Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: lmiRhRKkg7rM84sAq+B5mb4epUmjCgY3iEoSqdJWKgM=
Subject key identifier: E3:9C:D2:1F:0D:3F:73:61:CD:9C:C0:06:C5:52:13:B8:EF:70:37:29
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 019D382E55D99442E20996785165C7ED2A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 16C8
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: RX/cttr20umfVWak28ePupSjFQxKPiTmuoomrLH/QOc=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:55:d9:94:42:e2:09:96:78:51:65:c7:ed:2a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=e39cd21f0d3f7361cd9cc006c55213b8ef703729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:bf:b6:6e:c4:86:49:24:f4:0e:50:23:60:
8e:55:9d:8d:10:23:b9:f9:19:03:c8:96:95:c4:68:
da:3f:0b:b9:f8:e3:d7:28:82:87:5d:6f:a8:65:c6:
8a:fa:60:c2:c2:3d:ed:58:cd:5d:83:01:74:2d:4c:
c6:4e:c4:c2:7e:15:ce:62:ae:0f:41:89:e8:99:1a:
61:c7:51:bc:84:9d:28:d9:f1:81:ab:e4:2e:2d:57:
4d:07:3d:ca:6a:e0:4e:e6:de:75:16:e7:f1:f9:6f:
3d:c7:f8:be:05:06:0d:bc:b1:45:01:a9:df:71:9b:
05:b3:ca:49:ee:4b:90:93:0c:ca:3e:b7:7b:d5:b9:
b7:9c:1e:a5:b2:a1:38:c9:4f:79:a1:95:02:44:d4:
d2:aa:98:1b:cb:06:05:6d:b8:4e:e3:39:a2:d2:42:
82:19:41:66:5f:ed:60:7f:7f:db:aa:db:28:16:d5:
c2:db:70:62:7a:4d:be:7d:f6:d1:2f:e7:59:ed:25:
d3:bf:29:f7:f8:93:1b:77:b5:55:b3:a6:f3:5d:41:
bb:38:fe:50:20:61:ad:cf:ac:6e:e0:41:0b:df:0c:
bc:eb:fc:af:41:35:d3:f5:db:8c:d7:c2:cf:8c:bb:
df:12:b3:54:0d:09:ca:5a:69:3b:f1:00:48:c5:f1:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9C:D2:1F:0D:3F:73:61:CD:9C:C0:06:C5:52:13:B8:EF:70:37:29
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:06:9a:e6:f7:2f:aa:20:a1:f9:b4:cc:c5:66:32:34:d6:
86:ec:50:36:76:4e:f2:b1:28:72:ab:84:e6:1e:43:7b:0c:92:
79:10:0e:d5:27:a6:a5:71:39:82:a8:f2:db:4b:f2:16:4c:8e:
9a:37:29:86:75:0c:58:48:97:63:53:ae:fd:b6:7d:f3:1f:2e:
fa:55:35:53:3f:25:38:3a:8a:85:b7:61:16:90:57:a4:e8:f7:
75:bd:07:61:4a:98:8a:9b:ee:45:9b:31:cb:5d:45:3e:8f:2c:
88:27:fd:30:13:e6:73:32:43:68:88:a2:5e:7e:44:99:5f:2b:
75:c6:65:ac:f1:4f:cf:c1:2c:d6:ff:5f:3e:6d:4c:31:8b:c9:
c5:e7:22:bf:04:a5:16:01:0a:4c:f3:07:93:fb:eb:dd:e5:e2:
fc:95:a2:5b:de:96:ed:bc:44:12:0b:68:c1:c5:55:6e:b7:ff:
c8:25:ac:17:96:65:4e:8c:22:21:29:29:b4:50:2f:63:7b:64:
1d:47:0c:8b:14:75:89:ee:99:84:d6:9c:56:23:d4:8c:21:68:
e4:67:7f:15:bb:47:3b:84:1f:99:d4:76:4c:ab:aa:33:b7:b1:
db:fd:1b:41:68:c2:b4:83:9e:41:53:9f:23:63:dd:46:39:ff:
2b:91:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:06 2026 by rpki-client