Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
File: BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json)
Hash identifier: MO1alDqmtoEJ2kT6ooxzntFFNas4B9itw1GlbgPlpm8=
Subject key identifier: 3B:C3:D2:8C:EC:6F:D8:2F:FA:29:BE:E1:BD:07:B7:24:D1:BA:C6:CB
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 01A1122959D1D6474A21FAEC78AB8489C7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
Manifest number: 10FA
Signing time: Tue 06 Oct 2026 17:01:02 +0000
Manifest this update: Tue 06 Oct 2026 17:01:02 +0000
Manifest next update: Wed 07 Oct 2026 17:01:02 +0000
Files and hashes: 1: AB8umA8bjPgJltKkIRne6IfYP0Y.roa (hash: bEK6Pc0xzgpCyMevab0GP8GntCpJtnUMRsRnsemYpvg=)
2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: 7OuBoZbo2c+oVwnYu/b6Yj6k+Rx8P8EZj8d7dS6rP1s=)
3: Ef2mz8xqhrKj3SB5AKH3hlrhTzU.roa (hash: 3/Mu4QjcxxnSUOoxL+4VfjaGTMXn9INAMEpjV6ScrKI=)
4: sNWqTxun9B8T5a1nVHtvNEr4TKw.roa (hash: z/D95gZg33TdNSMDHOhYm62OJIqU2YgKuCi7L08cx3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:59:d1:d6:47:4a:21:fa:ec:78:ab:84:89:c7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Oct 6 17:01:02 2026 GMT
Not After : Oct 7 17:01:02 2026 GMT
Subject: CN=3bc3d28cec6fd82ffa29bee1bd07b724d1bac6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:1b:e8:f6:e8:ae:55:4e:27:96:60:79:da:
74:8a:68:e2:94:14:4b:ae:1f:72:84:64:98:8c:91:
49:99:70:a8:7a:2c:36:2c:07:7a:16:28:c0:1b:37:
60:3a:27:81:27:0a:52:24:9a:d6:b3:95:51:ca:ea:
55:f8:53:a2:57:61:7d:62:7e:07:3c:74:1b:82:61:
82:2e:fb:ba:91:c9:29:db:29:f8:0c:a6:84:ca:ce:
8d:ab:ee:98:b0:dc:34:7c:ce:a1:65:3c:c0:de:58:
38:f4:9f:f4:9d:7d:51:cd:d2:49:cb:2f:22:e0:41:
3f:7f:82:a7:75:81:ae:d1:d6:c8:dc:a4:65:8f:57:
ae:8d:d5:29:69:af:0e:22:92:33:83:92:34:5a:71:
ef:7b:7e:ff:b3:a3:67:3a:82:8d:65:c9:ad:1c:e0:
4b:34:f3:18:73:c2:72:0e:ad:01:23:f1:52:06:05:
2e:9c:2a:5a:73:19:96:ce:ab:97:e7:0b:e4:d8:88:
16:ad:e5:29:b7:e9:61:67:f5:4b:45:ed:0f:1c:8b:
87:27:cf:dd:fd:1d:f2:1e:f4:df:14:82:92:32:b8:
92:34:7b:4b:1b:a8:e5:c3:dc:80:4b:96:82:06:69:
e9:58:f0:85:ea:7e:51:33:7b:9b:d9:14:f3:47:3a:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C3:D2:8C:EC:6F:D8:2F:FA:29:BE:E1:BD:07:B7:24:D1:BA:C6:CB
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0b:12:63:33:b6:50:57:a1:ee:9d:30:14:9c:f4:e4:52:2d:
2d:e9:01:9c:d4:51:e9:df:6a:b5:1d:2d:17:7c:40:94:7f:cc:
ed:e3:5d:d3:12:0c:f1:d8:04:aa:f5:36:47:b1:14:d8:4e:6f:
66:c3:87:45:62:78:d7:2c:48:14:38:18:33:bb:c6:4f:94:41:
79:8f:f0:74:3b:53:25:4d:5e:8e:ee:80:ea:f2:be:26:d2:c2:
06:ae:8d:a4:09:f2:a8:f3:2a:04:81:33:fd:21:96:fc:c2:c2:
5c:c0:85:cc:6f:11:73:b1:b9:b3:25:47:7c:54:92:48:da:b2:
79:b6:45:2c:e4:54:ae:1b:22:fe:83:b0:27:51:88:dd:d0:51:
b5:dc:68:f1:8e:d8:52:43:c5:bb:c3:be:78:d9:73:bf:2c:f8:
05:f7:d4:3b:53:a4:f8:5a:70:55:f4:93:ab:b1:e4:f4:89:29:
60:47:c2:66:2b:cf:f5:d8:1c:4d:54:51:70:bb:b6:0c:16:51:
2f:ae:62:5d:cf:3e:d4:ca:a7:61:52:3c:11:43:95:fc:37:79:
74:37:b4:0e:54:fc:1b:e4:10:a4:7b:ce:1b:1a:4d:b1:12:0c:
9b:73:e7:69:3b:79:11:df:6f:de:c2:90:08:b7:28:a6:89:01:
3c:68:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:39 2026 by rpki-client