Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: R5zxtHHpbOAipAHqcMoY8DvkE7l1WK6xpbMMzSK14XY=
Subject key identifier: 1A:3F:D2:88:D0:B1:EC:EC:CD:54:16:1B:FD:79:F1:CF:5B:0F:D6:50
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 019D386596AE3A7462DAA84ECC9F71BC9EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0BCF
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: 8zXYn7lfpcwzUd2mO6tGVHXvkpWi6p4O8W0etUlwAhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:96:ae:3a:74:62:da:a8:4e:cc:9f:71:bc:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=1a3fd288d0b1ececcd54161bfd79f1cf5b0fd650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:e7:d0:3c:5b:05:7b:a4:af:1a:33:ae:79:
d0:70:9c:95:82:ef:41:81:ff:9a:f9:26:1f:00:0e:
62:8b:c1:62:43:7c:29:96:69:43:c9:7b:e9:55:06:
5c:91:22:ba:c4:38:94:58:00:09:2b:bb:6c:ce:e7:
6e:fd:3f:42:e3:6d:72:a4:b2:38:16:51:17:c0:c9:
b1:db:b9:89:58:79:11:19:c5:90:cf:f8:ad:93:bc:
46:4c:e4:f0:e2:89:15:7a:01:ff:fc:96:1d:a1:02:
86:2a:28:24:61:0b:80:cd:ac:ae:d1:c7:9e:ce:71:
26:8c:de:a9:67:71:a4:e6:c4:46:75:48:aa:36:90:
6d:44:f9:30:4d:61:e7:30:80:60:15:ad:af:8e:13:
49:17:bf:90:b5:1c:e6:6c:2a:d4:83:60:0c:f3:de:
a5:38:1c:eb:cd:2c:66:48:09:97:9b:7a:39:80:08:
13:9d:77:06:99:7f:84:a8:72:21:d6:04:4c:d4:1f:
f3:86:d3:7d:89:f1:fb:b6:aa:00:c4:e7:1a:e4:23:
d1:57:e5:7e:01:08:7b:f6:5b:9b:df:d3:fc:0d:75:
fd:42:2d:91:16:f4:22:a6:17:ad:43:9f:d0:db:9c:
ec:cc:8a:e9:8f:9d:0d:7b:a3:9a:fa:e2:3d:5a:59:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:D2:88:D0:B1:EC:EC:CD:54:16:1B:FD:79:F1:CF:5B:0F:D6:50
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:68:26:ef:27:df:15:a6:bc:5a:e8:86:c6:bb:6c:f8:a1:09:
25:b5:0c:35:d6:66:25:5e:3d:0b:9c:2a:74:d9:1b:89:8f:65:
63:20:bc:e5:0f:e1:84:ab:ef:44:27:72:82:fa:88:ab:85:a6:
b9:92:fc:39:ae:00:7b:c2:c6:ab:18:99:b3:f4:82:79:c9:ab:
85:bd:6e:fd:0c:86:b7:6e:f0:ea:b2:cd:98:a8:07:38:cb:b1:
6d:8a:60:48:9b:b1:8b:91:ef:6e:af:8b:23:d4:6c:bb:c2:88:
08:6f:65:41:c6:1b:75:c7:2c:5f:6a:bd:1b:d0:26:37:c9:44:
17:8d:39:a2:e2:9d:5c:32:c6:27:4c:9e:0a:e6:3e:3d:a2:b4:
be:b0:82:4f:e6:be:f2:71:ab:31:5d:e8:79:d1:02:5b:b8:dc:
b9:5e:9d:d0:bf:b9:eb:50:5e:23:95:80:5d:a2:7c:f7:b0:70:
dd:47:e3:2b:f9:c1:73:09:df:c8:c6:c3:28:44:c6:50:d8:82:
ac:b5:4a:2b:7c:70:99:f4:12:38:c1:9d:40:24:1c:23:a8:94:
55:86:ff:89:aa:93:93:95:58:b4:3e:bb:38:88:9c:90:ca:65:
57:3f:18:8c:fd:ec:5f:c2:5c:b7:ab:fb:e1:b6:13:5c:06:b1:
f3:8e:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:25 2026 by rpki-client