Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft
File: BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft (raw, json)
Hash identifier: 37XINS59XVqtHv6HeZsfrSoH1zO3hg75vML9Lgap6z8=
Subject key identifier: 54:FF:8B:72:AB:A8:B7:45:78:D2:F0:11:5E:F2:CB:A8:87:42:2A:BA
Authority key identifier: 06:93:36:B9:F4:DA:7C:16:DE:41:E0:B1:99:0F:2D:53:19:9E:66:A1
Certificate issuer: /CN=069336b9f4da7c16de41e0b1990f2d53199e66a1
Certificate serial: 01A040853A4269292B3E6A03641294F8D1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft
Manifest number: 49
Signing time: Thu 27 Aug 2026 00:01:07 +0000
Manifest this update: Thu 27 Aug 2026 00:01:07 +0000
Manifest next update: Fri 28 Aug 2026 00:01:07 +0000
Files and hashes: 1: BpM2ufTafBbeQeCxmQ8tUxmeZqE.crl (hash: nntH6WVH/l+BZManQfkQGRY59aXVQOL2hUcRpD2tioo=)
2: t5_702xyV_7qxne4bH7eNjIoccQ.roa (hash: F5N7YR3TqHBIA6zejWhtecVAaohBe6XgS7qV0q4JyA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:3a:42:69:29:2b:3e:6a:03:64:12:94:f8:d1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069336b9f4da7c16de41e0b1990f2d53199e66a1
Validity
Not Before: Aug 27 00:01:07 2026 GMT
Not After : Aug 28 00:01:07 2026 GMT
Subject: CN=54ff8b72aba8b74578d2f0115ef2cba887422aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:98:0a:7a:93:da:bd:88:1f:3d:c2:12:ef:
d1:df:97:07:2a:58:2e:1f:cb:da:88:dc:ec:3e:e3:
cb:72:cc:dd:ee:c2:d4:48:ce:83:2a:b1:76:7a:0b:
fa:27:e4:83:80:56:5b:90:10:cc:35:c2:87:40:4c:
9e:d5:50:c0:e8:81:f7:dd:d0:3c:b5:38:bb:f8:ac:
97:0b:f7:1f:3b:e7:a3:f4:c6:89:ab:23:3b:06:9d:
a6:88:92:31:bc:04:fd:53:a6:96:53:4d:54:37:42:
e2:4a:11:a3:3d:b5:6c:0e:b6:6d:18:5f:00:3b:da:
8d:0a:7b:16:80:e0:0d:72:f7:d5:e2:11:a0:58:44:
76:27:64:ff:e6:54:f6:ae:10:9c:af:7b:5f:62:cc:
f9:a2:28:00:a7:4c:11:92:12:a7:88:5f:48:88:ed:
56:c7:7d:c7:e9:93:28:99:cb:0b:cd:8d:4d:0a:7a:
63:2c:f2:e7:24:b2:22:d2:7e:ba:34:be:a1:32:19:
e9:2b:27:44:c7:de:7c:0b:b6:10:d3:5c:1f:67:3b:
49:c8:dc:66:b4:be:08:98:f9:b1:53:65:ea:df:b4:
cc:2e:69:ab:d7:9b:3b:16:e6:3b:24:05:16:4f:5c:
53:b4:00:09:7e:f6:23:c3:2b:53:a3:48:bc:12:69:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:8B:72:AB:A8:B7:45:78:D2:F0:11:5E:F2:CB:A8:87:42:2A:BA
X509v3 Authority Key Identifier:
keyid:06:93:36:B9:F4:DA:7C:16:DE:41:E0:B1:99:0F:2D:53:19:9E:66:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ed:35:fb:b0:86:ba:69:f2:d9:80:dc:d1:c2:d8:c2:7b:7a:
89:09:11:0c:40:8a:16:0d:47:bf:a6:07:0b:ce:79:61:c4:5a:
4a:af:5c:14:f9:d4:31:38:74:bc:66:ec:28:59:e5:f4:a8:68:
64:54:72:76:57:97:6d:0b:b6:e1:36:ac:58:7c:57:e2:fb:76:
6b:d1:5b:18:e4:5f:a8:95:a3:48:b7:56:b4:23:eb:f8:6f:f1:
e9:ad:0a:38:23:bf:e8:15:9c:b8:3a:f9:02:a9:d8:c0:a0:be:
de:fb:78:66:00:c9:e2:29:e2:b0:5e:d9:60:8b:0f:c5:7f:e4:
70:0e:60:94:a7:2b:c7:50:39:d6:6b:dd:14:d1:d2:17:a3:47:
99:65:65:03:95:16:01:49:6d:a4:31:7d:75:5c:28:7d:81:17:
8c:5e:bb:fc:3b:4d:73:98:d6:fc:56:6e:62:68:9c:af:32:3c:
c6:dd:48:af:88:23:9c:ab:bd:bd:2a:d3:e3:31:34:9f:dc:ca:
58:d7:b2:e4:5c:4d:75:b4:5b:69:76:f9:38:c6:d5:6c:84:01:
86:1b:0d:cc:97:40:ad:cb:67:6a:bf:ad:f5:ee:38:a5:42:d2:
f1:8a:87:38:f1:9b:f6:6d:15:61:2b:99:66:1f:c1:99:3f:9e:
be:e8:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:01:12 2026 by rpki-client