Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: IghA/GcDHK6YYj8bz7Zj8l/JO5qyVNb9N1+EjZStvmY=
Subject key identifier: D0:03:C3:84:E9:D3:83:83:FE:C3:23:DD:4A:1E:20:89:56:48:0B:2E
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 019CAA58DDF60F15747881FCEB022055E015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 0A55
Signing time: Sun 01 Mar 2026 17:01:16 +0000
Manifest this update: Sun 01 Mar 2026 17:01:16 +0000
Manifest next update: Mon 02 Mar 2026 17:01:16 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: GTWSWZMp/o4nc0tSWlDIkT3OS82uXNMPLD94EPEIOFc=)
2: QfmQSbGn-rduzrFqyr6Sbemoe_M.roa (hash: osfrqMp9JnWBuxKfciaGluVi+EkA7SyhrK0LWIgUKOM=)
3: UPMg7rWjV3hDDE0mnmogG2n2blk.roa (hash: JwH0lLPwflRE6ZZP7SZUGCLHGbBuaoFOuDPOldCNPLk=)
4: V1ivFQWDP77i8oEcG_p8QyZQJAM.roa (hash: dOMZrRoKiVBS9GiMZZVqHJQh/9Gux0X1bI6FS/AevuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:dd:f6:0f:15:74:78:81:fc:eb:02:20:55:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Mar 1 17:01:16 2026 GMT
Not After : Mar 2 17:01:16 2026 GMT
Subject: CN=d003c384e9d38383fec323dd4a1e208956480b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:d9:01:cf:16:0f:74:83:94:19:b5:c9:07:
a6:9e:9e:4c:c3:18:9a:fa:7d:28:17:d6:0f:39:81:
a8:c5:67:2d:b7:6b:f7:04:78:ae:53:3c:69:c6:3b:
d8:f7:90:3a:4f:2d:98:83:fd:a4:0f:20:e7:d7:2a:
8a:0e:35:3a:0c:4b:80:8b:e4:54:bd:13:21:04:8d:
07:a6:c3:9e:56:f3:25:68:9f:7c:b2:73:4a:a5:63:
5e:c7:e3:f8:50:62:38:66:6d:3b:23:2e:3f:34:82:
9a:53:89:bb:8b:1d:90:95:67:1e:08:ee:e0:91:3e:
a7:8c:03:34:fc:fe:96:59:d1:1a:22:77:f3:61:2e:
00:ce:35:1a:32:eb:d0:2f:50:b3:96:36:1d:35:0b:
f7:da:1d:b5:18:5e:98:46:80:a1:f6:e2:ac:72:f5:
49:82:3f:dc:b0:bd:24:aa:87:1b:cc:db:f1:15:9e:
a4:4a:5c:fa:26:26:2b:e1:b0:48:6b:65:85:5a:cd:
a8:79:80:bc:03:97:f2:5e:b0:5c:5c:07:43:de:2e:
fb:5a:ac:de:96:6d:d9:28:8a:ae:56:6f:bd:eb:5c:
90:26:6d:c3:89:f0:95:fe:db:63:7c:2d:af:db:62:
db:6e:d4:3a:bc:1b:31:f2:fa:3b:66:bf:06:ba:d6:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:03:C3:84:E9:D3:83:83:FE:C3:23:DD:4A:1E:20:89:56:48:0B:2E
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e6:52:92:34:1b:c2:fc:26:29:1c:47:97:38:83:20:bd:a1:
76:3c:02:08:92:75:c1:86:d2:28:4b:65:69:fa:f9:af:f5:27:
b7:e2:fe:a1:1f:74:01:ce:f5:20:36:4c:0c:03:98:1c:65:37:
3d:a9:3b:65:55:a5:78:37:d5:73:48:ca:e1:99:84:23:04:3e:
59:58:22:29:4d:93:38:4e:bf:44:73:6d:d3:d3:64:ba:e4:1c:
e3:1b:a8:d6:57:19:a1:d7:e6:f5:94:5c:f1:13:bd:ee:3e:93:
46:54:02:ac:03:e2:a9:10:0c:9b:0d:bc:b8:1c:47:e7:91:89:
71:6c:66:89:02:3f:e1:52:5d:e9:1a:e6:10:cd:3a:c3:28:53:
25:c9:f8:e7:07:01:f3:50:3f:1a:d3:40:1e:fd:08:83:e0:98:
e7:24:0d:a1:e6:54:fc:5f:23:11:38:e5:58:4b:0b:c1:64:3f:
61:01:e9:b5:cc:3b:37:79:a3:d5:90:7b:6e:d5:33:07:1c:62:
92:92:f1:12:38:5d:da:a2:1b:68:dc:1c:fb:bf:05:a7:e3:c5:
4c:01:0a:b6:43:50:4f:77:ec:66:cb:e9:f6:6c:14:ae:9f:f5:
5c:e4:09:9f:0d:6a:64:40:1d:ff:8b:4a:0f:3d:f0:3f:d1:94:
c4:7a:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:58 2026 by rpki-client