Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: Dqc8uvZ+UdZRIXNL/AkuMUSQuYP/Oh6/sCXRU225IKU=
Subject key identifier: 24:63:35:B2:8C:BE:37:C3:26:99:75:0B:23:5C:A3:24:68:F4:3F:42
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 019CBA3965CA0D3C91B46D348BEBDFB1C813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 184E
Signing time: Wed 04 Mar 2026 19:00:49 +0000
Manifest this update: Wed 04 Mar 2026 19:00:49 +0000
Manifest next update: Thu 05 Mar 2026 19:00:49 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: NDT1itS/90anzk5CyG0vTlaRUnFLSrcrSa5bIjipXdo=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:39:65:ca:0d:3c:91:b4:6d:34:8b:eb:df:b1:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Mar 4 19:00:49 2026 GMT
Not After : Mar 5 19:00:49 2026 GMT
Subject: CN=246335b28cbe37c32699750b235ca32468f43f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:89:b7:bc:4a:bd:a0:32:d5:45:3f:df:ef:
bc:61:91:a9:b7:ee:84:72:a4:21:10:5a:76:06:f7:
d9:7a:b2:d0:c8:fa:58:93:ed:b4:7a:7a:aa:4a:d7:
46:8e:8f:1a:c0:ec:16:a3:ef:14:93:a7:f5:ae:67:
1a:5e:2f:2f:c5:b1:1c:b3:e2:74:a3:07:32:20:08:
54:f5:88:b3:3d:b3:bc:b7:d9:6d:e4:ff:61:89:a5:
5a:59:04:0e:ef:b7:d2:6d:88:3c:c1:b3:16:df:55:
9d:cc:61:db:aa:99:0e:ef:3f:19:47:86:4d:a8:48:
85:b2:c4:45:af:da:86:97:5d:ce:ec:25:b6:28:aa:
c8:2b:75:e3:10:74:84:29:f8:37:34:ca:7f:45:c8:
fa:2c:c8:72:83:bf:e0:5f:41:2a:48:78:3b:d3:75:
69:ff:0d:8f:30:70:93:d8:27:55:58:05:58:fd:29:
84:99:14:dc:c6:22:a3:ce:e1:aa:ec:96:93:f2:fc:
8a:4b:f3:cf:f9:39:66:c2:ff:7c:2d:b1:5b:53:a0:
73:37:0c:e4:b1:79:4d:14:e2:17:5e:0b:a4:4c:7a:
71:8a:de:cb:57:61:e8:e8:55:f4:32:97:3f:32:05:
b9:ec:06:60:4b:9d:ce:33:ff:57:67:3d:82:5b:66:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:35:B2:8C:BE:37:C3:26:99:75:0B:23:5C:A3:24:68:F4:3F:42
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ea:04:34:8d:e9:35:04:34:cb:0c:59:81:f7:b5:aa:0e:c7:
ad:c1:31:5a:29:3c:7b:98:75:f6:0e:44:8c:01:fd:eb:38:d6:
38:c8:51:ea:9d:d0:1c:00:3b:4e:af:80:6a:bb:9f:9e:88:35:
02:33:50:48:97:6d:70:8d:93:b7:d7:cc:0d:97:ca:5c:49:54:
9e:b2:be:57:07:27:b5:37:bc:ea:b1:62:11:34:54:ae:30:cd:
d7:fa:5b:38:b6:6a:bd:8d:79:1a:ca:3a:7a:f2:30:8d:d5:41:
3e:e0:77:1a:3f:a5:35:e5:1f:ed:c4:db:50:33:f6:56:a7:2d:
c1:d1:1f:fa:59:32:76:3d:bd:af:3b:da:4a:68:54:fd:7b:25:
95:4c:92:6f:50:d5:36:dc:fc:59:58:a0:88:5b:9c:7c:cb:68:
17:81:ff:fa:64:73:44:6a:db:e1:f9:dd:e1:5d:0e:ad:57:69:
31:8c:90:7e:19:6d:77:6d:ec:8d:1d:ff:39:93:ce:a3:e8:6b:
79:80:55:c5:be:38:fd:40:13:0c:36:88:2b:c3:35:b1:9f:36:
b9:cc:98:23:11:cc:85:53:87:37:19:48:5d:88:73:c4:d4:31:
d7:38:19:05:fe:f3:28:28:ac:7a:30:2c:91:79:0f:f5:5a:0b:
75:11:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:53 2026 by rpki-client