Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier: aPqVan5/MqZWi0LNpmhIRoPu7uVtsaI3eYK7+yHeT8A=
Subject key identifier: 90:FE:91:F5:09:37:49:6F:3E:9A:3C:AD:7A:FE:A4:14:93:C4:87:E3
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 019D39E5F0B13F30BCC6186D521A14E22856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 14:01:03 +0000
Manifest this update: Sun 29 Mar 2026 14:01:03 +0000
Manifest next update: Mon 30 Mar 2026 14:01:03 +0000
Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: 3ggkzA+Qi1fIgg3UHDeyu5007L7UePdwYce2rSJHHiQ=)
2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f0:b1:3f:30:bc:c6:18:6d:52:1a:14:e2:28:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Mar 29 14:01:03 2026 GMT
Not After : Mar 30 14:01:03 2026 GMT
Subject: CN=90fe91f50937496f3e9a3cad7afea41493c487e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:58:76:68:a0:0e:bd:79:8f:de:93:cd:0e:
0b:1e:02:1c:fb:7c:1d:44:63:68:95:de:9d:e4:92:
a4:1a:19:ea:ff:39:ab:7e:0d:92:2d:39:e6:67:35:
3c:57:9d:ea:1e:1c:9f:2a:27:34:7a:7a:b1:c1:aa:
d6:8e:0d:89:9b:68:c4:be:14:58:a3:6c:ab:75:17:
75:00:66:99:51:58:83:e2:1b:cc:65:47:9a:c6:c2:
c3:3d:28:79:a9:f8:f2:96:f6:a0:74:de:47:bb:a2:
d3:b6:38:39:5a:d5:cd:df:ef:0e:0a:96:e4:bb:a3:
52:cc:7f:da:83:21:46:31:9c:ad:a3:0d:7c:4c:dc:
7a:90:6e:01:88:32:a6:0a:ca:2e:14:f2:5a:f9:7a:
85:e4:5d:15:c8:42:a0:70:af:6e:35:97:f8:2c:9a:
24:b8:ba:02:8d:83:bd:92:65:ce:e2:57:a3:30:44:
a3:4b:e0:6f:67:a7:b8:8e:f8:51:f5:a2:50:bb:42:
6e:1c:5b:59:59:21:c2:17:1b:78:36:87:29:d4:3a:
96:a7:c4:6a:3c:e3:28:43:b2:31:e6:7b:2e:99:e1:
ee:49:70:af:dc:1d:b7:5a:e3:74:fe:fa:ed:63:bc:
dc:a1:da:7f:5e:6f:a4:ea:73:c1:7b:66:17:5b:2b:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:91:F5:09:37:49:6F:3E:9A:3C:AD:7A:FE:A4:14:93:C4:87:E3
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d3:7d:58:33:d6:70:0c:db:8c:83:0b:39:7c:d9:e0:8b:f4:
82:fb:7c:eb:5a:0c:05:66:d1:47:50:e8:eb:fe:4d:bf:b8:17:
31:1d:71:87:76:be:cd:9f:af:67:91:e6:b1:ac:05:99:be:8f:
7a:22:72:e0:5a:32:fb:1c:62:38:af:85:14:ab:6c:b4:0b:bf:
38:35:8a:6e:ac:d7:aa:72:53:05:69:79:f0:a4:68:8d:33:ec:
aa:af:43:d9:15:6f:1d:29:00:ae:ba:17:0d:de:8c:2e:45:08:
dd:02:b3:9c:32:10:34:50:35:04:83:ad:0b:f8:ab:91:b1:11:
d6:f5:df:d8:cc:ae:c6:88:da:e8:ff:62:b7:07:77:79:30:e6:
3f:be:d5:56:e6:50:36:14:62:d1:f6:f5:4b:26:ad:97:ff:0f:
89:e0:35:00:eb:2c:55:1e:36:bc:8b:69:64:1d:06:5f:66:28:
6e:5b:08:8e:46:7a:d7:d6:7c:fc:7d:e3:9e:e2:a6:1b:b4:4c:
8a:6d:99:9a:e9:de:4a:20:cb:d6:c5:1c:9c:da:b9:d5:5f:28:
b2:d2:96:2b:9b:ff:fc:a7:8d:ff:94:4b:c2:9c:c9:ae:c2:5a:
20:82:4e:b3:1f:32:c3:59:a9:8d:fc:e4:f2:fe:e8:f6:f4:69:
0f:05:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:46 2026 by rpki-client