Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: GIur01RQpp2GiM5deYq8yqjCcGARKtcCpM0AEDu1rOY=
Subject key identifier: AB:CC:3C:18:8D:5C:9A:05:79:B0:77:16:46:EA:F8:C0:4E:30:83:B4
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 019D38662249A64A0E19D50B1AD223687F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: ZbHVKle/v9n2ZGoZDjS7mU3bFkllNk0UarfGa1azy1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:22:49:a6:4a:0e:19:d5:0b:1a:d2:23:68:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=abcc3c188d5c9a0579b0771646eaf8c04e3083b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:fc:fa:f8:ee:52:4c:8f:af:dc:0d:28:5f:
82:13:52:cc:f0:26:fa:d2:91:3c:ce:5e:94:f3:08:
4d:22:02:8f:b3:ca:f5:80:49:ce:fb:ce:83:5f:e5:
1d:d9:fa:35:6e:b0:81:ee:85:b0:0d:23:ac:82:6f:
e4:da:5f:8c:4a:c3:d1:da:e6:85:9d:4a:4c:d6:cb:
94:84:34:19:8f:5d:b4:cf:dd:c8:62:44:03:a3:f0:
a4:9d:ce:0e:73:58:6f:e7:44:d6:14:66:f0:79:df:
b9:51:33:58:77:04:fe:a4:3a:90:3e:b9:f9:53:ac:
13:b7:9c:fa:70:4c:72:ef:92:f7:c1:8c:08:7d:1c:
2f:1e:9c:62:62:8d:0b:4c:e8:c5:d7:95:65:bd:83:
58:07:01:c0:90:23:83:86:c4:a4:1a:40:d6:40:df:
1d:63:4e:a2:7f:c9:e0:33:6e:da:e3:7c:fb:bc:94:
0e:c2:30:a7:07:c9:00:6f:73:69:12:c3:6f:22:c2:
0a:81:b9:b3:38:94:85:b3:6c:46:26:9d:c1:fc:da:
40:6e:4a:6b:09:0b:66:7b:b9:28:db:97:e8:ae:a8:
d5:11:f6:7d:d0:0f:e8:14:ca:83:b7:27:95:7b:c4:
44:89:bc:af:f7:c3:d9:5f:28:68:8f:97:0e:69:21:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:3C:18:8D:5C:9A:05:79:B0:77:16:46:EA:F8:C0:4E:30:83:B4
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a5:e3:df:dd:2d:ff:ae:7c:c4:ad:cf:79:2c:e6:d8:44:23:
bc:99:f3:78:76:f7:31:b7:c2:41:bc:34:fd:bf:8a:84:2f:68:
20:7d:86:75:6a:e3:51:bc:20:c7:c4:50:c3:45:0e:fd:2d:d8:
e4:45:79:7e:a0:14:df:19:79:8a:5d:e7:3e:b7:45:c4:cf:fe:
74:5d:8b:b6:a6:13:81:bd:8e:c8:50:3c:16:02:01:7d:eb:3f:
97:b8:24:35:b0:36:e8:71:48:be:f9:2d:94:f4:c1:b4:81:4b:
5c:88:d8:dd:55:60:32:86:c5:7b:09:91:b5:8e:b5:f9:b0:a8:
fd:f9:81:4b:a0:87:54:bf:20:ed:bb:69:90:04:bf:65:4c:4a:
e6:39:82:d6:8f:bf:56:1a:21:4a:c6:96:03:38:5c:ac:4a:23:
29:3e:38:3c:57:c6:26:ae:61:fe:05:94:d6:9a:66:b1:26:3b:
88:3e:1a:31:a2:61:d0:e1:be:ad:5d:30:89:fa:0f:58:c6:13:
73:62:7e:8a:21:2b:45:ed:c1:e0:b2:a3:fc:f4:69:ed:99:75:
64:46:9f:72:d9:e3:af:48:ac:f3:e5:98:24:d8:90:1c:b5:79:
33:f7:a6:c7:42:5a:4e:a8:97:d9:d6:65:49:f1:35:e7:77:9e:
17:9e:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:42 2026 by rpki-client