Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File: bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier: ZKgTccVyaHFjkMIRFe6cj2epjgY0AUaX/DCp1a3k//s=
Subject key identifier: 90:4A:EE:53:F6:DD:8B:54:B3:11:29:D3:E6:B7:18:4F:E6:2A:25:24
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer: /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial: 01A1976A12FD82A70414425B1523E06E9F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number: 0381
Signing time: Sun 01 Nov 2026 14:01:13 +0000
Manifest this update: Sun 01 Nov 2026 14:01:13 +0000
Manifest next update: Mon 02 Nov 2026 14:01:13 +0000
Files and hashes: 1: IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (hash: MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=)
2: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: lkac0qL4v80obkd7ZCXOwuRzqmH0xoMyhJfc+l9Va5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:6a:12:fd:82:a7:04:14:42:5b:15:23:e0:6e:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Validity
Not Before: Nov 1 14:01:13 2026 GMT
Not After : Nov 2 14:01:13 2026 GMT
Subject: CN=904aee53f6dd8b54b31129d3e6b7184fe62a2524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:a4:a7:d8:24:e7:89:6c:f3:c7:8a:19:51:
ed:34:3e:2d:23:7e:44:64:8b:bb:e6:44:62:d5:f8:
08:50:f7:33:d8:27:56:9a:41:c4:42:be:f0:eb:c2:
bd:9e:07:4f:48:8a:d9:c3:a9:93:5e:dd:de:2e:d8:
de:72:4a:1c:da:86:ca:6d:31:f2:2f:11:d7:69:24:
16:87:46:46:62:06:8c:5a:3c:a1:9e:aa:89:41:54:
cb:7c:fd:5a:9a:b8:75:f9:fb:79:e8:a4:4b:9f:b3:
41:fa:29:fe:f9:92:f9:a1:8d:5b:de:9b:83:c6:19:
72:00:50:d9:85:d4:9b:c1:a7:ce:00:a0:0b:43:a2:
47:7b:2d:30:1c:98:76:cd:ea:07:e7:1b:2b:8e:1c:
82:e6:82:59:d4:93:76:a6:66:65:7e:fd:71:55:b5:
ed:27:ea:c0:1e:23:d6:fe:42:cd:38:e9:db:10:14:
a7:3d:57:1c:31:97:80:74:8c:1d:a7:fc:e1:3a:13:
c9:0a:da:4a:a1:dc:68:18:73:7d:51:74:52:02:8b:
c0:aa:02:53:44:bf:46:0a:12:f4:5c:04:af:51:0c:
2d:5d:a3:8b:89:46:37:b9:51:09:15:8b:6d:20:1c:
31:48:6e:a1:52:28:37:20:7f:93:3f:6c:aa:f6:ec:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:EE:53:F6:DD:8B:54:B3:11:29:D3:E6:B7:18:4F:E6:2A:25:24
X509v3 Authority Key Identifier:
keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:87:90:24:cc:fc:b1:3c:b0:36:33:c4:de:76:80:22:f6:
e4:38:49:84:b1:48:46:41:f5:6c:59:96:34:74:2b:ea:7f:fb:
06:d9:fd:a6:79:e7:c8:cf:59:52:17:37:a7:90:91:07:f5:1d:
5f:f6:95:4c:2d:5f:28:ff:6d:bd:17:9f:84:06:ea:33:9f:b9:
a7:76:91:3d:6b:4e:18:d8:97:a4:e4:0f:7e:a2:eb:19:28:53:
0a:4b:f4:77:f6:59:a6:2e:4a:d2:b2:31:71:ba:40:7b:a5:4c:
01:68:85:55:ce:26:07:9c:bd:f9:06:05:73:a2:4f:6c:14:10:
59:1b:b0:87:49:44:2a:db:fd:e6:85:81:d4:e5:50:6a:ff:bc:
48:94:c4:61:dc:ae:f1:f5:c7:f4:22:6d:6e:54:27:6d:4a:6f:
f9:ca:14:55:e8:37:c6:88:95:d0:9f:98:e5:5b:65:7c:ed:5c:
91:84:d9:06:c0:3e:29:40:0a:dd:fb:61:2f:78:eb:76:5d:54:
e5:65:d0:d9:6e:c3:51:4d:12:53:28:bc:09:bf:1a:7d:f4:40:
07:a8:10:5c:4b:05:b1:b0:9a:e9:87:cc:99:1b:10:53:e8:e2:
6a:21:24:0c:4d:a2:5a:8a:d3:f5:a1:d0:82:a5:7a:d9:00:60:
e7:4b:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:19:20 2026 by rpki-client