
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File: bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier: ZhuScPBDF9T9pWgIhO9I3cxqX4EpEBHty7oSuPrhw+s=
Subject key identifier: C8:60:5B:E6:87:B5:09:EA:ED:42:B9:6B:85:C5:E9:93:94:D7:A9:4E
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer: /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial: 01A16C7F8A8E3DE0230B22F3998529C7BCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number: 02D4
Signing time: Sat 24 Oct 2026 06:01:00 +0000
Manifest this update: Sat 24 Oct 2026 06:01:00 +0000
Manifest next update: Sun 25 Oct 2026 06:01:00 +0000
Files and hashes: 1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: POGBwePe5vzb2U0evH1T9plKBzXWYX29vrM9lkeSDcU=)
2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:8a:8e:3d:e0:23:0b:22:f3:99:85:29:c7:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Validity
Not Before: Oct 24 06:01:00 2026 GMT
Not After : Oct 25 06:01:00 2026 GMT
Subject: CN=c8605be687b509eaed42b96b85c5e99394d7a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:1f:03:47:7c:43:44:fc:7f:37:66:6c:bd:
db:64:b2:95:c1:22:ac:bc:4f:db:3a:fc:62:d5:d1:
95:13:87:98:ab:8e:e0:b0:de:c4:b7:d7:3d:c3:e8:
c3:fd:11:1f:2e:b0:70:43:1a:50:06:e4:43:45:29:
ae:1c:3b:ca:17:f1:7a:40:1b:5d:87:5c:ef:39:a4:
5d:0c:19:5d:b0:43:3b:a9:12:2c:45:70:b8:2c:9a:
29:54:65:11:ce:18:31:bb:7f:8a:81:44:60:ec:6b:
45:0b:17:71:d9:b7:34:37:d9:f1:12:a5:a1:2f:42:
9e:5d:c0:d5:e2:3e:b1:7f:70:e1:e3:24:27:f9:2b:
08:6d:73:7a:0c:41:85:a4:e3:40:4e:2e:f3:e5:77:
10:a9:fd:28:b3:5e:bb:7b:65:ec:cb:8e:74:97:b4:
30:b0:e1:07:77:0a:a5:68:3d:fd:8d:1b:1e:37:be:
d6:11:10:25:47:2f:39:fb:68:50:e0:56:e5:f9:bf:
4a:b5:a3:06:ab:95:29:8e:bf:d0:14:a5:fa:13:ed:
61:24:72:78:7d:85:d8:b9:03:94:f6:65:e4:ca:da:
ff:b1:44:89:51:7d:f3:70:72:b1:66:56:e1:e7:84:
48:94:21:42:33:6f:a7:5f:b7:5b:25:87:59:30:e2:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:5B:E6:87:B5:09:EA:ED:42:B9:6B:85:C5:E9:93:94:D7:A9:4E
X509v3 Authority Key Identifier:
keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bd:be:c7:b5:30:c0:4c:af:47:9e:2f:92:3f:ad:d8:89:7b:
1f:2a:c2:a5:e9:9f:06:c4:85:01:23:36:4e:9e:85:b7:86:b7:
f8:a0:c4:76:75:05:87:7c:ef:e5:de:26:ae:43:36:81:16:17:
f4:2e:5b:1b:79:25:79:e7:13:eb:4d:d0:31:d8:b7:ba:36:7e:
84:f7:e0:6f:2d:da:76:df:f3:c0:fe:67:63:07:b9:5c:25:11:
4b:0c:0e:95:d8:75:1d:9e:ab:ca:38:f4:d9:e0:d9:7b:b1:d6:
37:f4:61:8e:40:12:33:10:d3:b7:16:17:ab:f7:48:46:50:a4:
03:04:84:19:22:83:0e:67:8c:5c:4a:de:4c:c3:69:c9:f7:ef:
b7:8a:77:7c:6a:b0:57:0c:a8:07:26:b6:bc:ea:e8:89:30:6a:
24:16:27:ed:d7:61:a4:af:a5:51:33:bd:28:be:3f:f4:34:41:
27:f1:9f:11:b6:d7:f8:67:6a:59:7e:7a:dc:82:06:21:04:22:
ed:ce:07:80:ed:06:35:ba:de:2b:10:98:86:b7:56:43:a3:41:
73:fc:2b:02:1e:09:2b:56:26:3d:65:6f:1f:2c:6c:eb:a7:ee:
28:3f:d9:f9:99:23:52:4a:fd:05:db:1d:01:83:ce:1c:04:33:
2a:f1:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:41:46 2026 by rpki-client