Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: b7/tFAmGSK0UGUu7eYFP7xipUwxPda1eo0BR2gXt418=
Subject key identifier: A8:E0:15:2F:E5:05:BD:F0:D4:B5:8E:13:1A:D4:3F:32:44:BE:E2:E1
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 019F1867B58863E9E6591A57286081E67305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 12:01:17 +0000
Manifest this update: Tue 30 Jun 2026 12:01:17 +0000
Manifest next update: Wed 01 Jul 2026 12:01:17 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: ct/XURc6EuIwLzw2AVLl4vHA1TIWmhfPbI1XvEpoEqk=)
2: sA4kl7o5kbctohYhMH3tb8jEvIM.roa (hash: yvgE8Ar+rDnZHHbM7lyidYb1LqwSWRPZgw35u9TtMhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:b5:88:63:e9:e6:59:1a:57:28:60:81:e6:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Jun 30 12:01:17 2026 GMT
Not After : Jul 1 12:01:17 2026 GMT
Subject: CN=a8e0152fe505bdf0d4b58e131ad43f3244bee2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:68:09:54:eb:0f:2f:cf:94:df:45:c2:55:03:
72:70:9b:47:d4:52:fe:a8:6c:e4:ca:46:f4:4c:1e:
cf:b4:14:b0:b1:18:78:23:e4:5d:dd:8c:93:61:c5:
47:15:aa:84:0c:5c:1b:99:81:1a:2e:9e:42:c8:16:
f9:fd:b6:7d:6e:78:98:e2:e6:91:4b:d4:c9:af:bd:
e7:5b:c4:58:9a:c5:dc:b4:93:61:eb:9f:3c:32:7c:
c4:44:dd:a4:26:dd:ec:6f:7e:17:56:b5:0d:36:87:
61:d2:bc:99:d3:a8:05:f3:05:9b:09:16:87:78:82:
07:67:ac:89:75:78:1e:1d:ae:cb:b9:6f:ea:71:b6:
7e:f2:92:a2:62:5e:a2:95:c0:9f:ec:26:44:37:da:
be:42:f0:bb:bc:b5:29:d4:25:0f:fe:61:7f:fe:19:
fe:47:28:2b:b5:52:8f:4c:47:8a:3c:50:80:8d:9d:
7e:f4:52:32:46:55:2d:0f:b1:12:19:00:09:e5:99:
58:f8:1b:bb:f4:82:09:e3:3a:b2:fa:b0:09:a9:d4:
bc:80:64:6f:73:ee:cb:a1:ca:b9:64:b6:d0:83:80:
aa:c9:5f:45:04:2b:33:9e:2e:f9:73:ae:e9:52:ad:
6e:1f:b5:dc:0d:49:58:52:5f:aa:f4:38:98:15:df:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:15:2F:E5:05:BD:F0:D4:B5:8E:13:1A:D4:3F:32:44:BE:E2:E1
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8d:95:28:05:0c:e4:4b:f2:0d:44:94:1b:36:66:cf:72:08:
ae:8e:40:34:c5:68:bc:f5:80:4a:08:fe:e2:3c:f6:44:f9:f2:
3b:ef:5d:fb:67:2c:bb:48:ee:fa:43:65:7e:6e:80:37:5a:7e:
18:e7:ad:f2:1f:4c:8a:de:3b:f2:49:b2:50:e0:ec:b6:ef:ce:
f0:07:f0:7c:b9:d7:dc:b3:53:b6:d2:59:32:ea:cb:87:00:64:
8d:c4:91:59:13:95:56:d7:6c:3b:3e:98:8b:56:dd:16:5a:0f:
e2:0a:38:c3:ce:db:ae:c3:55:50:b8:5b:87:20:02:db:a5:81:
52:24:8a:87:2c:83:ac:6c:16:20:d7:a8:c3:2a:df:56:88:66:
56:3d:57:dc:70:1c:5f:2d:db:26:43:fb:fd:1d:66:e1:19:ad:
76:55:6d:c2:a3:c0:98:5b:b8:71:3b:a0:0c:c4:b0:38:95:9c:
cc:89:b8:00:95:a4:dc:91:94:ac:05:3a:23:17:6f:31:8a:6c:
ae:77:de:64:da:ba:8b:41:41:e5:c5:a4:44:24:b5:8f:12:57:
d7:21:1b:fb:2b:e1:1b:2e:6e:cd:2e:96:ae:0a:33:97:90:f1:
10:54:15:67:9c:8c:3c:a9:e2:80:8b:87:09:b3:74:e5:1a:d4:
6b:41:5d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ7WIY+nmWRpXKGCB5nMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTNjNDMzZjZjMjI1MDE5ZDljYjVhNDMzMDAxMmY0Yzc3
YTFmM2UwHhcNMjYwNjMwMTIwMTE3WhcNMjYwNzAxMTIwMTE3WjAzMTEwLwYDVQQD
EyhhOGUwMTUyZmU1MDViZGYwZDRiNThlMTMxYWQ0M2YzMjQ0YmVlMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WgJVOsPL8+U30XCVQNycJtH1FL+
qGzkykb0TB7PtBSwsRh4I+Rd3YyTYcVHFaqEDFwbmYEaLp5CyBb5/bZ9bniY4uaR
S9TJr73nW8RYmsXctJNh6588MnzERN2kJt3sb34XVrUNNodh0ryZ06gF8wWbCRaH
eIIHZ6yJdXgeHa7LuW/qcbZ+8pKiYl6ilcCf7CZEN9q+QvC7vLUp1CUP/mF//hn+
RygrtVKPTEeKPFCAjZ1+9FIyRlUtD7ESGQAJ5ZlY+Bu79IIJ4zqy+rAJqdS8gGRv
c+7Locq5ZLbQg4CqyV9FBCszni75c67pUq1uH7XcDUlYUl+q9DiYFd/zowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjgFS/lBb3w1LWOExrUPzJEvuLhMB8GA1UdIwQY
MBaAFAVTxDP2wiUBnZy1pDMAEvTHeh8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEt
MTgyNTEyZjhiY2RlLzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEtMTgyNTEyZjhiY2Rl
LzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABo2VKAUM
5EvyDUSUGzZmz3IIro5ANMVovPWASgj+4jz2RPnyO+9d+2csu0ju+kNlfm6AN1p+
GOet8h9Mit478kmyUODstu/O8AfwfLnX3LNTttJZMurLhwBkjcSRWROVVtdsOz6Y
i1bdFloP4go4w87brsNVULhbhyAC26WBUiSKhyyDrGwWINeowyrfVohmVj1X3HAc
Xy3bJkP7/R1m4RmtdlVtwqPAmFu4cTugDMSwOJWczIm4AJWk3JGUrAU6IxdvMYps
rnfeZNq6i0FB5cWkRCS1jxJX1yEb+yvhGy5uzS6Wrgozl5DxEFQVZ5yMPKnigIuH
CbN05RrUa0FdFw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:52 2026 by rpki-client