Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: lx3H2Fu6N0H934T4tLE/efKf/80fOKlIGqb41QKvktc=
Subject key identifier: 9B:34:16:DE:1B:D2:E3:5D:EF:0E:87:AC:54:BD:75:8A:BF:1C:72:90
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 01A13D815EBD4F04F10C024487007BDE1FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 18DD
Signing time: Thu 15 Oct 2026 03:00:50 +0000
Manifest this update: Thu 15 Oct 2026 03:00:50 +0000
Manifest next update: Fri 16 Oct 2026 03:00:50 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: 4TmWlXXZZK8AojQZZARLsY5s0UlR8gnNALfw6Ri5Ads=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:5e:bd:4f:04:f1:0c:02:44:87:00:7b:de:1f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Oct 15 03:00:50 2026 GMT
Not After : Oct 16 03:00:50 2026 GMT
Subject: CN=9b3416de1bd2e35def0e87ac54bd758abf1c7290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:81:ae:5f:00:23:72:3f:f6:9c:79:c9:0c:
cf:88:d1:f8:6b:94:96:46:e2:1c:69:4c:92:d1:25:
4c:79:3e:c1:23:ea:f5:d5:49:1d:37:6b:34:7b:9c:
2d:18:0c:d4:31:a9:ed:e6:e3:4c:c5:aa:81:e3:56:
df:f4:3c:e6:08:ad:df:95:17:d2:ab:00:db:ca:08:
b5:4d:7f:9b:21:f5:36:9f:1f:6b:d8:69:ca:6e:4c:
90:e9:18:4e:b5:d1:6b:b9:37:21:a4:2c:61:e6:a2:
61:64:e0:a6:4a:17:14:3c:72:46:73:0a:b3:72:17:
bf:8e:25:7c:f9:68:8c:5b:ed:23:ac:ed:c4:1a:c9:
86:98:79:f4:34:b1:95:f3:38:55:91:ec:87:f1:81:
36:58:3c:dd:4e:49:06:18:d2:60:11:bc:8e:a2:d3:
15:1f:c7:8d:e5:b8:2d:8a:5f:f9:f5:d4:1c:b7:21:
f8:43:1c:d8:ab:2a:3a:25:04:13:70:23:5c:14:ba:
22:44:d9:02:8a:78:6a:ca:8b:47:02:81:43:82:57:
3c:f1:1e:48:8c:c7:b8:c2:14:2d:e2:3e:0a:28:8e:
89:e1:69:c7:98:2e:76:f6:e1:87:33:13:50:17:ae:
5b:62:11:27:d9:44:4f:28:d5:e5:45:8c:a6:8d:40:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:16:DE:1B:D2:E3:5D:EF:0E:87:AC:54:BD:75:8A:BF:1C:72:90
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:57:d1:e8:2c:0e:f4:32:4b:97:05:b9:ef:07:a7:8b:74:45:
b9:d9:be:31:b1:35:fa:ae:34:0a:7a:1f:ed:9e:37:7e:10:46:
e4:d7:87:b4:29:1c:42:26:48:d2:a7:57:1f:05:38:fb:c1:42:
4e:68:93:65:15:7f:0a:37:27:e5:94:fb:73:28:f5:67:5e:e0:
5f:08:92:0e:63:c7:a1:5c:61:e5:ae:18:13:0b:bc:7a:01:a7:
31:ef:05:86:42:cc:34:8c:12:9b:dd:d0:7b:dc:48:18:c1:a2:
a3:5f:43:7a:25:04:b5:3b:0b:25:d9:12:d9:32:86:6f:95:1e:
0a:11:1e:d1:be:55:e8:be:e9:35:d3:de:d5:cc:96:eb:83:e6:
81:4b:fa:1f:06:ef:9a:ce:b4:fc:70:2a:1f:17:6b:3d:7b:61:
66:dd:83:b1:d8:2d:c4:ff:9d:e6:10:b5:5e:78:44:6c:9c:36:
1d:8e:bb:e8:1b:5e:43:9d:b0:42:28:1c:e9:14:9f:f8:78:36:
43:2a:38:33:bf:9c:1e:5d:8a:c1:84:b7:71:91:fd:c4:d2:23:
c8:c1:a1:8f:06:ae:98:20:17:e7:e2:92:cd:34:0a:88:fb:12:
b7:e1:fb:46:ba:93:1e:aa:4d:91:b4:6c:b2:ad:c3:07:47:1e:
26:4b:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:44 2026 by rpki-client