Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: bcbeB+TB1TnYWH8CmHR+9vOzAmEYhvRuw+QTx1HD+eY=
Subject key identifier: 96:61:37:29:01:4C:49:F8:2E:0F:7D:BF:24:94:2A:CD:0E:F1:07:39
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 019E2F9763ECC834D9709BBBB69EAE56316B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0C4F
Signing time: Sat 16 May 2026 07:01:50 +0000
Manifest this update: Sat 16 May 2026 07:01:50 +0000
Manifest next update: Sun 17 May 2026 07:01:50 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: tl6Z8U7BSWR/CM8gvxcooPrr+nfgUL0nCIDy9uTLYRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:63:ec:c8:34:d9:70:9b:bb:b6:9e:ae:56:31:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: May 16 07:01:50 2026 GMT
Not After : May 17 07:01:50 2026 GMT
Subject: CN=96613729014c49f82e0f7dbf24942acd0ef10739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:b0:b4:9c:12:59:7f:0b:ab:55:3c:51:00:
a9:8d:74:3a:1c:3c:f7:8f:23:34:a6:7e:6b:97:0b:
9d:0d:7f:95:24:f3:fd:a0:d6:43:f4:cb:e7:9e:79:
2c:b3:3f:4f:c6:1c:29:69:b4:05:f6:2a:af:cd:b7:
ac:e2:32:18:af:a3:08:a8:5f:73:78:33:7b:f5:f7:
87:28:e3:4e:db:c3:97:7e:ac:95:52:46:f4:12:f0:
3c:04:b1:3d:f8:69:38:27:85:70:19:4b:46:d2:88:
d2:4a:a9:37:4b:b2:80:68:04:12:81:c2:13:c8:55:
91:d7:79:55:48:a5:6b:bf:db:a6:a6:c4:bc:42:b7:
70:e8:39:85:93:3f:72:a3:16:16:38:1a:46:a6:02:
d0:2f:84:8d:81:77:6c:ac:7e:9d:65:c9:48:99:61:
2c:c7:27:74:6b:16:22:d5:7c:2c:44:1d:f3:8b:5c:
f7:08:71:4c:4a:4e:37:1c:9e:d4:06:e8:e6:78:3d:
f2:6f:2f:0e:88:e4:ca:0f:95:a2:de:0b:1e:34:ed:
71:c3:41:fd:fa:31:59:c7:fc:68:d4:9e:97:2b:1e:
9d:73:11:5d:63:04:02:56:3f:cd:e3:6d:33:51:9a:
15:f4:08:67:39:6d:b7:5e:fc:00:ed:b6:44:08:05:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:37:29:01:4C:49:F8:2E:0F:7D:BF:24:94:2A:CD:0E:F1:07:39
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:12:e5:a3:78:23:38:db:2b:b2:bc:a6:3b:b4:a5:0c:e3:
e2:bd:34:0c:e4:2e:5b:a7:90:c7:42:34:11:c0:26:f6:96:d1:
2d:97:84:87:6b:58:f0:94:61:5e:ee:94:14:92:13:26:7a:b5:
47:32:64:16:30:c2:c8:52:22:b3:bc:ca:7b:64:f1:6e:fe:e2:
de:1e:6a:0c:75:13:39:16:ef:25:0c:be:1c:09:ac:ea:bf:fd:
cc:31:62:98:fc:74:dd:7e:d6:a8:ea:74:7b:2b:3b:a8:75:6f:
e6:6d:dd:93:6c:27:32:f7:68:6f:d2:3a:95:aa:4b:d3:75:17:
2d:fb:97:4e:1c:35:23:40:91:37:6e:52:cc:b0:b0:22:b5:55:
d9:56:3b:7e:0a:8e:57:26:cb:cd:30:df:35:1a:60:34:2b:35:
0c:a8:b5:1b:eb:e1:b3:3b:6b:3e:02:a4:fa:e4:93:e3:8c:c1:
0b:fd:f4:a0:ed:54:e0:a2:05:55:39:38:88:64:ef:51:63:0b:
d4:e8:a2:31:df:15:44:aa:43:17:4f:cd:60:ea:5f:17:ed:dc:
6e:81:d8:5e:32:5e:94:8f:5e:b2:77:36:17:e0:58:c7:f8:0d:
c4:de:61:ff:73:3f:24:7c:ca:dc:d5:37:9e:83:51:49:6b:ec:
e2:24:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:58 2026 by rpki-client