
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: GoZPch1k2XLbW7b9xhskZ/IKx2QFE0b/wUI7CQmNsZc=
Subject key identifier: BA:22:96:25:99:87:33:5C:85:10:69:2A:85:25:2B:33:38:09:CC:0C
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 01A13DB7EED19E3920A19D032FB65E555E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0DE4
Signing time: Thu 15 Oct 2026 04:00:26 +0000
Manifest this update: Thu 15 Oct 2026 04:00:26 +0000
Manifest next update: Fri 16 Oct 2026 04:00:26 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: pmDdXW5iXzBjL7QZF55c9GzeVRA4TKAaUeamyeCF5i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:ee:d1:9e:39:20:a1:9d:03:2f:b6:5e:55:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Oct 15 04:00:26 2026 GMT
Not After : Oct 16 04:00:26 2026 GMT
Subject: CN=ba2296259987335c8510692a85252b333809cc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:7d:07:5c:40:62:b5:e8:7e:9b:f6:23:9a:
f6:97:7a:3c:a6:cb:85:12:03:0b:2f:ac:e0:1e:82:
f4:88:70:59:87:04:de:47:2d:09:90:fb:9a:9e:fd:
92:09:88:73:0f:b5:ad:84:33:dc:ab:2e:0c:4a:a3:
94:4e:1f:07:e0:02:14:f7:8c:71:8b:a4:34:26:f1:
94:71:26:b5:e3:62:87:5b:a3:ff:79:2e:72:c0:6d:
8f:5e:95:a3:19:f7:30:8e:bf:55:e9:46:62:ff:42:
15:0a:db:56:5b:13:2a:6d:73:84:4d:f2:80:87:18:
de:c5:14:2a:d2:c1:9d:4d:96:84:f5:ce:38:f6:00:
b6:de:c1:22:12:7a:6e:aa:a9:a2:96:3e:b3:96:8a:
6f:93:a7:83:bd:6b:6d:8b:bd:8f:f0:d9:4f:b8:8e:
e0:4c:3a:6f:4c:50:52:bc:b5:2b:ec:1c:ae:59:87:
2c:ff:9b:8a:1c:71:39:60:74:50:4a:13:7c:38:89:
94:9d:5a:ee:d1:27:f4:3c:1d:0b:c9:ed:9e:b9:70:
1c:12:e6:f5:3e:cf:4f:b9:ba:e0:27:2d:5e:8a:04:
ca:df:90:27:c2:df:87:bb:e7:6d:0c:30:38:16:7e:
c5:f8:25:6e:45:56:72:74:cf:3e:99:b4:1f:12:13:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:96:25:99:87:33:5C:85:10:69:2A:85:25:2B:33:38:09:CC:0C
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4c:0d:cc:fc:6e:3a:4f:1e:ea:aa:13:f4:e3:c8:55:8a:24:
6c:77:02:c1:96:7b:a7:bc:28:e2:5c:da:4c:c5:9b:e1:d5:df:
8f:bf:85:da:a0:1f:f2:8a:e2:89:a3:06:b9:88:31:24:72:55:
cb:64:23:b1:b0:6a:af:22:0b:12:4c:ff:36:f4:07:91:8c:39:
f0:ac:f9:a9:2e:0b:a4:c2:35:ac:2d:66:d3:dc:83:d4:22:66:
9e:5e:4b:19:21:8e:72:11:d5:fd:fe:5f:e7:e9:f2:da:3d:d6:
14:1a:d0:eb:af:71:b3:e8:72:93:97:e8:46:cd:42:12:ee:32:
ed:7f:41:5e:69:be:34:ad:e7:a5:7a:dc:24:45:f8:d4:0f:18:
8f:5c:63:b0:51:e1:31:c0:06:43:9e:04:5d:02:33:a9:85:0c:
54:2d:a4:cc:6c:33:09:21:72:5c:f2:5f:aa:83:5b:6a:6a:22:
f0:1d:18:ec:60:a8:77:d5:87:31:57:ed:8f:31:88:2f:5a:34:
d2:25:c4:a1:65:30:f5:5b:dc:97:61:9b:3a:a6:15:d5:bc:be:
aa:b8:e9:15:2b:74:b4:c0:98:c8:6d:22:17:41:bb:98:b4:5b:
f0:c8:04:ed:18:30:32:57:7e:4c:94:bf:e8:21:31:f5:f7:a9:
b4:90:b6:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t+7RnjkgoZ0DL7ZeVV5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTQ4NTdmNTIxYmUyMWUxMjY3MzlkYWQ3NzNiNGU2YTE4
YWM2OWIwHhcNMjYxMDE1MDQwMDI2WhcNMjYxMDE2MDQwMDI2WjAzMTEwLwYDVQQD
EyhiYTIyOTYyNTk5ODczMzVjODUxMDY5MmE4NTI1MmIzMzM4MDljYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/x9B1xAYrXofpv2I5r2l3o8psuF
EgMLL6zgHoL0iHBZhwTeRy0JkPuanv2SCYhzD7WthDPcqy4MSqOUTh8H4AIU94xx
i6Q0JvGUcSa142KHW6P/eS5ywG2PXpWjGfcwjr9V6UZi/0IVCttWWxMqbXOETfKA
hxjexRQq0sGdTZaE9c449gC23sEiEnpuqqmilj6zlopvk6eDvWtti72P8NlPuI7g
TDpvTFBSvLUr7ByuWYcs/5uKHHE5YHRQShN8OImUnVru0Sf0PB0Lye2euXAcEub1
Ps9PubrgJy1eigTK35Anwt+Hu+dtDDA4Fn7F+CVuRVZydM8+mbQfEhOh/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoiliWZhzNchRBpKoUlKzM4CcwMMB8GA1UdIwQY
MBaAFAaUhX9SG+IeEmc52tdztOahisabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2Yt
ODhhZmJkNGEzZGQyLzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2YtODhhZmJkNGEzZGQy
LzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkwNzPxu
Ok8e6qoT9OPIVYokbHcCwZZ7p7wo4lzaTMWb4dXfj7+F2qAf8oriiaMGuYgxJHJV
y2QjsbBqryILEkz/NvQHkYw58Kz5qS4LpMI1rC1m09yD1CJmnl5LGSGOchHV/f5f
5+ny2j3WFBrQ669xs+hyk5foRs1CEu4y7X9BXmm+NK3npXrcJEX41A8Yj1xjsFHh
McAGQ54EXQIzqYUMVC2kzGwzCSFyXPJfqoNbamoi8B0Y7GCod9WHMVftjzGIL1o0
0iXEoWUw9Vvcl2GbOqYV1by+qrjpFSt0tMCYyG0iF0G7mLRb8MgE7RgwMld+TJS/
6CEx9feptJC2xg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:21 2026 by rpki-client