Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File: BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier: 7Hktk6rxvyVhQXmjacdH+2APkCKH/lZcrVkub0uaHCE=
Subject key identifier: 11:DA:80:75:EC:CE:AE:7C:55:3C:C9:D1:3C:37:57:39:16:CF:55:61
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer: /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial: 019D9AE386CB4827CF906281B8A4B295B7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number: 0DC9
Signing time: Fri 17 Apr 2026 10:01:35 +0000
Manifest this update: Fri 17 Apr 2026 10:01:35 +0000
Manifest next update: Sat 18 Apr 2026 10:01:35 +0000
Files and hashes: 1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: 85LG7370pAHFlokPwuTtHB4EoOYsnLUJCo+/pWb55Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:86:cb:48:27:cf:90:62:81:b8:a4:b2:95:b7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
Validity
Not Before: Apr 17 10:01:35 2026 GMT
Not After : Apr 18 10:01:35 2026 GMT
Subject: CN=11da8075ecceae7c553cc9d13c37573916cf5561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:87:e4:af:b9:74:5c:0a:42:a8:f0:51:29:
bb:2c:be:c2:2b:84:34:50:d9:9f:4e:d3:26:ad:d1:
74:52:db:2f:04:ea:14:a7:d1:5a:45:40:e2:d3:09:
d9:2c:47:54:1f:9d:5c:bb:f2:53:77:44:3b:ca:2c:
ec:59:33:a6:13:f4:30:aa:15:c8:0b:c5:7a:34:ec:
b4:a8:e3:dd:24:cc:41:10:f2:2a:94:4f:fc:09:84:
0b:2b:32:b2:25:af:ed:1d:f9:08:2a:db:c0:ff:43:
f6:23:e9:d7:d9:8b:95:04:fe:48:7e:61:4c:23:21:
65:83:43:3a:95:33:4d:c1:9b:91:fe:57:fd:00:03:
5b:a2:60:fe:74:30:dc:bf:29:b3:f5:cf:a2:05:8c:
d0:bc:7a:a9:df:56:36:d9:4e:23:3c:50:75:77:df:
b8:ef:b4:8d:78:a8:46:6a:0d:6e:13:cf:58:b0:21:
f8:ce:f2:2b:6e:01:ac:ca:ca:15:14:e6:b4:50:67:
b1:09:b6:a8:a6:fc:ed:45:7c:fe:1e:ec:cb:ea:69:
4e:8b:e9:0d:11:ae:b8:e8:f9:97:7d:b8:16:24:61:
b9:65:74:f6:3a:3a:d2:67:39:93:0a:75:4d:1b:e2:
c5:9a:4c:35:ea:0d:84:1e:2b:9c:97:c9:94:3d:e5:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:80:75:EC:CE:AE:7C:55:3C:C9:D1:3C:37:57:39:16:CF:55:61
X509v3 Authority Key Identifier:
keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1e:a3:6d:7f:3d:78:47:94:5c:f3:08:df:88:f3:33:ff:c3:
5b:92:dd:df:d6:44:5c:55:0c:39:1b:3f:38:d9:da:62:a9:e2:
0d:e1:e6:3f:55:27:93:ae:c9:5b:2c:75:7b:41:0c:65:9d:43:
e0:36:d5:55:c3:a8:f3:d7:29:c6:41:9d:8b:85:54:af:13:58:
8d:a6:d0:f1:d0:d5:70:2e:c2:a9:a4:99:a9:87:7a:69:b5:76:
f9:fa:9d:24:29:55:1d:30:d4:5b:98:df:fe:0b:b8:a6:e4:ee:
96:aa:fc:e9:b1:a0:aa:15:41:d4:37:52:36:d3:32:23:c0:39:
ac:56:7a:a6:62:1a:9a:45:04:7f:81:dd:c0:ba:d3:e7:db:ab:
82:f3:36:78:c7:1a:aa:02:5e:18:0d:11:05:27:88:ef:06:ee:
6b:d5:ee:eb:a4:9e:ba:ce:59:b2:f1:3f:27:01:cc:71:f1:15:
77:bf:00:10:2d:e7:8d:87:6b:5b:2b:ee:08:d1:0b:c3:be:0d:
35:c6:96:ec:b6:57:80:c7:06:0d:e6:19:2b:1b:13:46:2b:4c:
b8:fa:a8:76:26:8b:b4:6a:98:70:4c:07:3f:e7:7e:ef:10:6c:
ca:ef:3c:17:ff:96:a8:34:95:24:61:32:57:a1:b5:b3:97:b1:
2e:e5:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:15 2026 by rpki-client