Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: v198bUaw1+WXPU3ZFgjmwF/5FhCclepSuohAnX6i9Cs=
Subject key identifier: 8B:4E:AC:60:72:3D:44:07:0E:35:05:4A:2F:EA:EB:04:83:AE:E8:3C
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 01A13FA735DC2D51A0E059B5C3D9E64760B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0F96
Signing time: Thu 15 Oct 2026 13:01:25 +0000
Manifest this update: Thu 15 Oct 2026 13:01:25 +0000
Manifest next update: Fri 16 Oct 2026 13:01:25 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: sSYMVl/m0nw4Ql1h4CbqlhyjAPGQ8Xnsh4bgX+eUfsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:35:dc:2d:51:a0:e0:59:b5:c3:d9:e6:47:60:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Oct 15 13:01:25 2026 GMT
Not After : Oct 16 13:01:25 2026 GMT
Subject: CN=8b4eac60723d44070e35054a2feaeb0483aee83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:f9:f8:b2:04:8e:f7:16:39:e0:e3:13:31:
0e:b8:42:0e:ff:3f:6a:21:05:59:37:b1:e6:a3:e9:
eb:81:cf:90:60:83:41:fa:e5:99:b3:dc:0e:ee:6a:
d3:5f:a6:b9:0c:2d:98:73:62:fa:9f:ad:b7:65:5c:
d8:34:3e:1d:ae:c3:89:e8:ec:2c:9a:5d:fa:11:ea:
14:52:96:99:88:65:83:ed:14:f8:97:1a:92:9c:46:
17:14:a2:83:2f:85:79:c2:cf:33:61:2c:91:4f:40:
eb:d7:d8:96:2f:f6:75:7b:30:76:ea:14:47:b1:b5:
5c:e5:15:e0:d5:31:a2:70:52:7d:2b:46:03:19:19:
e2:29:a5:dc:49:75:e0:42:31:b7:e2:1c:4c:15:21:
7e:b1:ba:8d:3e:1e:3c:0b:e6:ae:30:d1:7f:40:13:
3e:4b:2c:9e:06:c7:91:d2:23:9d:f4:2f:13:be:0d:
01:84:27:fe:35:2e:79:4b:57:30:be:b8:a8:2e:b2:
09:31:2e:74:6f:77:01:eb:3e:93:b3:ad:81:2e:70:
8a:22:8c:a8:d8:36:c4:88:52:8d:a0:72:1c:c3:57:
e1:d1:a4:7a:93:39:4a:ac:91:6f:d7:63:7c:94:be:
2c:e7:17:24:aa:c1:30:61:ef:ce:de:cb:f0:b4:2e:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:AC:60:72:3D:44:07:0E:35:05:4A:2F:EA:EB:04:83:AE:E8:3C
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:37:bb:fd:2a:f8:96:2f:19:4a:52:6a:78:d3:7a:fd:3e:4b:
9b:f0:f7:b7:90:dd:91:ad:a5:7e:57:46:67:a8:24:ba:24:22:
dc:cc:a7:68:25:8f:b1:69:43:66:43:ce:dc:93:2b:12:67:17:
0f:a4:dc:bd:85:e7:c9:f8:80:c6:63:db:a3:a5:c3:ef:6e:f0:
cd:aa:8c:82:c2:86:c5:fd:b5:f7:c9:27:8d:1f:35:91:94:ab:
a2:c4:b6:74:57:57:58:c8:6e:90:1a:57:b2:40:7b:f5:c9:40:
56:ab:a3:d0:17:b4:9e:f9:a6:74:b4:77:25:7c:16:ea:66:eb:
f6:b6:f6:67:8a:eb:e9:48:85:54:82:41:6f:b3:bf:0b:6d:a5:
de:d4:b3:50:bf:b0:78:43:97:18:8d:c5:81:67:7f:5d:6f:2a:
1f:cc:0f:9d:d3:63:2c:84:30:74:14:25:95:47:7a:b0:8f:0f:
b3:35:7b:bd:de:8a:e8:60:b1:5d:12:c4:16:72:1c:6f:81:ea:
bd:8f:25:fb:cd:ce:42:ae:20:b7:7f:44:db:cf:7c:4f:69:6c:
35:14:70:5c:55:92:bb:52:76:98:39:89:3c:4c:27:eb:21:73:
aa:b5:d4:8f:62:a6:c8:87:41:2c:96:5f:fc:1c:e7:54:b5:85:
de:1a:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:00 2026 by rpki-client