Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: kpT/0f5dYJA2lJRs5dSSCTvo8kUCrM8/02R6etOO42U=
Subject key identifier: 6E:DB:72:9B:84:09:77:91:30:A3:6F:4A:EC:2D:2D:3B:C4:1E:46:03
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019D3A8A8E40ED6C2D72ED5516F1FE01B638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 17:00:52 +0000
Manifest this update: Sun 29 Mar 2026 17:00:52 +0000
Manifest next update: Mon 30 Mar 2026 17:00:52 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: h306I8U7HLCYddbdAcDNNAktyjQnY3BRs2jO9tLh7M8=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:8e:40:ed:6c:2d:72:ed:55:16:f1:fe:01:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Mar 29 17:00:52 2026 GMT
Not After : Mar 30 17:00:52 2026 GMT
Subject: CN=6edb729b8409779130a36f4aec2d2d3bc41e4603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:42:69:27:b9:7f:0c:c5:8b:6c:38:90:c0:
d2:39:53:f8:cc:72:76:6b:cc:23:72:a4:61:7f:99:
41:ef:71:0d:9d:52:d7:93:05:42:c2:f9:0b:e5:4b:
dd:9e:82:09:6e:02:c0:9a:9a:63:57:6c:9a:19:02:
9f:15:ca:31:06:a9:66:07:9b:f7:51:5b:ee:3e:8d:
75:20:50:c3:2f:b0:cb:c8:a6:af:40:45:66:63:2b:
c4:31:d6:92:9e:44:a7:36:2d:b9:15:35:50:1c:1e:
55:a5:cb:14:a9:71:65:2f:5d:e2:05:f0:5e:36:5c:
bd:f9:98:bb:8a:17:76:35:94:0a:ac:bb:16:f7:ab:
64:1c:f3:10:a6:37:90:b0:b0:e2:7a:65:19:14:ba:
d7:59:15:0e:10:4b:0b:f1:69:79:a4:51:f2:92:79:
cb:5e:80:88:ac:6b:4d:b5:38:58:4c:24:e8:65:95:
f1:8a:b6:3a:a0:28:2d:de:b2:85:44:e0:57:12:af:
77:1f:f3:2c:b9:1a:2c:ca:d9:b3:14:00:4e:e9:fb:
70:e8:60:1c:2f:8c:7a:13:86:50:c7:65:b1:b6:b5:
d3:36:63:0a:80:90:d3:8b:6c:a7:ee:a5:a3:f8:9a:
de:9b:e7:d5:bb:7c:b4:7c:da:00:18:02:99:63:13:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DB:72:9B:84:09:77:91:30:A3:6F:4A:EC:2D:2D:3B:C4:1E:46:03
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:17:94:f6:e1:93:b7:fb:9f:41:18:91:0c:aa:63:ea:da:
49:03:91:1b:cd:29:55:d8:7b:e9:3b:ce:de:c6:46:41:4c:4c:
fc:af:5a:a2:26:45:9a:af:fb:e6:8a:47:e6:a0:58:22:f8:b5:
e6:5d:49:4a:f8:f4:9c:bf:c2:b4:b8:c5:44:86:90:04:37:9a:
38:fd:e0:a0:e6:c0:18:99:bb:c0:f5:03:c6:5f:e6:71:99:82:
c5:03:68:07:cf:ed:e5:5d:7c:68:1f:68:a6:84:54:26:9f:86:
11:c1:95:72:61:4b:43:03:13:51:db:e3:d1:5b:99:ef:02:f4:
08:c2:f9:8b:c8:79:99:07:33:72:f0:eb:82:71:c2:77:1d:6c:
98:08:ed:64:ed:e5:88:26:35:de:d0:34:a0:8a:36:f8:98:f6:
2a:60:78:85:55:a2:23:55:df:cc:d1:dc:a4:5c:18:1d:ad:36:
ba:81:a7:7d:5a:92:fb:6f:7e:34:67:df:1d:07:06:d3:07:83:
fd:eb:aa:37:6d:82:b5:53:6b:9d:a9:01:39:b4:0b:8a:ee:4f:
b8:ad:b9:2a:ed:15:e7:78:9e:f3:b8:b8:52:97:c3:7a:80:ac:
ce:4a:cc:48:8d:17:2c:5b:89:f4:09:fa:e8:c5:8f:62:f2:b5:
7f:d9:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:47:33 2026 by rpki-client