Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: gZKOLb2Lqy/OKpU/ZYTrYllAwWC9mxVCqJODPjwJXe8=
Subject key identifier: F9:0B:29:E2:2E:A4:3B:6B:BD:BB:32:DD:ED:F8:6F:30:17:97:30:68
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 019D9DE3BA08692606CA4BAEE74161E49280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 0284
Signing time: Sat 18 Apr 2026 00:00:40 +0000
Manifest this update: Sat 18 Apr 2026 00:00:40 +0000
Manifest next update: Sun 19 Apr 2026 00:00:40 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: pE8PzMHcR5MACg4WfVD4t0/ody5CCWdkCMqgzXp/TsI=)
2: Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa (hash: gWG2uNDqwP4RF3btrRpyjXejBso2oQJiOb7vaAvc7tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:ba:08:69:26:06:ca:4b:ae:e7:41:61:e4:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Apr 18 00:00:40 2026 GMT
Not After : Apr 19 00:00:40 2026 GMT
Subject: CN=f90b29e22ea43b6bbdbb32ddedf86f3017973068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:95:af:c6:c0:e9:24:78:48:f0:11:1b:bd:
f1:35:a4:8a:e7:d0:c2:fd:e2:f7:85:1c:d2:5e:0a:
36:28:99:f7:94:12:86:ec:77:a2:4c:9e:25:41:64:
af:fa:3d:11:b3:ff:0a:e0:82:74:ec:06:4d:ad:ce:
79:b7:d1:87:32:8e:f0:b0:0b:eb:5a:1c:18:1c:fa:
4d:11:47:36:a0:e0:0d:56:f7:37:ce:ac:1f:35:d7:
55:9a:b0:24:a2:76:39:3f:b1:06:7d:16:f5:8d:0e:
89:a6:21:7b:b9:05:c0:c5:45:2b:bd:f7:ea:cc:8a:
4f:93:cd:9e:ee:bf:ea:e9:0a:4d:f8:92:ea:c5:e3:
35:d4:a5:a5:e3:cc:85:58:af:fe:99:46:07:3d:d3:
87:b7:9c:a5:0a:0a:b9:ee:89:57:40:2c:c2:25:70:
33:78:b1:05:14:ca:80:47:d4:ac:39:bf:e7:0f:41:
90:58:8e:09:f2:8d:76:a0:b1:3c:4a:e3:1e:31:e0:
40:ad:01:85:73:bf:09:37:35:40:41:a8:27:db:5f:
33:b5:b2:32:47:ad:f8:2d:dd:61:79:0e:47:83:fc:
88:b6:86:47:dd:1d:ba:23:c4:34:85:57:54:0f:2f:
8c:9c:8d:1f:8d:9e:68:52:57:fb:63:de:74:03:1e:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:29:E2:2E:A4:3B:6B:BD:BB:32:DD:ED:F8:6F:30:17:97:30:68
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bf:66:6f:30:28:3f:dc:69:2f:72:ce:5c:97:d6:22:c8:c2:
4f:07:28:18:50:aa:e9:07:19:97:40:33:65:de:88:8d:84:12:
46:4c:8b:90:f8:72:7d:85:a8:8f:9a:a8:26:bd:83:a0:67:c2:
78:d7:eb:3b:f8:d8:03:af:a2:31:4f:f6:95:2d:10:55:8d:84:
63:ac:f7:10:89:16:12:92:e0:7b:50:31:9c:97:ed:f1:94:25:
17:9a:a2:68:08:1e:56:b1:c8:83:61:b8:c6:de:27:ce:94:88:
c7:6b:ff:43:89:38:61:0d:6f:5c:71:b6:bd:ff:ce:da:c6:aa:
9b:10:ab:8d:4e:80:0e:91:7c:c8:e4:15:a1:17:d3:cc:e8:a9:
10:5f:df:b4:15:2e:68:1d:dc:3f:45:69:90:0e:5f:9c:76:8c:
df:6e:2d:b1:b6:e5:aa:0d:3d:df:c6:77:04:11:d5:35:c7:f8:
67:d8:c5:24:fe:18:75:7e:cc:48:2b:c6:ff:7f:b8:99:d9:9f:
4f:c3:c7:ba:41:dc:08:a3:82:4f:b6:80:e7:14:48:4b:5c:34:
1a:c6:e0:9b:cd:ad:5b:65:0b:e7:13:3e:87:34:2f:b4:43:a2:
a8:8d:3b:d0:0e:bb:bd:02:40:3c:d5:97:a8:9d:4c:bb:95:2a:
c2:0e:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:20 2026 by rpki-client