Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
File: Bv170s3aV23AzQiOvm7mAZceEjQ.mft (raw, json)
Hash identifier: GT9QFf+M3OcqgwbK57Zju3DjgYGRRWyHv1cVieWbKmo=
Subject key identifier: 0A:E2:1A:29:76:A0:08:42:00:BD:F1:97:C6:55:6E:F5:2B:92:66:06
Authority key identifier: 06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
Certificate issuer: /CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Certificate serial: 01A13E94AFB2188EF206126AE139219D7FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
Manifest number: 127B
Signing time: Thu 15 Oct 2026 08:01:34 +0000
Manifest this update: Thu 15 Oct 2026 08:01:34 +0000
Manifest next update: Fri 16 Oct 2026 08:01:34 +0000
Files and hashes: 1: Bv170s3aV23AzQiOvm7mAZceEjQ.crl (hash: BUvASqM9N7je5TrQ25pR2h7U+0qBcQXs2U62d8kYtpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:af:b2:18:8e:f2:06:12:6a:e1:39:21:9d:7f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Validity
Not Before: Oct 15 08:01:34 2026 GMT
Not After : Oct 16 08:01:34 2026 GMT
Subject: CN=0ae21a2976a0084200bdf197c6556ef52b926606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:fc:ea:ab:89:c8:a5:0b:96:ff:cf:a6:3e:
3d:3a:ae:48:f2:ab:ea:8e:8b:d3:ce:25:8f:3e:35:
f0:05:52:21:31:2b:a4:4d:83:ed:ba:f5:15:07:03:
65:33:be:a0:32:c9:4d:7c:ed:3a:1a:ba:25:07:c0:
d9:96:6f:09:92:3c:73:e5:21:2e:cd:5e:11:c6:a6:
53:76:35:03:63:28:eb:33:13:6d:05:d9:50:0c:2e:
62:31:86:69:a1:7f:d8:bf:70:16:64:60:ae:0c:30:
dd:ad:4d:89:a0:bb:9a:bb:2b:16:b8:06:fb:74:fb:
c7:56:ec:42:a6:7f:b9:23:48:39:5a:6c:01:65:d5:
35:3d:31:af:03:ae:61:59:7f:6a:0c:0d:89:7a:d3:
7b:1a:52:b3:0f:d5:0e:23:c1:9c:8f:28:cf:ed:74:
19:82:83:9c:a4:2e:80:42:18:8c:86:87:1c:5b:8d:
dc:5a:bf:6d:b6:4e:bf:5b:ab:02:28:a8:14:8e:bd:
99:8c:b5:aa:10:b6:50:c8:db:a9:f0:ec:f8:3b:0c:
a0:f3:ef:53:5d:86:0a:b3:5e:e5:73:ae:0a:84:ad:
8d:18:4b:98:60:78:74:59:87:d2:b1:bf:d4:f6:c9:
e3:7c:d4:af:dc:82:40:d2:cd:a2:c6:58:2b:53:88:
6b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:1A:29:76:A0:08:42:00:BD:F1:97:C6:55:6E:F5:2B:92:66:06
X509v3 Authority Key Identifier:
keyid:06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f6:84:e7:d3:a2:d3:72:e7:83:1e:a4:b1:a9:c0:14:c5:d3:
75:44:93:19:f6:2b:a6:e2:63:b2:ad:95:60:b6:51:bc:99:fb:
65:cf:8e:d4:f3:d6:8d:58:e2:c2:55:94:96:f0:2d:f7:14:7f:
91:38:82:a8:55:8e:a0:aa:00:1e:62:1e:cd:ea:36:f1:c7:7a:
75:8a:59:9f:39:f7:4b:f5:73:f2:eb:83:f7:7f:de:5b:3e:e1:
5e:5f:f0:fe:c9:a1:ab:0b:b2:fd:b2:ef:4a:d7:3c:dd:60:73:
77:44:55:fc:9f:b0:fa:52:60:01:c6:0d:31:7e:94:58:ca:30:
55:e1:c7:0f:51:9d:99:e7:88:ed:35:b2:d1:6b:d9:fa:56:26:
8e:61:c3:4d:10:a3:27:ed:3a:ec:a5:c2:90:41:5a:69:b9:92:
97:4f:c1:be:ed:ba:dd:f7:e4:89:2b:58:31:cb:5a:02:a1:31:
c0:6b:a9:2f:b5:24:37:60:2d:e3:f4:b1:f3:f3:6f:95:91:b1:
8a:44:24:51:fe:89:84:22:3e:6b:11:27:bc:74:2d:45:56:9f:
51:4e:76:2b:49:da:81:91:69:6c:92:64:e3:6f:df:af:2f:44:
71:bc:51:26:c6:c3:df:da:77:6e:79:09:ef:b8:8f:b5:e2:ae:
56:9b:a8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lK+yGI7yBhJq4TkhnX/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZmQ3YmQyY2RkYTU3NmRjMGNkMDg4ZWJlNmVlNjAxOTcx
ZTEyMzQwHhcNMjYxMDE1MDgwMTM0WhcNMjYxMDE2MDgwMTM0WjAzMTEwLwYDVQQD
EygwYWUyMWEyOTc2YTAwODQyMDBiZGYxOTdjNjU1NmVmNTJiOTI2NjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2H86quJyKULlv/Ppj49Oq5I8qvq
jovTziWPPjXwBVIhMSukTYPtuvUVBwNlM76gMslNfO06GrolB8DZlm8Jkjxz5SEu
zV4RxqZTdjUDYyjrMxNtBdlQDC5iMYZpoX/Yv3AWZGCuDDDdrU2JoLuauysWuAb7
dPvHVuxCpn+5I0g5WmwBZdU1PTGvA65hWX9qDA2JetN7GlKzD9UOI8GcjyjP7XQZ
goOcpC6AQhiMhoccW43cWr9ttk6/W6sCKKgUjr2ZjLWqELZQyNup8Oz4Owyg8+9T
XYYKs17lc64KhK2NGEuYYHh0WYfSsb/U9snjfNSv3IJA0s2ixlgrU4hrcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAriGil2oAhCAL3xl8ZVbvUrkmYGMB8GA1UdIwQY
MBaAFAb9e9LN2ldtwM0Ijr5u5gGXHhI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnYxNzBzM2FWMjNBelFpT3ZtN21BWmNlRWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MjBkZjEtMzRjYS00ZTU3LWIzZTEt
YjhkNGJiYTcwMjFlLzEvQnYxNzBzM2FWMjNBelFpT3ZtN21BWmNlRWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82MjBkZjEtMzRjYS00ZTU3LWIzZTEtYjhkNGJiYTcwMjFl
LzEvQnYxNzBzM2FWMjNBelFpT3ZtN21BWmNlRWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPaE59Oi
03Lngx6ksanAFMXTdUSTGfYrpuJjsq2VYLZRvJn7Zc+O1PPWjVjiwlWUlvAt9xR/
kTiCqFWOoKoAHmIezeo28cd6dYpZnzn3S/Vz8uuD93/eWz7hXl/w/smhqwuy/bLv
Stc83WBzd0RV/J+w+lJgAcYNMX6UWMowVeHHD1GdmeeI7TWy0WvZ+lYmjmHDTRCj
J+067KXCkEFaabmSl0/Bvu263ffkiStYMctaAqExwGupL7UkN2At4/Sx8/NvlZGx
ikQkUf6JhCI+axEnvHQtRVafUU52K0nagZFpbJJk42/fry9EcbxRJsbD39p3bnkJ
77iPteKuVpuoUw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:23 2026 by rpki-client