Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: 5NWT42/Mq5KFRQijf/dGcf4JqOZDI+3Bye41MDIPpDc=
Subject key identifier: 92:26:13:3E:0D:1F:3B:2B:ED:CA:E8:3B:95:7C:36:0F:29:6C:5E:DF
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 01A120C0F7B4CB571A41CB07936C86824F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0DC7
Signing time: Fri 09 Oct 2026 13:01:19 +0000
Manifest this update: Fri 09 Oct 2026 13:01:19 +0000
Manifest next update: Sat 10 Oct 2026 13:01:19 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: jBv8Lwxq5vXbAD1cUo9C8FXvD5MhAQIxwaytK1khRSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:f7:b4:cb:57:1a:41:cb:07:93:6c:86:82:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Oct 9 13:01:19 2026 GMT
Not After : Oct 10 13:01:19 2026 GMT
Subject: CN=9226133e0d1f3b2bedcae83b957c360f296c5edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:8e:76:65:a8:26:54:3e:49:ca:ed:d6:00:
9c:a0:b6:ff:0c:84:a0:16:10:8e:31:ad:1c:f4:cb:
be:46:d9:90:f9:19:02:cb:ee:bb:1d:d2:1b:10:3d:
3e:62:f0:f6:c2:00:49:9a:74:6c:d4:d7:5c:1c:d1:
53:86:18:51:44:5d:c5:7a:46:2d:1a:3f:2b:de:1a:
9c:23:26:aa:8c:74:24:5a:ee:23:76:0a:63:4d:02:
59:0c:c9:37:fb:31:69:2c:07:ce:4f:88:98:69:41:
35:2c:3a:91:14:0f:80:b9:e9:fb:2a:a4:2f:17:85:
59:0a:2a:07:0f:47:95:e8:7c:ef:5f:bc:8f:bc:55:
15:d0:98:c9:27:41:c6:95:18:03:24:22:81:47:ad:
e6:02:c2:36:61:e3:38:8f:58:c5:df:56:6c:16:60:
36:52:d0:5f:e7:c9:4f:d2:6a:a1:76:63:ea:a3:93:
c7:ee:1d:64:ce:23:79:25:b7:bc:74:60:00:28:33:
7e:80:92:72:e6:be:39:de:31:bd:67:86:36:11:9d:
f9:22:62:c5:2c:e5:20:89:55:2a:59:c7:06:33:4b:
4c:7c:80:98:77:29:d3:66:03:d9:33:11:4c:af:c0:
be:b1:1a:1b:21:9d:5e:5a:75:2d:b0:52:82:69:49:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:13:3E:0D:1F:3B:2B:ED:CA:E8:3B:95:7C:36:0F:29:6C:5E:DF
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:9c:27:6d:9c:0a:5d:cc:b6:c5:a3:4f:2c:93:bb:71:3d:
cf:56:4f:4c:2c:9e:66:f5:38:10:bb:25:d3:35:51:af:fa:71:
a5:f0:9e:5b:9c:48:85:bb:9c:5e:04:78:c4:ce:d7:98:d1:2b:
5a:c3:c8:e6:03:1a:54:be:77:e0:f9:66:66:11:55:b4:74:8e:
4a:d4:f0:bb:76:3c:ba:7a:c5:4b:28:ec:e5:89:bb:fb:bc:66:
60:a1:a0:7a:21:bb:48:2b:80:e6:d0:18:b1:d7:14:76:83:a7:
d0:4f:36:89:7e:9d:55:9f:17:6b:31:39:27:c0:92:50:27:cc:
48:09:44:f7:21:4a:af:aa:7c:6a:d9:7f:77:a4:6b:18:8f:e9:
fc:c4:e4:44:15:a5:da:0a:a0:31:9e:af:45:82:7e:6b:5f:99:
0a:0a:72:76:e1:83:7c:22:fd:5c:e4:de:05:f5:49:1a:de:36:
8d:0a:60:1e:82:18:a2:07:35:c0:ae:42:35:0f:40:14:d4:27:
fa:8a:0d:84:7b:9b:83:e8:2c:ce:1b:00:ce:f1:e7:b5:b5:9a:
a7:75:69:aa:47:f5:ef:1a:6f:09:a8:85:02:94:1c:6a:4e:93:
7e:ef:6c:8b:a3:1d:c2:ce:15:ba:ca:87:93:6f:41:84:33:d6:
41:b6:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:34:52 2026 by rpki-client