Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
File: BpSDF1Vo_2MI2iXOaQQvSaUebss.mft (raw, json)
Hash identifier: Umj8ksAVVdIbgZ5JJGI+yGzY/X+2OYgaIRM2tWKggA4=
Subject key identifier: 95:48:AF:13:07:5F:B7:B9:D6:24:47:F7:98:69:59:A8:D8:65:BF:8C
Authority key identifier: 06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
Certificate issuer: /CN=069483175568ff6308da25ce69042f49a51e6ecb
Certificate serial: 01A002B9315B09CF4ADA0B50CCFEA1B2798E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
Manifest number: 0111
Signing time: Sat 15 Aug 2026 00:01:26 +0000
Manifest this update: Sat 15 Aug 2026 00:01:26 +0000
Manifest next update: Sun 16 Aug 2026 00:01:26 +0000
Files and hashes: 1: BpSDF1Vo_2MI2iXOaQQvSaUebss.crl (hash: KrOcSKkgXKAb79dra4SYW1jSw4liWTsNxy+qRCmID0w=)
2: MpAtPvXf2NUZLrtZHr5wLDE9ing.roa (hash: wDbKs3VjtAP4258J/lY8NrGeGS7zhrnbtOERXhqM3tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b9:31:5b:09:cf:4a:da:0b:50:cc:fe:a1:b2:79:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069483175568ff6308da25ce69042f49a51e6ecb
Validity
Not Before: Aug 15 00:01:26 2026 GMT
Not After : Aug 16 00:01:26 2026 GMT
Subject: CN=9548af13075fb7b9d62447f7986959a8d865bf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:09:ad:96:65:26:fe:05:5f:4e:85:e1:2a:
21:a3:90:29:e8:1f:76:3c:47:be:62:be:75:e0:b7:
21:f4:c5:03:ec:32:9e:15:52:45:ef:c5:c2:4d:50:
4a:fe:76:f2:64:76:85:9f:61:8c:90:f0:45:57:3d:
11:d5:f5:f3:b5:53:13:25:6a:87:8b:16:35:0f:b8:
bf:d6:b8:03:29:72:13:02:30:46:8e:b3:38:b5:64:
f4:65:2e:a6:fb:01:4f:0b:da:6a:71:81:39:0a:49:
4d:37:b0:1c:e0:e5:75:59:f8:71:74:9b:e4:bf:a5:
7a:ef:5e:93:9b:7e:b9:6b:77:6d:40:4d:d9:fd:20:
ad:42:c3:6c:ac:3c:2f:d8:07:27:34:5c:7b:1e:7a:
08:f0:ba:76:56:d2:6d:3e:88:c6:9a:91:d3:d5:df:
83:1d:20:60:e3:e5:ff:15:53:5c:96:3c:a0:41:34:
7d:84:aa:29:62:18:b2:ad:d3:73:ec:e0:1c:15:7a:
b3:42:71:ba:88:74:3f:27:2b:02:5e:d7:0d:91:ff:
da:f7:3e:cc:f4:61:d1:86:86:4b:50:80:15:27:06:
30:95:45:2a:6b:39:8e:73:1a:61:40:ba:7f:5b:ed:
05:f4:3a:c0:b7:d4:49:c5:67:90:36:c1:60:22:2f:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:AF:13:07:5F:B7:B9:D6:24:47:F7:98:69:59:A8:D8:65:BF:8C
X509v3 Authority Key Identifier:
keyid:06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ef:24:78:27:40:9a:0c:49:da:7e:1a:99:4f:1d:41:dc:6e:
73:2c:69:94:82:1b:42:a4:95:e4:83:26:1e:dd:c8:c7:dd:61:
94:03:af:cd:55:8e:11:6a:77:1b:ad:ff:9d:55:bf:27:dd:e5:
14:a1:c9:d2:4a:75:dc:16:d3:2f:da:24:b8:37:43:09:1f:94:
2d:35:89:6e:1b:08:6b:de:1f:8a:db:eb:c6:1b:56:fe:2a:1a:
38:24:9c:79:1b:83:85:8f:63:db:85:91:e5:32:49:77:99:9f:
12:80:9c:7f:fb:25:22:d3:c1:b4:d4:a0:ad:73:c0:72:78:83:
5d:7f:99:fd:cf:cc:ff:36:b4:56:5d:56:bb:b0:2d:ac:e0:e4:
35:49:36:3d:0b:c8:10:51:a2:47:04:4e:4e:65:33:c7:9b:c3:
af:30:48:86:ff:9b:fa:08:22:29:63:90:70:6d:ad:e8:9e:5c:
bd:23:38:5e:37:c0:d9:cf:7e:14:bf:ca:84:56:8b:d7:4b:f0:
c9:e8:a9:43:33:b4:3a:03:75:a5:e4:c3:9e:ab:31:a8:c3:8f:
83:f0:ac:55:d9:4c:30:a9:09:e4:8e:78:ae:14:2b:02:a9:d4:
ec:2d:1f:63:cc:71:bb:93:3b:e2:e9:80:15:88:a1:83:f9:63:
2b:f2:ae:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuTFbCc9K2gtQzP6hsnmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTQ4MzE3NTU2OGZmNjMwOGRhMjVjZTY5MDQyZjQ5YTUx
ZTZlY2IwHhcNMjYwODE1MDAwMTI2WhcNMjYwODE2MDAwMTI2WjAzMTEwLwYDVQQD
Eyg5NTQ4YWYxMzA3NWZiN2I5ZDYyNDQ3Zjc5ODY5NTlhOGQ4NjViZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLkJrZZlJv4FX06F4Soho5Ap6B92
PEe+Yr514Lch9MUD7DKeFVJF78XCTVBK/nbyZHaFn2GMkPBFVz0R1fXztVMTJWqH
ixY1D7i/1rgDKXITAjBGjrM4tWT0ZS6m+wFPC9pqcYE5CklNN7Ac4OV1WfhxdJvk
v6V6716Tm365a3dtQE3Z/SCtQsNsrDwv2AcnNFx7HnoI8Lp2VtJtPojGmpHT1d+D
HSBg4+X/FVNcljygQTR9hKopYhiyrdNz7OAcFXqzQnG6iHQ/JysCXtcNkf/a9z7M
9GHRhoZLUIAVJwYwlUUqazmOcxphQLp/W+0F9DrAt9RJxWeQNsFgIi9D8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVIrxMHX7e51iRH95hpWajYZb+MMB8GA1UdIwQY
MBaAFAaUgxdVaP9jCNolzmkEL0mlHm7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBTREYxVm9fMk1JMmlYT2FRUXZTYVVlYnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yYzg2NmEtMTMxZS00YmFiLTk2MmMt
NjQ2MDQ1MThiY2JmLzEvQnBTREYxVm9fMk1JMmlYT2FRUXZTYVVlYnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yYzg2NmEtMTMxZS00YmFiLTk2MmMtNjQ2MDQ1MThiY2Jm
LzEvQnBTREYxVm9fMk1JMmlYT2FRUXZTYVVlYnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+8keCdA
mgxJ2n4amU8dQdxucyxplIIbQqSV5IMmHt3Ix91hlAOvzVWOEWp3G63/nVW/J93l
FKHJ0kp13BbTL9okuDdDCR+ULTWJbhsIa94fitvrxhtW/ioaOCSceRuDhY9j24WR
5TJJd5mfEoCcf/slItPBtNSgrXPAcniDXX+Z/c/M/za0Vl1Wu7AtrODkNUk2PQvI
EFGiRwROTmUzx5vDrzBIhv+b+ggiKWOQcG2t6J5cvSM4XjfA2c9+FL/KhFaL10vw
yeipQzO0OgN1peTDnqsxqMOPg/CsVdlMMKkJ5I54rhQrAqnU7C0fY8xxu5M74umA
FYihg/ljK/KutQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:58:17 2026 by rpki-client