Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier: MkbvrBpx1JiFTyxFDRJQFxYFCXDjgBgBrzm02nkUGw0=
Subject key identifier: E9:F0:09:22:01:57:EB:7A:48:E0:9D:79:E7:97:B3:F5:FD:5F:9A:90
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 019D382E2E1C77A9ADD2973923D901B71E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number: 0CDE
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: oBUrAgVqK4BTQulbJXz6FkQPwH5mMJMwrgBqOZpBvys=)
2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2e:1c:77:a9:ad:d2:97:39:23:d9:01:b7:1e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=e9f009220157eb7a48e09d79e797b3f5fd5f9a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:e7:68:97:06:49:76:75:8c:8a:55:43:ae:
4f:c3:f2:47:e2:ab:10:2e:43:e9:da:84:1a:d4:41:
73:72:97:f9:b5:20:6c:73:34:cd:6f:eb:31:5b:3b:
f7:05:6c:86:d7:10:48:cf:ae:cb:8d:ef:7c:99:68:
60:80:9c:c9:c4:64:b7:e8:c3:5d:1c:50:33:ed:37:
e6:0f:94:80:f1:44:2d:a6:aa:b5:52:6c:38:0d:f9:
aa:9e:51:53:f6:a6:af:d2:4e:6d:73:1d:bf:19:58:
ca:a3:c9:96:78:09:99:a5:da:52:80:17:93:35:cd:
22:78:6d:ea:d4:7d:16:7f:18:e0:57:0f:05:35:95:
be:56:cb:03:88:32:35:cf:53:6c:da:31:be:ea:9a:
ba:75:d1:34:ce:e7:5d:32:25:f6:e2:0c:36:a8:16:
10:dd:32:51:b5:15:29:6d:d0:aa:28:bc:df:ce:83:
67:f9:3e:a5:24:db:2a:54:dd:07:0e:1a:16:56:aa:
7e:49:19:4d:5c:0c:40:b3:dc:b9:63:39:1f:4a:aa:
23:6c:ac:9d:cd:8f:aa:50:ae:19:97:6a:67:64:7b:
58:62:e3:24:b4:24:e7:cc:51:71:ce:2b:8b:da:b6:
f0:98:f8:30:03:3b:42:32:b3:b7:7f:f3:c8:32:61:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:09:22:01:57:EB:7A:48:E0:9D:79:E7:97:B3:F5:FD:5F:9A:90
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:08:cb:3f:40:34:30:56:4d:1e:c0:fb:cd:10:5b:8a:73:
00:53:40:f8:a0:87:29:31:fe:30:18:0f:7d:ca:8a:94:d7:09:
f2:b6:86:5d:c9:e1:b5:c8:41:fb:d3:05:2c:a1:63:84:99:f0:
90:c9:91:de:c4:a3:55:da:29:c9:61:32:fc:75:7b:fe:ce:cb:
36:93:f3:10:9f:23:b4:7b:15:fe:ad:2d:76:82:95:83:a5:13:
c2:97:5c:71:a8:d5:72:66:a6:bf:d1:35:2a:bd:16:ca:69:a5:
4a:9d:f4:03:03:4b:4c:aa:48:ff:d1:82:fc:7d:d5:5f:ff:c0:
d4:1c:1d:e7:fe:1f:09:4f:48:7e:f4:00:29:57:03:4b:40:cb:
30:ae:9b:df:71:bd:c4:1e:4f:24:b8:cd:fe:26:92:c9:75:34:
79:e4:5b:da:f3:ee:98:a2:07:4d:f4:9a:c2:bf:cd:11:e5:d2:
e6:6a:ba:8e:dc:1c:3c:e8:85:08:c7:c3:4b:b5:37:6b:cd:ea:
40:20:7d:5a:0e:b7:56:e2:55:45:7b:5b:ad:0b:35:c6:f6:d5:
a9:bd:d8:b0:50:a2:c8:2f:fe:f6:ca:fa:fd:0a:0e:a4:29:3f:
0d:87:da:a8:ed:9e:e5:26:8b:d4:68:e3:d1:f5:f9:fa:20:ef:
77:fa:02:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Li4cd6mt0pc5I9kBtx5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDA4OWE3MTQ4YjI2MWEwNTllNjY2ZmViYTU5ZjkyYTI2
OGMxNmMwHhcNMjYwMzI5MDYwMDQzWhcNMjYwMzMwMDYwMDQzWjAzMTEwLwYDVQQD
EyhlOWYwMDkyMjAxNTdlYjdhNDhlMDlkNzllNzk3YjNmNWZkNWY5YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwXnaJcGSXZ1jIpVQ65Pw/JH4qsQ
LkPp2oQa1EFzcpf5tSBsczTNb+sxWzv3BWyG1xBIz67Lje98mWhggJzJxGS36MNd
HFAz7TfmD5SA8UQtpqq1Umw4DfmqnlFT9qav0k5tcx2/GVjKo8mWeAmZpdpSgBeT
Nc0ieG3q1H0WfxjgVw8FNZW+VssDiDI1z1Ns2jG+6pq6ddE0zuddMiX24gw2qBYQ
3TJRtRUpbdCqKLzfzoNn+T6lJNsqVN0HDhoWVqp+SRlNXAxAs9y5YzkfSqojbKyd
zY+qUK4Zl2pnZHtYYuMktCTnzFFxziuL2rbwmPgwAztCMrO3f/PIMmFqiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnwCSIBV+t6SOCdeeeXs/X9X5qQMB8GA1UdIwQY
MBaAFAXQiacUiyYaBZ5mb+uln5KiaMFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEt
MWVhYTNmMjJkZjUyLzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEtMWVhYTNmMjJkZjUy
LzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYx8Iyz9A
NDBWTR7A+80QW4pzAFNA+KCHKTH+MBgPfcqKlNcJ8raGXcnhtchB+9MFLKFjhJnw
kMmR3sSjVdopyWEy/HV7/s7LNpPzEJ8jtHsV/q0tdoKVg6UTwpdccajVcmamv9E1
Kr0WymmlSp30AwNLTKpI/9GC/H3VX//A1Bwd5/4fCU9IfvQAKVcDS0DLMK6b33G9
xB5PJLjN/iaSyXU0eeRb2vPumKIHTfSawr/NEeXS5mq6jtwcPOiFCMfDS7U3a83q
QCB9Wg63VuJVRXtbrQs1xvbVqb3YsFCiyC/+9sr6/QoOpCk/DYfaqO2e5SaL1Gjj
0fX5+iDvd/oC5w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:39 2026 by rpki-client