Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier: MRuZMRGxVt18lPT9kgy+JQGEJR24+ERZ6ag9wMIQha0=
Subject key identifier: B3:73:BC:AC:97:B1:72:F2:55:3E:D1:D8:A2:09:AA:3D:D7:27:FF:E6
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 019D38668B640C66F0E4F265C845581988AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number: 07C3
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: 2s0g7Xpv/ISZ0uFpLZwDCmVYLltlbQEc55WYAZTw1so=)
2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8b:64:0c:66:f0:e4:f2:65:c8:45:58:19:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=b373bcac97b172f2553ed1d8a209aa3dd727ffe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:0e:55:2d:0b:08:17:b7:73:91:5f:84:09:
bc:f6:72:e2:df:f5:22:52:05:e2:1b:e9:70:0d:9f:
d6:10:c9:a0:9a:f1:f5:5a:0e:25:ef:a9:b0:48:4c:
74:fd:42:7a:af:36:2e:36:d2:39:3a:40:56:25:74:
ba:7c:65:fc:a7:a4:ba:84:e3:aa:bb:ef:22:88:a4:
e4:0a:98:a2:86:1a:09:e4:c4:2f:e1:1f:09:1e:28:
f1:2e:74:cc:c6:d1:2d:7d:ce:e7:0e:45:64:ae:43:
b4:6d:fc:1a:1c:b0:62:47:f6:6a:20:bf:6a:01:96:
18:37:93:7e:5e:2d:1a:a3:04:6b:f8:ef:5c:c4:b1:
b6:92:27:9d:3f:0a:10:4c:f5:bf:8f:55:a7:3b:40:
e3:ba:19:86:56:d5:69:fd:48:2b:ec:a7:26:ba:ca:
99:cb:aa:c8:47:c0:41:6d:4d:75:01:88:51:1d:54:
44:4d:f9:b9:68:19:b6:c9:19:42:63:aa:83:b7:86:
c1:d1:49:7e:12:81:f1:19:e3:1a:e7:f9:48:fd:de:
de:68:c8:12:07:ce:a1:e1:da:3e:03:43:0b:89:72:
6c:6c:69:d6:0e:18:b0:a2:5e:dd:13:63:6b:f1:de:
b6:b0:98:36:b5:51:31:2e:5a:3a:15:9f:a9:ed:ef:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:73:BC:AC:97:B1:72:F2:55:3E:D1:D8:A2:09:AA:3D:D7:27:FF:E6
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:41:6b:d8:51:fe:b9:f7:51:dc:cd:e2:88:30:0a:5e:f6:76:
1d:c6:1e:c4:08:cb:9a:f8:2f:8e:b5:b3:d4:1a:09:bd:d0:d0:
60:7c:0d:de:80:92:0d:ef:ee:c2:c7:7e:4d:18:52:c9:1b:3c:
72:d1:0c:60:e9:ba:e1:e6:cc:d5:ac:f1:cf:42:43:b6:23:05:
59:09:6e:c1:d1:ae:a5:22:04:60:a6:18:12:7d:08:06:06:65:
be:05:58:54:a9:56:54:41:c6:ff:04:c2:9d:5c:78:86:19:87:
7d:63:eb:56:0a:ef:22:c1:d8:0d:f8:43:2b:a4:30:40:c1:b8:
84:20:82:42:f5:ad:8c:26:94:c7:12:d2:31:7b:ce:b5:92:82:
47:9b:99:54:05:e8:51:39:cc:1e:d2:60:70:15:4c:06:8d:20:
99:6f:70:ec:85:c7:25:b3:ad:be:43:4f:27:a7:01:de:d3:69:
38:19:1c:af:03:cd:5c:14:75:be:8f:c9:4e:ef:cd:b4:22:54:
31:56:b0:8b:fd:38:2f:0d:7b:2d:5d:41:8e:5e:1b:5a:0f:ef:
25:f8:ad:50:29:1d:5c:42:ff:fa:00:02:5f:ff:42:ef:6e:b5:
9a:ae:27:67:fd:d9:f1:ec:5d:37:0e:ce:71:18:8d:43:5e:a1:
f8:6c:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:37 2026 by rpki-client