Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
File: BBdxOWPXl8qxnCqXKjdVarrjd10.mft (raw, json)
Hash identifier: /PMXFEo21Q1McQqnHnCrMfEEyQYcmv0AM5ACw92AoJc=
Subject key identifier: 7C:4E:33:E0:6F:60:C9:72:EB:F4:EF:ED:07:F5:4E:A8:82:4C:9D:D8
Authority key identifier: 04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
Certificate issuer: /CN=0417713963d797cab19c2a972a37556abae3775d
Certificate serial: 01A03FE016695FF5E98A592184A77345C3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
Manifest number: 0202
Signing time: Wed 26 Aug 2026 21:00:45 +0000
Manifest this update: Wed 26 Aug 2026 21:00:45 +0000
Manifest next update: Thu 27 Aug 2026 21:00:45 +0000
Files and hashes: 1: 51pmhH6W4AK3WWsnVVnIrOwxdRQ.roa (hash: gyQzGLPGiPYb0c+BL3lvQWYvsv/NVK56hFx0AgBgsYY=)
2: BBdxOWPXl8qxnCqXKjdVarrjd10.crl (hash: DMEJRmgieCp7lL/LOczNJu+NOyWQfcEmyaFLnVSPa1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:16:69:5f:f5:e9:8a:59:21:84:a7:73:45:c3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0417713963d797cab19c2a972a37556abae3775d
Validity
Not Before: Aug 26 21:00:45 2026 GMT
Not After : Aug 27 21:00:45 2026 GMT
Subject: CN=7c4e33e06f60c972ebf4efed07f54ea8824c9dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:54:9e:6e:75:d5:f5:fa:d6:3b:cd:31:e4:
f8:c9:8d:7f:dd:a9:77:76:fe:60:97:92:34:86:8d:
ea:a3:b1:73:68:f0:54:8c:55:b2:72:01:3e:50:2e:
35:e2:de:56:ee:e0:cd:61:43:86:3b:86:c6:1e:90:
b5:cc:f8:f9:4b:b9:45:05:91:cf:54:c3:84:45:8e:
4f:8b:00:cf:71:2f:5d:33:af:c1:75:5f:77:94:d1:
aa:63:11:c7:67:d1:1e:e9:eb:2b:11:af:fc:ff:f6:
fd:a9:fa:54:69:64:3a:e2:e9:35:03:c7:05:18:1f:
ef:e3:39:53:52:d9:cd:c5:ad:de:71:be:04:c4:3f:
94:2e:3b:6e:a6:46:3d:38:88:24:80:ca:21:ce:0b:
45:ce:fe:0c:47:72:41:0a:b8:e9:5b:72:0b:78:a9:
f6:9e:76:dc:1a:71:ec:a7:6c:5f:3e:ca:ff:4d:7b:
02:fb:e6:1d:cf:31:18:da:28:b7:05:ff:16:bd:30:
be:49:cf:ed:a6:c1:2a:5d:15:0f:17:b5:27:b0:aa:
04:3a:4f:55:94:7b:b4:a6:25:82:60:65:bc:08:40:
fd:dd:01:b0:c8:0e:4c:cf:5c:89:e6:6c:a8:08:c7:
00:6a:f5:37:6b:5d:2b:6e:dd:1e:4a:fe:7c:29:00:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:33:E0:6F:60:C9:72:EB:F4:EF:ED:07:F5:4E:A8:82:4C:9D:D8
X509v3 Authority Key Identifier:
keyid:04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:10:8e:0a:95:5b:bd:f5:9c:e6:e3:dc:5d:a9:8a:bf:cb:
09:e0:44:14:f1:7f:fc:59:84:79:00:6f:27:b9:2f:24:4a:2e:
20:0e:5d:1d:15:a6:0f:8b:8a:61:01:de:fb:70:b6:1a:ae:ef:
4b:23:6e:3e:2f:e5:57:01:f3:8b:0d:9e:7e:c7:aa:84:65:f8:
76:5b:23:5d:93:9f:b9:f5:1a:44:a0:e6:d4:8c:bf:af:d8:b9:
17:74:e1:f7:db:7c:e9:c1:4b:d7:06:51:10:a2:e3:53:cd:d7:
76:01:ef:58:e3:ec:03:27:6e:5c:33:72:40:6e:4e:db:47:8a:
ad:b8:20:d2:2d:6d:25:c5:c6:5f:f3:1e:8f:61:e0:94:18:06:
cd:f6:2a:ac:33:6a:47:10:45:a1:72:40:7a:8e:25:28:03:a9:
d4:51:f9:51:1f:41:8f:e6:8b:a1:27:be:f8:74:c2:b2:c2:a5:
4e:44:e7:6a:3b:a4:f1:c9:72:cb:74:54:c0:90:3c:cd:51:db:
78:78:09:81:fb:4a:7e:e4:5b:fa:83:38:eb:68:b8:e0:3c:e0:
aa:46:3a:c4:00:c5:e8:54:93:fb:df:fe:9c:10:d0:41:81:e2:
bd:f7:f5:92:8e:65:22:d7:b8:df:27:cb:c6:35:b4:61:14:b8:
49:ab:20:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:53 2026 by rpki-client