Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: Zcutjego7e9msMaoW7/5S5eb2VJ090EpbTg28z4lxZU=
Subject key identifier: FB:F9:78:D1:B8:77:E4:6A:C5:90:44:5F:5A:B4:2D:6E:38:C9:98:00
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 019ED4D00D8B2920038766D5A2FE22A087DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 0325
Signing time: Wed 17 Jun 2026 09:01:05 +0000
Manifest this update: Wed 17 Jun 2026 09:01:05 +0000
Manifest next update: Thu 18 Jun 2026 09:01:05 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: eaQH1GOUK3GqXl7Z1MR/NktB6zSifAo6iCVH/PglgN4=)
2: Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa (hash: gWG2uNDqwP4RF3btrRpyjXejBso2oQJiOb7vaAvc7tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:0d:8b:29:20:03:87:66:d5:a2:fe:22:a0:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Jun 17 09:01:05 2026 GMT
Not After : Jun 18 09:01:05 2026 GMT
Subject: CN=fbf978d1b877e46ac590445f5ab42d6e38c99800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:ca:89:e0:2d:60:58:1a:ea:57:99:11:84:
cb:6c:5d:ad:77:0e:41:a5:69:45:b0:58:46:85:56:
2b:3d:f0:d4:58:6c:7b:e8:a2:23:fe:c8:d5:dd:20:
e1:01:6e:95:58:bc:df:60:54:b7:4a:95:69:d9:97:
b5:68:18:6e:a7:b9:dd:dd:22:a0:15:c3:1d:97:81:
aa:75:65:10:b9:69:ba:13:43:27:e4:25:78:29:b6:
53:65:70:0e:fb:1f:f8:3d:5e:72:34:23:1a:36:79:
d1:32:fe:ee:79:aa:a6:07:db:3a:0e:c1:d6:0e:a7:
69:0a:30:74:7c:a2:45:9b:af:32:28:0f:8d:25:11:
74:fa:98:fb:d5:8e:7a:45:3a:50:82:cd:6b:17:96:
b5:c6:2a:10:22:c1:6a:8f:f8:87:40:dd:4d:4b:6f:
e4:d2:f1:f5:b5:7c:db:cb:d7:e7:60:ce:8a:1f:59:
a8:58:b6:02:9f:ab:50:dd:b1:0a:91:5c:c8:a9:c1:
62:9b:3c:6b:34:f0:36:ad:e6:b7:c3:b5:33:94:fb:
7c:4f:4a:f7:76:51:5e:5d:4b:ed:37:80:a8:4f:45:
dd:78:2e:ab:ae:dd:75:63:ea:13:21:7d:c6:8d:a9:
ed:d8:b6:5b:98:55:b2:6c:14:5d:ae:80:b4:4e:a0:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:78:D1:B8:77:E4:6A:C5:90:44:5F:5A:B4:2D:6E:38:C9:98:00
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:4b:f2:e6:b3:f0:97:74:07:b2:66:e7:6f:fb:0f:81:b4:
66:d9:15:58:40:04:c1:46:21:97:c0:dd:8d:73:c1:e5:f7:8e:
f4:66:ee:55:47:6e:19:55:b5:d1:6b:60:a2:84:98:1a:f1:50:
ce:f9:b9:c9:80:2c:76:d9:d6:30:1e:c6:62:a3:e2:2f:28:aa:
74:07:87:62:31:3d:6b:03:3b:98:5c:8b:94:47:5a:01:8c:23:
f6:3f:9b:28:6a:34:52:2f:21:be:0b:51:76:15:5b:26:22:12:
9a:3f:70:14:13:21:05:ec:68:61:83:1e:e2:09:c3:52:74:6c:
97:73:3c:94:bf:2a:a5:34:4c:d3:66:b5:7a:0c:58:61:97:c9:
7a:84:a1:9c:6d:a6:e0:59:82:b0:c8:6f:6c:44:0b:37:d0:63:
e2:35:17:8f:b8:d5:1f:73:92:bc:49:48:9f:dc:35:89:a8:81:
95:c3:8b:1b:58:17:60:9a:da:a1:20:f6:e1:e4:30:71:79:5c:
f2:73:20:87:72:99:c1:af:e4:d2:dd:cc:76:7b:33:5b:8d:85:
bb:ae:58:45:b9:53:50:42:42:95:97:92:d2:c9:5d:86:08:36:
f1:64:9f:97:47:e1:16:da:0c:06:e3:c5:b5:cf:74:af:bd:b8:
4b:14:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:44 2026 by rpki-client