Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.mft
File: BvhAXSjMa31lSfWlKcW2V4aJnYc.mft (raw, json)
Hash identifier: HhBpzyvX/qTcKMQBSch4y6VJMy3r/R0n8s3w4cQO9dY=
Subject key identifier: 5B:65:C3:0F:1C:84:BA:65:8B:18:5E:37:8B:D7:DC:C4:24:68:59:84
Authority key identifier: 06:F8:40:5D:28:CC:6B:7D:65:49:F5:A5:29:C5:B6:57:86:89:9D:87
Certificate issuer: /CN=06f8405d28cc6b7d6549f5a529c5b65786899d87
Certificate serial: 01A0404DE193739E8B652A62213AF3F5E5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvhAXSjMa31lSfWlKcW2V4aJnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:00:40 +0000
Manifest this update: Wed 26 Aug 2026 23:00:40 +0000
Manifest next update: Thu 27 Aug 2026 23:00:40 +0000
Files and hashes: 1: BvhAXSjMa31lSfWlKcW2V4aJnYc.crl (hash: FZ6Mw5h01w9iMvb1vqnwpulasB43Syks/SE8SbOxnPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvhAXSjMa31lSfWlKcW2V4aJnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:e1:93:73:9e:8b:65:2a:62:21:3a:f3:f5:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f8405d28cc6b7d6549f5a529c5b65786899d87
Validity
Not Before: Aug 26 23:00:40 2026 GMT
Not After : Aug 27 23:00:40 2026 GMT
Subject: CN=5b65c30f1c84ba658b185e378bd7dcc424685984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:ac:c2:e3:bb:e8:13:94:0d:69:11:7b:ab:
0e:cb:68:58:e1:56:02:34:fe:22:42:80:a7:47:d7:
46:e2:5c:de:fd:4e:d2:a4:4c:40:77:6f:a2:e8:f7:
cc:2f:7e:c7:05:9e:14:36:e9:89:37:5d:ef:d8:b6:
87:20:7b:61:2f:8a:28:ee:41:de:a1:7d:29:93:83:
6f:60:6a:17:86:59:dd:c5:fc:dd:70:89:c0:35:b1:
81:ef:63:fa:3f:03:27:ee:25:84:f0:a1:76:22:44:
bc:6c:b2:5b:87:47:da:f2:b3:bc:6f:a1:59:3d:e3:
98:ee:46:36:2d:2e:39:1e:a3:b4:2f:9d:82:f7:d7:
71:6e:1a:1d:f4:db:da:81:31:4a:f7:0c:93:87:f1:
3f:3a:bb:6d:8d:27:1a:89:66:ee:1c:0c:f9:61:2c:
e8:c1:71:22:04:da:d9:d3:60:a9:af:55:bf:dc:1b:
3d:2c:8a:ec:7b:82:f4:4f:3f:13:0b:1e:42:66:c3:
0a:14:73:a6:08:69:1f:e5:7c:ed:4b:aa:cc:3c:18:
6b:08:01:a7:96:01:0e:99:b3:48:3c:5e:8d:06:08:
a2:f8:e4:3a:08:b5:b4:31:46:7b:b9:52:8d:9f:08:
01:b6:cd:e7:3f:d4:99:38:8f:f6:e9:72:c0:a4:a1:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:C3:0F:1C:84:BA:65:8B:18:5E:37:8B:D7:DC:C4:24:68:59:84
X509v3 Authority Key Identifier:
keyid:06:F8:40:5D:28:CC:6B:7D:65:49:F5:A5:29:C5:B6:57:86:89:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvhAXSjMa31lSfWlKcW2V4aJnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:2d:51:a9:ff:79:a3:54:30:fe:b8:5a:8e:5c:6c:05:4b:
6d:f4:4d:be:c1:66:fe:83:79:03:0a:d3:0e:a4:eb:3f:06:81:
dd:7e:2a:b2:80:2e:fe:72:e2:98:3d:4d:99:73:c1:91:c9:06:
aa:41:c8:f8:27:3a:a6:51:2c:ab:fb:86:40:88:db:00:bc:bd:
81:7b:83:13:56:96:69:fc:e2:81:da:95:77:0d:65:8e:73:f1:
74:e8:0e:58:4c:6a:a9:2b:c3:8d:ed:28:6f:92:c8:99:6d:d3:
f1:b5:24:2a:5c:d1:e0:68:9f:93:1f:5f:03:2a:8c:9a:b2:ce:
f3:30:71:07:09:9b:f5:b1:16:0a:56:1e:a6:44:90:0b:ac:75:
27:37:80:ca:26:95:cc:d6:dc:b7:24:14:14:6f:58:ad:75:68:
ba:e0:c4:cb:fb:16:58:3b:48:75:7e:d9:85:bc:87:8d:32:21:
38:92:b9:ad:d9:5d:65:be:19:42:31:b7:2d:14:a2:02:e9:51:
3b:b7:26:b2:b5:f3:6b:3a:38:fd:b9:0d:a4:6b:7f:e8:77:74:
92:01:d8:4f:8b:0f:4f:71:c3:5b:8e:0b:b1:0f:7c:c2:31:2d:
14:12:91:da:3f:30:21:c9:ab:a2:1c:aa:97:8f:3a:b0:ab:a0:
90:a0:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:29 2026 by rpki-client