
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: KVzkJJd5C6nsPjS2o5tpqN4XzSsmg50KmhgEwP3TVZ4=
Subject key identifier: 6D:1D:1A:BF:63:8D:3F:02:CA:61:B3:D0:A8:CB:AD:BA:40:3F:46:DE
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 01A13DB83F75472830B9263EBC8DE4D4AF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 0DD6
Signing time: Thu 15 Oct 2026 04:00:47 +0000
Manifest this update: Thu 15 Oct 2026 04:00:47 +0000
Manifest next update: Fri 16 Oct 2026 04:00:47 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: g8BdXxym9jbBe+SVYvJOaNITvnUFzk7580hksleGx2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:3f:75:47:28:30:b9:26:3e:bc:8d:e4:d4:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Oct 15 04:00:47 2026 GMT
Not After : Oct 16 04:00:47 2026 GMT
Subject: CN=6d1d1abf638d3f02ca61b3d0a8cbadba403f46de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:53:99:b0:85:0d:0c:5c:0a:d7:fa:ab:b5:
04:60:f1:f6:d5:2b:3e:62:32:97:42:4d:e1:40:46:
ac:ec:cb:98:2f:78:ee:db:a7:f8:f4:55:86:f7:36:
09:f8:21:af:49:14:b7:eb:4e:a1:0c:a7:2e:b6:22:
c9:d4:07:a8:14:da:1c:2a:75:11:3d:f0:8e:9f:58:
f1:59:ee:80:67:a3:e7:3e:f8:f9:1f:60:40:85:f1:
81:1b:2f:04:1f:3e:1b:52:ee:6f:9a:6e:47:40:eb:
df:a5:18:18:9b:33:f2:85:18:4f:1b:e2:af:f2:ef:
c1:d4:42:2b:3f:45:62:9b:e2:ab:da:3f:ec:da:ec:
49:5d:03:75:e9:24:b1:70:26:c3:c9:25:b8:c0:f7:
0e:fe:38:16:b8:67:73:93:33:01:40:3b:a3:b3:89:
05:b6:ac:42:17:f5:1d:4b:3e:fc:ae:94:60:92:20:
a9:78:fd:a0:50:61:bb:a1:7d:ff:da:c8:a1:b3:c8:
03:24:c6:9c:2d:d2:15:e8:b2:41:2a:a9:0b:47:b9:
59:62:a5:ce:40:96:8c:7e:8f:a8:9d:12:c0:7c:48:
e8:8c:b7:cd:b7:cc:5d:14:0d:84:e1:cb:c3:d6:2a:
4b:d4:c9:38:69:74:e1:97:5b:eb:25:6e:10:cb:23:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:1A:BF:63:8D:3F:02:CA:61:B3:D0:A8:CB:AD:BA:40:3F:46:DE
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:57:f2:af:b0:a0:fc:90:6a:86:30:7b:40:55:53:10:85:7b:
9d:4c:7b:28:09:ca:1e:a9:ad:52:0b:5b:55:11:4f:6d:08:a1:
aa:71:20:18:ea:98:b2:a2:e6:d9:f6:5e:e3:b9:8e:e0:fe:c4:
b6:a2:b8:0b:db:35:40:8f:85:f6:2e:fe:07:be:fb:42:10:54:
03:45:af:a0:34:6a:66:71:71:4b:2e:6a:6b:9e:d7:a8:e5:9d:
57:b0:48:74:e5:24:9d:aa:ea:a0:a0:07:82:9c:e3:2f:ea:26:
2f:b4:91:1f:55:8c:31:bd:a0:29:d4:d1:db:e9:63:64:9f:5a:
33:2c:b7:2a:42:e1:d2:f8:c2:61:73:03:1d:9b:02:8b:23:ff:
46:b9:78:20:2e:23:a5:a8:d0:ab:10:00:1f:e2:74:20:65:2b:
f9:42:ee:81:13:23:6c:69:9e:69:97:4a:55:61:65:cb:b9:81:
25:dc:a1:fa:1e:e5:16:9c:3c:42:92:0d:35:f5:61:31:19:3e:
3b:53:b2:1a:ad:a2:64:27:c7:30:3c:dd:96:94:47:ae:fa:a6:
84:2c:f8:b7:34:8a:35:f3:9d:33:4e:55:89:08:14:e4:be:6f:
18:bc:46:fd:1f:f8:ee:e0:da:fd:5d:c8:52:5b:96:92:c0:98:
3f:be:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:45 2026 by rpki-client