Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: du+awKfd2pQOpRle4FlIu6E/4uQyHRGJH8uyWAEmJbM=
Subject key identifier: 39:06:FD:1C:DB:EA:C8:5E:A8:B7:48:83:EA:9A:CA:47:48:5C:C1:2B
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 019D38660CE424A71CE8C9E14BB868F2673F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0D80
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: tEQylKtpoAI3NwpIzE2NAbSCxwNXM0HWsSrGkOqtfKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0c:e4:24:a7:1c:e8:c9:e1:4b:b8:68:f2:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=3906fd1cdbeac85ea8b74883ea9aca47485cc12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:6b:4f:e7:d5:23:b9:e2:58:4a:82:b3:9f:
be:a1:8d:7b:69:14:6e:dd:71:1d:79:99:c5:dc:3b:
43:15:95:13:ab:b2:5e:83:98:d2:89:60:8e:6e:fe:
ea:ef:c9:b8:46:c4:a5:09:f3:f4:04:ae:6c:9b:b9:
47:81:d6:af:28:fc:5e:5d:e9:61:12:08:fa:bb:36:
5a:46:b9:bd:8c:ae:82:7e:c4:9c:47:72:0e:2c:7b:
8f:f7:9e:1a:b4:c5:fb:e2:7e:da:1d:51:18:01:3a:
74:88:8e:04:df:7e:b7:e7:43:c5:8f:fa:09:ec:9e:
76:e5:26:6e:37:e4:8f:7f:10:17:e5:5c:7e:fe:52:
ad:90:7e:77:11:0b:4b:8b:58:9f:db:6d:71:46:45:
93:64:c5:84:30:b5:29:68:2f:fe:a2:9e:34:df:26:
4c:c9:b0:77:0d:36:40:db:db:47:1f:1a:43:ad:ec:
ef:3f:26:b3:0e:1c:1c:46:7a:5d:21:86:07:10:23:
51:ee:1e:93:53:b4:24:04:56:4f:64:04:b5:e6:25:
0d:27:32:23:c8:fa:fe:07:6f:6a:b2:8b:c7:cb:18:
34:29:75:d9:65:12:e7:e5:e7:9f:eb:33:05:98:a0:
cf:05:cb:81:fd:59:0d:2f:6c:19:85:32:87:13:14:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:FD:1C:DB:EA:C8:5E:A8:B7:48:83:EA:9A:CA:47:48:5C:C1:2B
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:eb:16:02:14:8b:e2:6c:60:96:52:5c:95:5d:1d:e0:29:a4:
11:30:20:06:a7:3b:0c:98:e1:e9:83:3a:db:16:94:c5:5d:ef:
be:e5:c8:dd:ed:ec:d6:11:4d:48:2e:2f:53:69:46:71:d9:ba:
32:31:77:97:65:6e:83:89:43:3d:47:1c:d2:16:e3:be:9f:d5:
10:ea:9d:49:2d:fc:3f:e7:45:d7:3a:5f:89:e9:bc:4e:38:c5:
e4:be:11:2c:e6:e5:5a:f9:47:70:b7:f1:0f:8e:0a:e9:ec:2f:
ae:e0:c5:00:21:44:ea:b8:27:8c:3e:53:3a:4f:19:96:75:7f:
60:8d:ad:ce:71:9b:2e:8e:f0:30:47:df:c4:84:65:eb:e8:b3:
52:6e:6c:c5:a2:27:4b:7d:c1:7c:91:2f:84:6f:87:ed:ef:94:
ef:e8:16:f4:9e:97:30:7a:e5:5a:ff:7e:3a:53:61:a9:5e:19:
8c:fd:de:ab:3e:84:32:4b:64:53:72:a3:94:3a:1c:2c:51:81:
d9:2c:4b:32:71:45:b2:5d:60:34:c3:fa:e8:e8:f2:78:1f:37:
63:d7:96:1d:da:61:22:af:e4:39:7f:11:0b:14:f1:29:18:e7:
5c:83:f7:f6:b8:30:c0:a3:71:c4:56:13:33:69:dc:df:37:41:
c3:3b:e3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZgzkJKcc6MnhS7ho8mc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzQ3ZmE1MTEwOWRkZWNkNmNkNTk0YzY3YmIwMmIyZDVl
NzIxMGUwHhcNMjYwMzI5MDcwMTQ0WhcNMjYwMzMwMDcwMTQ0WjAzMTEwLwYDVQQD
EygzOTA2ZmQxY2RiZWFjODVlYThiNzQ4ODNlYTlhY2E0NzQ4NWNjMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSdrT+fVI7niWEqCs5++oY17aRRu
3XEdeZnF3DtDFZUTq7Jeg5jSiWCObv7q78m4RsSlCfP0BK5sm7lHgdavKPxeXelh
Egj6uzZaRrm9jK6CfsScR3IOLHuP954atMX74n7aHVEYATp0iI4E336350PFj/oJ
7J525SZuN+SPfxAX5Vx+/lKtkH53EQtLi1if221xRkWTZMWEMLUpaC/+op403yZM
ybB3DTZA29tHHxpDrezvPyazDhwcRnpdIYYHECNR7h6TU7QkBFZPZAS15iUNJzIj
yPr+B29qsovHyxg0KXXZZRLn5eef6zMFmKDPBcuB/VkNL2wZhTKHExQTBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkG/Rzb6sheqLdIg+qaykdIXMErMB8GA1UdIwQY
MBaAFAQ0f6URCd3s1s1ZTGe7ArLV5yEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRSX3BSRUozZXpXelZsTVo3c0NzdFhuSVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTYxODYtNTU3Mi00MGZjLTllMmYt
NzdlYjUzZTgyYzVlLzEvQkRSX3BSRUozZXpXelZsTVo3c0NzdFhuSVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTYxODYtNTU3Mi00MGZjLTllMmYtNzdlYjUzZTgyYzVl
LzEvQkRSX3BSRUozZXpXelZsTVo3c0NzdFhuSVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjusWAhSL
4mxgllJclV0d4CmkETAgBqc7DJjh6YM62xaUxV3vvuXI3e3s1hFNSC4vU2lGcdm6
MjF3l2Vug4lDPUcc0hbjvp/VEOqdSS38P+dF1zpfiem8TjjF5L4RLOblWvlHcLfx
D44K6ewvruDFACFE6rgnjD5TOk8ZlnV/YI2tznGbLo7wMEffxIRl6+izUm5sxaIn
S33BfJEvhG+H7e+U7+gW9J6XMHrlWv9+OlNhqV4ZjP3eqz6EMktkU3KjlDocLFGB
2SxLMnFFsl1gNMP66OjyeB83Y9eWHdphIq/kOX8RCxTxKRjnXIP39rgwwKNxxFYT
M2nc3zdBwzvjPg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:50 2026 by rpki-client