:19:7F:98:61:74:65:28:C0:E7
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 019D3752AB640F77583DDBA4501EF338EF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 07CA
Signing time: Sun 29 Mar 2026 02:00:57 +0000
Manifest this update: Sun 29 Mar 2026 02:00:57 +0000
Manifest next update: Mon 30 Mar 2026 02:00:57 +0000
Files and hashes: 1: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: 6uK2w/D5RMoXqPBqpuygcZnft1BQtVwvQUBn0M1RULo=)
2: ku9q2SmWWLLsi5oorWHKlVO8WIQ.roa (hash: uUP+mrwnQZ97afnlVETUlY/refVnxXobEQJ98a1LiOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ab:64:0f:77:58:3d:db:a4:50:1e:f3:38:ef:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Mar 29 02:00:57 2026 GMT
Not After : Mar 30 02:00:57 2026 GMT
Subject: CN=0dbacb7af4de2230920598197f9861746528c0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:1c:93:e3:9d:91:ac:bc:ac:7a:c2:d9:a1:
52:92:e0:4d:77:62:da:fd:54:9e:83:4c:3b:81:e5:
c7:0d:cc:b0:2a:70:a0:35:5f:8d:9c:5a:9d:72:e6:
59:b7:98:a5:c4:29:f9:af:81:51:3d:24:2e:82:0b:
6e:3d:ec:4b:fa:86:47:1f:67:1f:3c:24:a5:fa:65:
40:44:fe:0c:63:13:b5:ae:16:22:84:f0:ff:17:cb:
23:b7:64:cc:bd:f1:9b:cf:94:f3:78:de:60:36:53:
f9:2b:25:d2:ea:9a:98:fe:26:3f:37:2e:38:1f:fb:
2b:f5:26:03:5a:e5:ca:cf:2d:4e:20:b9:d9:1a:3c:
c9:d0:40:4e:23:97:38:c1:77:b5:71:28:91:8d:12:
5a:33:f4:0e:eb:df:12:c6:21:8f:ed:9f:81:91:df:
bb:41:55:c1:35:87:7a:f5:4d:5b:6f:33:49:91:61:
a1:b9:af:78:e7:97:15:e1:f5:e7:ac:b2:ae:fb:d0:
9f:cc:b7:a1:53:4e:80:c2:bf:6a:af:8e:cc:a6:c7:
35:ff:9a:1c:5b:10:38:b8:78:73:12:cc:bd:3d:d3:
ab:86:0d:e8:68:3d:f4:9f:2b:cc:d8:5c:a5:ea:d7:
87:67:1a:a4:2f:fe:41:39:6c:d0:d4:3f:7f:42:43:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BA:CB:7A:F4:DE:22:30:92:05:98:19:7F:98:61:74:65:28:C0:E7
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:48:6f:8f:8b:dc:c5:df:43:b6:b0:7f:02:04:15:59:92:f7:
c7:0a:3e:c3:3b:4b:58:72:5a:67:d4:0d:e7:66:e7:40:41:f7:
cc:40:c4:b0:37:8a:40:a0:6a:d3:7f:70:0d:aa:e9:68:42:54:
69:75:3a:7b:e2:b2:d8:9a:f2:58:d0:5a:d3:74:68:c3:e5:d8:
88:ad:f8:91:ca:1c:77:b6:5d:87:64:6a:23:7e:88:9c:28:2b:
0f:9d:58:1e:fb:4f:3d:84:26:07:e2:df:20:18:d0:74:82:5e:
59:3d:9e:ee:9b:53:49:bd:5d:8e:29:b5:e3:af:1f:77:23:80:
5d:27:06:f6:aa:a6:71:41:fc:54:31:74:41:8c:f8:c7:1f:09:
40:d4:58:cc:37:74:48:39:88:10:f1:9f:c5:73:db:11:bb:48:
a8:bd:50:e6:fb:0e:76:31:f4:e7:08:6a:50:50:60:eb:5b:33:
0f:40:1e:e3:1d:79:ae:78:48:9c:28:c0:a6:35:98:13:1f:2d:
63:8d:5d:7f:54:cc:de:1b:68:a2:74:bf:4f:ed:43:cb:27:26:
a1:a7:e7:2e:a0:4c:9f:44:f5:d4:32:41:eb:19:0a:4c:63:1a:
de:4e:1b:dc:92:e3:68:c1:8c:3d:44:65:6b:a2:32:5f:b6:73:
75:18:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:05 2026 by rpki-client