Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
File: BsMIkdp--ppkRO_siLS-9VzLvlw.mft (raw, json)
Hash identifier: ngHnF6BriEMpDYYXLpov7z6zIv2ih94PKvtD6s4awYE=
Subject key identifier: 08:38:B4:45:95:5E:31:2D:45:63:4A:D5:FD:30:C2:63:C4:F5:62:68
Authority key identifier: 06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C
Certificate issuer: /CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
Certificate serial: 01A16CB6704255797D1042F33BE69525E168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
Manifest number: BC
Signing time: Sat 24 Oct 2026 07:00:57 +0000
Manifest this update: Sat 24 Oct 2026 07:00:57 +0000
Manifest next update: Sun 25 Oct 2026 07:00:57 +0000
Files and hashes: 1: BsMIkdp--ppkRO_siLS-9VzLvlw.crl (hash: vn7mwmDa4MlZHd8gGt97+JRJ8dukRu51XVXRmLFox2M=)
2: uFvxcjkzYNKDc_0HEgiUEsHaXTg.asa (hash: 32dCe2Q53WalWYs4tftDnbXjGXgSUhMlnIlxlDtCCDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:b6:70:42:55:79:7d:10:42:f3:3b:e6:95:25:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
Validity
Not Before: Oct 24 07:00:57 2026 GMT
Not After : Oct 25 07:00:57 2026 GMT
Subject: CN=0838b445955e312d45634ad5fd30c263c4f56268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:7e:ba:85:11:77:7c:6f:56:7d:63:72:56:
1d:24:47:8c:a0:0c:48:c1:03:cf:3c:3e:db:a0:41:
8c:67:9f:f2:a0:b9:43:35:53:04:4d:3d:87:35:e0:
92:f0:03:2f:76:7b:ec:da:95:82:8d:c3:dd:71:f1:
cd:df:de:06:6c:fc:da:a6:b7:17:40:ac:9c:2a:4e:
bb:59:9c:53:1b:83:f6:ae:dd:99:ea:cb:de:78:e4:
f9:61:bc:0c:0a:11:80:f7:88:41:9c:79:2b:dc:3e:
40:1c:53:4d:e1:b3:08:85:93:e4:84:30:06:66:ce:
eb:54:12:1d:fd:9b:c3:59:49:6d:f4:cb:bc:2b:9e:
08:dd:1c:98:b8:5a:b5:07:d0:a4:1e:39:a1:91:f3:
14:bb:56:e2:11:1f:0e:40:60:da:d2:6d:fc:a2:97:
1e:82:67:96:9c:ae:8e:3e:27:cb:d0:ad:7b:35:6e:
76:3a:2f:de:00:44:d7:93:ae:1a:30:50:dc:55:f3:
5e:1d:f8:e2:71:83:57:02:37:de:64:8a:4d:0c:43:
24:b3:1b:96:e0:ed:b0:e6:70:f5:d6:df:b9:f9:6c:
17:53:69:1e:47:e4:ea:7f:00:ff:ba:14:0b:ba:ef:
07:4d:d5:e6:cc:21:8c:6f:6a:a4:10:6f:91:36:2d:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:38:B4:45:95:5E:31:2D:45:63:4A:D5:FD:30:C2:63:C4:F5:62:68
X509v3 Authority Key Identifier:
keyid:06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bc:03:70:46:d1:8d:0f:53:0b:cc:6d:09:01:31:d4:aa:ee:
9e:9a:05:16:69:b6:43:a8:72:bd:9f:53:36:63:6d:78:5a:f5:
9a:d4:ab:43:d5:a1:28:01:a5:32:25:30:dc:7e:fd:aa:15:25:
4e:bf:df:e5:93:37:7c:25:fa:3c:e5:88:ed:14:00:73:70:0a:
51:a7:89:f4:4b:a3:bc:66:4c:14:31:7a:91:e2:af:82:99:2d:
f7:29:b3:68:43:6d:fa:e3:75:43:1e:3d:12:8e:a1:c0:7d:c2:
b9:19:b7:83:0f:b8:8b:c9:06:7b:03:62:69:08:fc:a8:59:3f:
7f:c7:69:e7:24:d1:a3:10:2b:ae:19:57:bb:73:72:9e:0f:3c:
ba:07:09:bc:59:01:5f:0c:3f:fd:9d:9a:be:f2:b6:2e:69:51:
22:65:78:1a:11:47:ed:71:98:ae:5d:78:e6:cb:18:1a:62:74:
4b:ab:a0:9d:dd:b6:d7:eb:77:cb:70:c7:97:01:10:4c:fe:c0:
57:a8:2b:f1:e9:0a:f1:49:17:ae:8a:74:fa:22:ce:8b:9d:0a:
f8:86:46:bd:0b:87:e6:bf:fb:1f:57:eb:23:62:92:81:50:03:
c5:1f:a6:8a:3b:db:66:c5:9b:d2:34:2b:1e:4a:80:d9:c8:75:
e0:6b:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:11:36 2026 by rpki-client