Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File: bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier: Fx5OJpvM6piAhlXVCbAMqFTIkNB/+Q1im4+14Ykjx/I=
Subject key identifier: 13:2F:75:23:71:97:D0:77:89:E0:78:F1:F2:BF:90:56:DF:36:19:8A
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer: /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial: 019D3940EC11C8D066568A17C83E75E6930C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number: 013D
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: HQifQUkp+3qEMvjWfKLPMuFomFQgN3c0WQlPRTDZ+Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ec:11:c8:d0:66:56:8a:17:c8:3e:75:e6:93:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=132f75237197d07789e078f1f2bf9056df36198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:62:2d:38:b9:0b:5f:01:fc:49:2e:81:89:
fe:b6:a4:36:0f:b3:56:48:a7:54:fe:9e:2f:6b:fb:
50:20:0c:15:1f:58:9d:f4:3b:a4:ff:d9:49:1c:b5:
4b:ac:5a:b2:b1:91:b6:bc:bd:e6:80:5b:d2:39:a6:
f4:42:d7:f9:8a:af:d3:40:05:eb:c0:5c:cb:04:27:
42:ef:7c:4d:81:fc:77:0e:10:6d:24:27:43:8c:0d:
e1:f4:20:cd:ce:42:b6:19:03:8c:e1:3e:2b:94:c8:
de:7a:0c:d5:f6:e8:36:46:66:34:88:7f:93:6d:16:
7d:5b:5a:ab:5d:84:e3:3b:7a:73:b5:07:61:e9:99:
87:46:7f:83:f2:3f:aa:b3:ea:81:c9:fc:27:c8:24:
3c:68:e4:a0:9c:6c:f4:fa:70:9e:21:7a:fa:c4:85:
54:08:a4:9b:ab:62:e1:f5:a6:f2:84:cd:2d:08:cd:
96:75:22:11:1a:b6:eb:eb:68:43:05:c6:23:66:f2:
f4:bd:7a:0f:aa:80:b9:91:5e:f8:d0:31:8e:10:ee:
d2:6f:6c:10:75:60:bc:d7:f1:18:88:4c:96:ed:ef:
b5:aa:1a:cd:9d:8e:7d:d4:60:d2:82:61:4f:4f:b1:
bd:77:f3:c0:ae:4b:78:c1:4b:a7:3d:a3:dd:17:8c:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:75:23:71:97:D0:77:89:E0:78:F1:F2:BF:90:56:DF:36:19:8A
X509v3 Authority Key Identifier:
keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:31:c5:f6:ff:72:13:57:9d:f3:26:7c:9b:80:46:5f:3c:
24:3d:83:e0:d3:98:38:3c:4b:7a:53:bb:32:a5:9f:78:09:4d:
14:93:9c:9e:96:bc:84:71:c9:1d:16:36:ef:f0:0d:57:d0:5d:
7a:54:20:27:4d:ba:05:f6:ff:b6:af:32:92:00:29:f1:71:5d:
c1:b2:e2:92:b7:cb:e4:ad:86:86:a0:6a:43:94:ed:6e:f3:4b:
62:e5:44:7f:5a:07:d0:04:ad:9f:71:cd:cd:7f:c2:ff:59:74:
c9:ec:92:fe:54:87:dd:0c:81:05:80:56:dd:f9:4a:17:17:fc:
9f:cc:6a:50:20:88:4c:e7:f4:c4:d0:ef:1c:a5:32:ea:64:13:
34:2d:35:f1:5f:fd:f5:6b:24:2b:92:7b:7e:d3:24:60:2e:47:
01:b2:05:77:70:b3:e8:38:e6:73:8e:71:d3:78:6b:72:e0:7f:
8c:49:be:8a:34:a8:84:e5:a8:b0:6f:1e:cb:99:1e:43:9c:99:
64:1f:d8:93:03:8d:bc:3f:2f:4a:99:65:40:08:9f:b9:18:97:
66:63:2f:0f:71:f5:32:07:5f:ca:c0:2f:10:b6:68:39:06:a0:
4a:6e:d5:e5:05:14:59:7b:bf:bb:37:34:19:db:1e:a9:67:76:
bf:f2:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:32 2026 by rpki-client