
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json)
Hash identifier: CYBfs7t4bIzoWomxOfmN0+xQtshC2phT/pj8F1aRP8s=
Subject key identifier: 5D:F8:1E:62:3B:07:B3:1B:53:44:A0:F6:21:73:15:06:93:84:5D:F2
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01A13ECBCC9A9F489DE09B28CC2B94B50A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
Manifest number: 0D7D
Signing time: Thu 15 Oct 2026 09:01:45 +0000
Manifest this update: Thu 15 Oct 2026 09:01:45 +0000
Manifest next update: Fri 16 Oct 2026 09:01:45 +0000
Files and hashes: 1: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: +g/oP8D3rZVm2BYcA9rHHgS0KoMhOiPZAwU8ca/Ispk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:cc:9a:9f:48:9d:e0:9b:28:cc:2b:94:b5:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Oct 15 09:01:45 2026 GMT
Not After : Oct 16 09:01:45 2026 GMT
Subject: CN=5df81e623b07b31b5344a0f62173150693845df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:c1:9d:e4:40:55:7a:03:36:31:1d:fd:87:
a5:cb:b1:64:32:65:13:36:68:9b:66:74:cd:4b:82:
c3:e3:fc:65:fd:8a:88:64:4d:0c:82:41:db:74:85:
45:ef:09:57:fe:c0:29:62:ae:7d:00:9d:6d:06:b3:
99:9d:ba:44:b3:55:f9:1d:2c:55:38:53:04:1a:22:
98:9a:04:cb:18:4e:9c:f1:1e:e7:94:5e:41:07:fa:
c5:de:39:52:1a:12:72:92:6a:14:14:42:70:b5:ff:
0a:a4:d1:12:14:0e:1a:10:54:fd:44:c4:f8:88:e0:
19:de:81:9f:8b:57:37:c9:b3:f4:77:09:91:fe:fe:
05:e0:c4:32:e1:6c:1b:e1:6b:bc:a2:d4:fe:88:07:
f8:ad:bf:36:13:e5:85:b6:e2:a5:dc:23:c1:b0:ff:
61:34:21:e9:72:b2:e9:5d:f1:50:34:30:0e:90:6d:
eb:ad:13:44:a4:57:90:5f:09:e1:9a:b5:ea:a6:de:
f7:d3:80:a0:2b:38:6a:d2:ad:6c:39:2e:59:4f:5e:
db:2c:4c:9a:f9:d1:72:04:f7:73:90:04:b8:2c:11:
73:77:47:4c:1a:e0:b7:09:0d:8f:fb:a3:ca:5b:6d:
1c:7a:97:c2:0b:08:ef:89:e8:cc:e0:98:4d:f9:6d:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F8:1E:62:3B:07:B3:1B:53:44:A0:F6:21:73:15:06:93:84:5D:F2
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d8:6e:f8:a9:42:13:fc:70:a5:9f:ad:2e:5b:70:05:d7:b7:
ef:83:d4:60:25:c5:f0:4e:79:85:b7:63:4b:a9:fa:38:4b:76:
58:5e:41:81:fb:3f:27:88:ef:81:18:ec:85:aa:b6:9d:df:7f:
7a:48:65:e8:a9:69:b8:a1:be:95:ba:21:82:42:00:9c:3f:77:
94:6a:a6:0e:21:04:a2:87:06:b0:fd:c8:db:45:74:03:99:25:
cc:d3:41:83:7b:2c:0a:4c:a9:55:b2:27:99:17:83:4c:69:ac:
43:09:57:73:f2:50:1d:ff:5b:b0:8e:4c:cf:c5:3e:85:a0:bd:
22:31:63:8c:e5:68:e3:00:35:9d:65:8c:c8:db:81:83:8c:59:
ca:ce:6b:46:fe:8a:57:01:86:7b:2b:46:94:10:bd:f6:92:4b:
65:6f:fa:02:f5:d6:09:aa:7f:90:f0:54:c4:da:d0:3c:53:f4:
31:8e:d3:0f:98:45:32:6b:c8:f2:4d:30:b3:57:b6:4e:7d:35:
36:9f:41:8d:85:26:9c:38:e3:e3:58:fc:e7:5f:1b:6f:d0:78:
2f:de:8e:24:17:ce:e0:4a:d0:ca:ff:89:1a:03:54:f1:c4:6c:
3e:00:2a:d1:83:9e:d4:bb:b2:88:05:1a:9a:db:0c:b1:6a:29:
cb:dc:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:24:06 2026 by rpki-client