Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: NkrMVv0nmQGVHhUGlwS7swNUmr+68rN4xIJ40YPqYsY=
Subject key identifier: 1E:37:BE:BD:00:10:F2:B2:7C:19:00:CA:EC:08:72:6A:63:95:8D:E1
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 019F190CCD8A49430E43B9284BCD2084AB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:36 +0000
Manifest this update: Tue 30 Jun 2026 15:01:36 +0000
Manifest next update: Wed 01 Jul 2026 15:01:36 +0000
Files and hashes: 1: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (hash: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY=)
2: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: TV+xEhMLKmRUyE0nyKJx2WT08VESTlBonabx/LlTx0o=)
3: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (hash: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:cd:8a:49:43:0e:43:b9:28:4b:cd:20:84:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Jun 30 15:01:36 2026 GMT
Not After : Jul 1 15:01:36 2026 GMT
Subject: CN=1e37bebd0010f2b27c1900caec08726a63958de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:82:2a:3e:04:9f:c7:a9:03:0f:21:b9:f2:
eb:b4:ed:dd:d6:18:c7:82:bd:4c:40:0c:66:0b:7c:
ae:c6:6c:a7:ce:ef:8d:d9:db:69:95:ff:c9:49:75:
42:74:b6:a4:a8:f1:df:00:64:5b:c3:8c:e0:dd:c1:
c5:ef:a8:c5:66:ae:fc:43:e2:1f:06:68:0f:32:5d:
93:17:cc:69:68:da:cd:fc:c6:a1:cb:7e:9b:6a:66:
cc:e8:7c:14:1f:e7:d2:cb:bb:22:86:7c:56:37:77:
75:55:e5:b6:9d:86:f7:45:fb:d2:7b:54:1f:b6:80:
d7:76:ef:34:3d:83:76:39:20:73:0b:27:04:07:27:
84:50:d0:e3:9e:82:f6:4e:3c:9c:6f:9e:a4:43:a7:
28:99:4b:8c:ae:6b:ac:8d:5c:e3:a6:8d:34:53:11:
51:4d:69:55:5c:8b:4a:04:50:18:65:bd:ae:57:a5:
48:35:12:d9:e4:e2:bf:29:0d:c8:c6:a4:d4:41:62:
de:96:af:8f:23:4a:73:35:11:20:c5:be:96:c9:96:
42:d6:8c:1e:77:71:47:17:98:68:cb:c6:d9:cc:b2:
c1:07:32:35:b6:09:7c:4d:26:9a:80:d4:de:8a:ca:
5a:0e:75:69:17:63:ff:8d:5e:93:cc:fc:a2:62:63:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:37:BE:BD:00:10:F2:B2:7C:19:00:CA:EC:08:72:6A:63:95:8D:E1
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:98:42:23:64:36:b3:e0:f3:58:0a:f5:cd:ed:3a:b0:c7:
2d:39:17:91:b8:5b:b9:bd:b0:72:4c:1b:4e:47:c8:48:5d:1d:
23:de:04:ca:ca:19:48:6e:21:06:21:9a:95:7c:b8:56:50:8a:
e7:12:11:43:6f:2a:48:5a:e7:df:da:7f:6d:38:f5:92:5e:48:
58:ba:9f:10:a4:e0:28:1a:9f:c9:98:08:0b:e5:3c:48:f0:10:
6d:a3:34:8d:fb:f9:49:6f:47:13:62:ba:7e:6e:05:bb:68:14:
45:d3:d5:5b:fc:f3:8c:0f:fc:d6:58:4d:5b:9f:f2:b0:7b:26:
d7:44:56:f2:31:be:0e:2a:91:c7:8d:a6:b5:e6:d8:d5:c1:13:
3d:3e:4b:72:c9:c1:3a:eb:7d:de:c9:26:96:09:4f:37:62:8b:
3a:82:3a:a5:8d:2a:6d:e6:71:45:67:ef:4f:0f:81:d7:66:31:
4c:02:7c:8f:95:3e:f8:45:64:df:44:cf:12:68:8b:92:dc:4c:
48:c7:37:78:59:76:ca:5e:76:b6:dd:2d:cf:50:85:ac:b6:46:
29:32:e6:38:27:85:51:6b:ef:62:ed:e2:47:ea:9d:84:99:1e:
17:f6:88:ec:52:16:da:71:d1:37:82:d1:43:46:34:3e:a2:92:
35:f2:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:11 2026 by rpki-client