Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier: OQKxzZ+OsQkjs41M2brUwUraqcdU6uoECaSONz/k7Wo=
Subject key identifier: 8F:13:C7:FB:C5:33:F6:E1:33:37:C6:BE:53:02:CC:33:BA:EF:70:31
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial: 019D3789A76E3650FC7069E2787747DC830A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number: 0A10
Signing time: Sun 29 Mar 2026 03:01:01 +0000
Manifest this update: Sun 29 Mar 2026 03:01:01 +0000
Manifest next update: Mon 30 Mar 2026 03:01:01 +0000
Files and hashes: 1: 2QZIkDsVUFZ0fA9DNP2jTLVLSAM.roa (hash: qGAsY/mj+KUshvP9IGbzdbP+lJhmdQPEPt6/HveTaYk=)
2: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: 6Ard8nHqtiUxwsju3eV1bHXKdNYJeRMM/i3xj2XtEVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a7:6e:36:50:fc:70:69:e2:78:77:47:dc:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Validity
Not Before: Mar 29 03:01:01 2026 GMT
Not After : Mar 30 03:01:01 2026 GMT
Subject: CN=8f13c7fbc533f6e13337c6be5302cc33baef7031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:e7:08:8c:a8:e5:a7:dd:d9:35:4c:d3:26:
cc:77:32:30:70:5e:3d:8f:88:65:e2:f7:17:e5:fe:
13:24:95:09:fe:5a:8a:fe:1b:c0:8f:1b:ec:5d:b0:
8f:4d:70:09:62:01:0c:bb:ab:9e:56:da:92:a4:32:
66:00:73:e6:fe:30:e2:89:e9:55:6a:60:82:48:49:
90:62:f2:21:26:e4:49:e2:a2:e3:da:8c:be:0c:79:
08:b2:d1:a0:10:ba:38:c3:57:a9:8a:26:8d:62:77:
6d:cc:cf:f5:b5:83:1d:6f:f8:b2:4b:4d:d4:34:52:
a3:61:09:a8:33:06:c1:bf:25:c7:1b:36:f2:ba:1a:
ef:fb:e1:c7:e8:70:18:e2:66:43:23:05:b2:fc:36:
7d:e9:ec:cd:48:45:5b:3b:cc:cd:4a:62:1d:95:1b:
84:3c:20:a9:9c:64:c2:58:08:b9:35:e8:9d:a0:21:
17:76:1a:16:c4:8d:2d:ca:ff:94:d7:e3:f3:c9:65:
68:42:37:1c:51:be:0d:ae:e0:73:13:ae:21:7d:24:
7c:c3:88:a6:0e:38:43:31:7d:1a:fe:71:4d:65:40:
41:de:4d:cc:ca:1d:d9:3e:25:06:63:0a:c6:89:e6:
77:82:84:aa:ca:81:f6:dc:06:d6:b0:9b:b5:bb:9e:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:13:C7:FB:C5:33:F6:E1:33:37:C6:BE:53:02:CC:33:BA:EF:70:31
X509v3 Authority Key Identifier:
keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d0:52:15:c6:ca:e2:68:41:af:9b:1f:fd:7b:9c:05:07:c9:
a1:b4:13:94:b8:18:90:68:fe:22:67:be:05:fe:dd:6d:5d:0e:
6d:9e:5e:1e:0b:56:88:4a:50:1e:ae:e3:d7:7c:06:92:e9:f5:
9d:84:cd:d0:c6:0c:0b:26:66:9d:bc:7b:13:90:f3:a2:cb:56:
7a:4a:cc:41:77:51:84:27:a2:cb:0c:a0:0e:14:ff:3f:d3:67:
ab:72:8a:c4:38:09:2f:11:ee:b4:b4:a1:30:fe:dc:e0:04:d9:
56:47:2f:85:b3:85:90:af:00:34:ce:38:bb:0c:0b:fa:18:07:
60:e0:b8:fa:46:36:9d:a0:2f:81:91:f9:d0:fb:7c:2d:c1:80:
68:7c:44:61:bd:03:cb:4c:28:f0:c7:d3:d1:72:28:e0:a5:be:
ea:e5:1a:45:41:22:10:35:b3:1c:4c:32:7b:e3:6d:bd:5d:47:
4f:c5:4d:ca:35:a3:18:b5:e6:52:d8:35:e2:07:10:6b:e6:8f:
89:2b:38:bd:36:67:46:63:e9:39:2f:dd:22:92:96:24:b3:b3:
e4:80:ef:14:38:b4:f0:98:11:92:0d:2a:d8:1a:31:b6:a0:e7:
d6:0d:ea:cb:b5:09:4d:b7:dd:43:56:a0:08:e5:fd:27:9f:5b:
6f:7e:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:45 2026 by rpki-client