Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: V4049knCmdMp1xgFQ1pRRJwhLo72z6m6WdY9INuyloE=
Subject key identifier: A4:46:4A:E9:32:E0:5F:82:04:E1:49:82:59:E1:F0:36:5E:24:CB:DD
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 019D39AEF5BFC192FE439A17F59C5330DAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:00 +0000
Manifest this update: Sun 29 Mar 2026 13:01:00 +0000
Manifest next update: Mon 30 Mar 2026 13:01:00 +0000
Files and hashes: 1: 5u4yfVKLM7CuktVTwTBtBI5l6mE.roa (hash: uO9x72nmQmlknEm+PYx41lDnMkhqVv8VEIukGO6B+TE=)
2: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: DmP6cssYDel7fpYjHQa4HZ4Xxs0Nxl4kGNocEQCFuVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f5:bf:c1:92:fe:43:9a:17:f5:9c:53:30:da:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Mar 29 13:01:00 2026 GMT
Not After : Mar 30 13:01:00 2026 GMT
Subject: CN=a4464ae932e05f8204e1498259e1f0365e24cbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:55:c6:57:81:8b:fa:05:d6:f7:b4:48:ca:
59:84:e3:1b:37:15:88:6c:d4:ce:9c:e0:af:45:d5:
3a:ea:f6:a5:c9:b8:68:37:32:6a:e2:9a:c1:c3:7e:
d0:7e:d7:3b:82:89:06:8a:d8:7b:d3:65:b5:cb:05:
89:8c:27:53:3d:b3:41:58:13:fc:41:fb:e9:e9:d5:
9d:b1:25:cc:3c:c9:66:34:c5:81:6e:44:ce:f9:3c:
0c:0a:66:24:f7:c6:29:64:7d:a9:f7:be:9b:dc:45:
f6:30:26:24:4f:a5:1f:78:a4:ee:ea:44:83:f7:23:
24:ea:31:b7:4a:14:df:49:0f:b4:08:fe:62:7b:6a:
6c:b1:72:fd:ef:60:1a:16:5a:62:11:6a:67:71:00:
93:7f:8b:d0:b6:9c:f0:e0:43:28:90:e2:f4:a0:3e:
7b:99:57:8e:06:d3:cc:38:8c:86:62:37:31:7a:d8:
f7:ae:4f:cb:9c:9a:33:4f:34:3b:dc:d7:46:d1:73:
e1:f5:fb:87:84:22:06:c5:45:36:9d:d4:12:1d:5b:
38:e2:eb:b3:4f:6f:45:44:82:1f:68:02:69:85:40:
2e:19:2d:f2:10:0e:3f:cf:ed:fc:79:31:0d:d5:25:
ee:f9:16:02:fe:f8:cb:d9:a3:9a:8b:ab:55:0f:f7:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:46:4A:E9:32:E0:5F:82:04:E1:49:82:59:E1:F0:36:5E:24:CB:DD
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:bd:c4:2a:87:11:ee:3b:2f:32:aa:5f:8b:c4:06:08:00:
01:a0:28:70:38:0b:09:19:e9:c8:e2:23:b0:90:41:b4:c1:c3:
42:62:d7:68:7b:b5:36:b9:a4:3b:f1:10:44:ef:5a:98:de:ee:
e2:40:bf:76:f4:7b:cc:c1:20:54:ea:a0:60:c6:f4:39:01:25:
f8:b0:2e:2b:b6:35:59:13:11:4f:ef:f1:88:33:df:cc:0d:23:
5f:31:ed:2e:e5:8f:05:4e:e6:d3:91:05:61:15:f3:74:f9:b7:
9b:c4:fc:c9:4b:97:98:a4:cb:ca:99:a5:39:a9:55:ab:e4:60:
28:24:72:34:59:47:98:3d:fb:23:7f:97:79:98:fa:88:66:a6:
fa:59:91:cc:ab:61:77:4f:05:2b:5d:89:88:59:eb:54:b9:85:
0d:bb:19:61:ae:0b:0d:26:2c:1f:e2:5a:e9:ad:f8:81:33:28:
06:fb:3d:0d:0c:d5:ad:98:93:2f:e1:6f:49:e3:76:ee:29:96:
f5:2c:7d:57:91:31:14:ec:52:50:c6:b5:07:15:f4:05:85:bf:
17:47:4a:2a:10:ba:f3:a9:78:93:30:72:c6:8b:60:11:52:93:
dc:b7:17:13:a4:07:f8:8c:88:57:4b:4c:93:34:5d:69:8e:be:
30:7b:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:11:25 2026 by rpki-client