Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: jISRO01vlAvxcKQHDEtaKE9rInusdE/MJzfqqv+VE0s=
Subject key identifier: 66:6C:78:2B:43:90:7E:D5:CB:21:B2:91:F4:9C:4F:DD:BB:7C:72:B7
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 01A1C3D484F15EF20BCE85DEF4E5B50F7D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 0CF9
Signing time: Tue 10 Nov 2026 05:00:47 +0000
Manifest this update: Tue 10 Nov 2026 05:00:47 +0000
Manifest next update: Wed 11 Nov 2026 05:00:47 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: w+dVwpLt58z6DjbHKZCk9kVihVmatfd4u1dHphUIUaM=)
2: QfmQSbGn-rduzrFqyr6Sbemoe_M.roa (hash: osfrqMp9JnWBuxKfciaGluVi+EkA7SyhrK0LWIgUKOM=)
3: UPMg7rWjV3hDDE0mnmogG2n2blk.roa (hash: JwH0lLPwflRE6ZZP7SZUGCLHGbBuaoFOuDPOldCNPLk=)
4: V1ivFQWDP77i8oEcG_p8QyZQJAM.roa (hash: dOMZrRoKiVBS9GiMZZVqHJQh/9Gux0X1bI6FS/AevuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:d4:84:f1:5e:f2:0b:ce:85:de:f4:e5:b5:0f:7d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Nov 10 05:00:47 2026 GMT
Not After : Nov 11 05:00:47 2026 GMT
Subject: CN=666c782b43907ed5cb21b291f49c4fddbb7c72b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:d7:d5:71:76:2c:27:ae:2a:cd:2a:f2:b3:
6a:46:be:d1:bf:07:93:f9:9c:59:ad:d9:97:73:8d:
73:4a:02:08:f0:04:09:33:1c:c3:fa:45:b8:2b:e7:
42:fa:ec:39:ea:8a:86:f0:41:49:52:ba:ea:d3:49:
ac:05:3c:aa:ce:cb:81:9f:80:8d:73:d2:02:e7:62:
dc:e9:e8:1d:64:f2:c3:bf:56:c4:37:23:2c:be:d5:
70:b4:80:28:5f:2a:2e:49:1b:d8:74:30:d7:91:75:
19:a5:03:65:ea:1f:cb:bd:5b:47:47:ef:a1:a3:61:
0b:4b:94:7a:40:14:38:9a:df:c3:75:64:bb:da:a0:
71:b7:c4:fc:b5:aa:71:4c:e6:90:2d:5a:b8:66:61:
48:ad:34:20:a8:a5:49:9e:a5:d3:a9:a2:1b:ac:f1:
5b:05:c5:3f:1d:91:e1:df:20:cb:85:f7:27:d2:f1:
47:53:d4:ad:f3:ca:d0:a0:35:02:38:33:ae:44:3b:
8d:eb:81:61:0a:d3:22:49:41:2f:6a:18:ea:76:31:
20:84:a1:e5:f5:e1:cb:db:1b:29:24:98:64:ac:ef:
c7:dc:86:8f:2c:7d:5e:a4:be:1b:24:8e:dc:b1:cf:
5c:1b:f1:ad:15:bf:68:bf:4a:c2:4d:fd:e6:bf:f1:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:78:2B:43:90:7E:D5:CB:21:B2:91:F4:9C:4F:DD:BB:7C:72:B7
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:72:7b:cc:4f:9d:53:df:1d:3d:34:d9:01:32:d5:71:bc:
5b:46:39:8e:c9:3e:aa:f3:03:1c:74:a2:45:4f:ab:3b:fe:5e:
b7:7c:ed:78:3d:2b:83:6b:a4:69:52:5f:7e:81:f7:6d:1f:1c:
5e:be:cb:26:4a:91:fc:1a:1b:6f:88:c4:28:ea:dc:b0:76:ed:
22:8f:4c:8d:07:d6:7a:b4:c2:cd:59:33:82:06:f1:84:8d:78:
77:fa:7b:ad:91:c4:32:71:7a:37:4f:de:4d:f0:7e:fe:ae:ae:
ca:f4:11:b0:6d:5f:fa:f0:2f:00:6b:f8:9f:b7:23:92:01:f5:
bd:fa:13:3d:c6:64:70:5b:6b:ec:8f:1f:65:f2:16:c5:c7:c4:
fa:e2:fc:06:a4:74:0f:2d:92:6c:08:99:26:75:65:1a:8a:2b:
c6:67:9c:2a:fa:4d:61:94:a6:f5:24:95:91:a9:50:01:96:81:
98:7b:9b:d7:1b:a1:54:08:92:59:60:0f:fa:c5:90:8e:90:7e:
9a:18:c2:33:57:d0:8c:01:d6:ae:6a:41:bd:70:a5:6e:13:bf:
4b:d7:5a:a1:ef:ac:41:5a:47:fd:26:5e:87:e9:87:79:5f:ac:
3c:b0:a3:aa:86:d3:f8:bb:e7:b1:da:34:2a:41:65:6a:aa:66:
85:1f:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:31:48 2026 by rpki-client