Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: AnADxGdrC8N9UcYEtV3jD+wTg+7jJjZqom8JFUIOl4o=
Subject key identifier: 34:52:90:FB:F7:FF:65:8C:97:D4:CB:34:7F:42:58:15:4F:1E:4E:1A
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 01A0010184053C1EAF1B98EFFEB37B764A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1992
Signing time: Fri 14 Aug 2026 16:01:11 +0000
Manifest this update: Fri 14 Aug 2026 16:01:11 +0000
Manifest next update: Sat 15 Aug 2026 16:01:11 +0000
Files and hashes: 1: 6MGzgKRGAEVBJeFLAAA-0hwv8bM.roa (hash: c/OSFg+Ab/thk2V2RHBcooUkY2+y8JbiSIvQdXTA9a8=)
2: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: e9Qk7T322MbgS9pcabdAgBk8dTPd/LEOHEhCib6ZJ4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:84:05:3c:1e:af:1b:98:ef:fe:b3:7b:76:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Aug 14 16:01:11 2026 GMT
Not After : Aug 15 16:01:11 2026 GMT
Subject: CN=345290fbf7ff658c97d4cb347f4258154f1e4e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:31:18:c4:e6:19:db:ea:a7:e3:d7:fb:c8:
09:4f:03:5e:cb:88:99:2c:f0:ad:52:3a:c6:8b:01:
bd:37:49:db:d1:fd:a4:cb:7e:2c:42:61:b5:a2:b6:
50:9e:86:e0:bf:c5:ca:1b:2d:81:84:95:9f:6c:fa:
8d:b9:f6:23:34:62:a8:56:26:c4:dc:b5:30:1f:32:
df:29:2b:e7:35:52:33:9d:49:6d:c0:64:eb:3d:0c:
25:9f:2a:ad:e3:5b:cc:6b:ca:39:8f:d6:a3:58:9d:
94:d3:a6:e2:e2:9d:0d:e0:3a:a1:90:c3:42:93:7b:
f5:29:29:8d:e4:f7:f7:27:58:03:16:b8:01:cd:bf:
77:fb:76:4e:0a:e7:3d:57:48:d2:b5:1a:3b:4a:76:
23:1f:a4:5c:e5:94:05:bc:f4:91:24:9c:99:78:cb:
c9:2a:33:f8:ef:62:17:89:99:e7:b9:22:a2:c4:ae:
c8:cf:78:a9:fd:ac:db:e4:37:ff:41:9a:9b:16:ed:
e9:57:e9:ef:19:b7:93:92:95:a5:f8:20:f0:c9:91:
da:07:7f:df:26:35:f5:ba:c5:25:24:2b:85:2d:78:
76:be:02:6f:48:3b:a1:5a:20:13:df:59:0a:9f:b0:
e5:69:33:a3:3f:03:35:3f:18:fa:7a:ae:88:4d:c8:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:52:90:FB:F7:FF:65:8C:97:D4:CB:34:7F:42:58:15:4F:1E:4E:1A
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:2c:dd:ad:8b:9a:44:9c:51:96:1d:f4:aa:47:01:19:e4:
db:25:62:98:34:7e:b6:5b:c5:90:da:d1:18:c7:2a:7b:db:e9:
b3:67:eb:8f:f4:a4:66:21:a4:ba:df:bc:7c:94:59:50:4b:5d:
57:8b:0d:0d:2e:08:2c:a1:b4:d3:e8:7e:e8:d6:21:f9:8d:44:
f3:3f:3b:ff:59:81:2b:c3:91:ec:ca:05:8f:13:cd:4d:d2:e0:
43:44:c2:1a:21:01:3c:23:39:2a:c0:c8:f7:a5:80:e0:d8:75:
70:88:db:c6:89:ab:96:77:e8:c3:c2:62:65:9e:60:a7:3e:1a:
ba:ae:28:e1:9b:62:cb:df:89:93:4d:44:e1:5e:4a:1b:c1:51:
1e:30:0d:01:06:6c:55:5a:36:66:df:09:21:69:2e:0b:25:ee:
d4:20:26:7b:49:0d:11:02:c2:25:74:0c:cf:2e:56:f6:c6:f8:
86:26:bd:7b:76:81:e3:fb:be:81:c8:7f:1c:41:12:d6:2d:87:
66:83:b0:e9:b2:37:b6:b6:01:9a:79:35:e5:68:68:92:b8:d4:
2a:9b:a7:63:42:b0:18:4b:e0:7c:96:d5:c3:4c:3a:b5:53:7a:
d9:b6:31:8c:4d:18:96:e0:3d:70:e4:23:cc:0d:7c:f8:71:dc:
04:91:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:08 2026 by rpki-client