Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File: BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier: bs1SM7r7wWuDtNgiHYZsfuwiJvRELvmzG3YdlDozsU8=
Subject key identifier: A4:2E:DD:9C:70:CC:CF:D3:DD:0E:A7:73:B3:8B:8A:31:1A:6B:10:3B
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial: 019CEDB9404155FF4F72ABB0E9A4F1AC6D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number: 1400
Signing time: Sat 14 Mar 2026 19:01:06 +0000
Manifest this update: Sat 14 Mar 2026 19:01:06 +0000
Manifest next update: Sun 15 Mar 2026 19:01:06 +0000
Files and hashes: 1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: VKstQIrWQE2uP8cADI9S/mRxP/AJwuU3o+SNkwcccRs=)
2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:b9:40:41:55:ff:4f:72:ab:b0:e9:a4:f1:ac:6d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Validity
Not Before: Mar 14 19:01:06 2026 GMT
Not After : Mar 15 19:01:06 2026 GMT
Subject: CN=a42edd9c70cccfd3dd0ea773b38b8a311a6b103b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:37:bd:c5:ff:ca:c9:42:43:f1:5e:9a:5b:
18:49:34:8e:6d:02:62:24:5f:f9:54:d5:67:f7:c6:
b7:b8:81:2e:0b:9c:cb:de:d1:6d:d6:42:7a:fa:1e:
1f:33:21:e0:38:ca:76:2b:f8:aa:25:34:29:f6:9c:
5c:07:32:aa:d9:ad:31:8c:a7:6a:42:fd:17:4b:af:
b0:99:c3:96:77:f9:bd:12:68:1a:87:cb:56:1e:a1:
88:36:45:25:a9:69:02:88:44:26:c7:27:6f:1a:54:
48:ff:8a:6e:9d:7d:c9:8c:b3:69:66:0c:17:ee:1c:
4a:ab:0a:db:8d:68:3b:db:1d:91:b1:fa:85:38:e7:
ab:ed:0c:5f:99:86:f1:bc:c8:74:78:05:5a:62:4a:
6d:ad:82:eb:ab:dc:54:08:e8:9f:be:8a:36:8e:a1:
2a:d7:cf:8e:78:b6:65:a1:31:e9:34:6e:a9:3d:ba:
89:ff:49:9f:94:12:e2:d4:49:ff:f1:c6:c5:79:84:
63:2d:80:f2:ba:32:49:11:80:ee:a4:2f:38:b5:c4:
0a:88:55:e6:0f:46:03:c2:b3:8e:75:48:26:b2:fe:
71:7a:53:f8:cd:f4:7a:14:81:32:04:68:21:66:fc:
6e:d3:1c:fe:ad:b3:74:ba:c0:75:81:3d:91:dd:7a:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2E:DD:9C:70:CC:CF:D3:DD:0E:A7:73:B3:8B:8A:31:1A:6B:10:3B
X509v3 Authority Key Identifier:
keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c2:f1:ec:a9:65:d9:98:e4:1b:b2:4f:9c:be:91:5a:48:d9:
7c:81:4e:db:97:e4:af:c2:cd:db:ce:f4:8b:8a:df:b2:d4:94:
72:fd:c2:e4:d5:2c:21:f0:ce:98:be:50:c0:b2:89:af:fc:55:
24:07:f7:01:07:03:f2:e2:67:01:43:25:51:1c:d0:6a:b5:4a:
4f:b1:c7:a2:04:f0:6b:0c:b8:03:c4:d2:2a:b3:19:ec:20:1e:
77:21:cd:dc:1f:43:0a:79:10:3b:e0:65:1b:3e:77:a2:73:62:
78:05:f9:a4:15:3c:b8:cb:f3:99:17:6a:66:98:b1:5e:bf:da:
2e:e1:77:8d:7a:77:71:bc:7d:06:cb:9d:66:92:44:9f:3f:1a:
ae:2c:81:28:91:41:2e:4e:f0:98:a4:9b:48:2a:7d:e6:20:c9:
be:87:57:04:25:35:24:69:7f:02:63:b4:2f:95:82:9f:28:da:
44:26:ae:8d:d3:96:45:77:8a:a7:4c:2b:bf:3a:7e:19:49:a8:
89:a1:cf:b7:45:80:88:31:a2:70:6b:d5:e3:75:f7:11:df:79:
0c:4c:b5:a2:06:4e:b5:61:0f:4f:3f:c9:34:ec:5a:f5:e6:c3:
bd:b9:73:b7:48:b6:d6:55:05:25:27:91:a9:8a:da:e0:4c:8d:
85:d4:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:55:36 2026 by rpki-client