
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
File: BpSDF1Vo_2MI2iXOaQQvSaUebss.mft (raw, json)
Hash identifier: J78nPJSLa2TmZTdNt3oR6iAa1zkxXv54hIE2rHab4to=
Subject key identifier: 20:B8:A5:5D:63:59:CE:6F:26:C3:EF:64:7E:54:2B:85:12:85:5D:AF
Authority key identifier: 06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
Certificate issuer: /CN=069483175568ff6308da25ce69042f49a51e6ecb
Certificate serial: 019FABD0CEB040084A70B12042824F4843F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
Manifest number: E4
Signing time: Wed 29 Jul 2026 03:00:16 +0000
Manifest this update: Wed 29 Jul 2026 03:00:16 +0000
Manifest next update: Thu 30 Jul 2026 03:00:16 +0000
Files and hashes: 1: BpSDF1Vo_2MI2iXOaQQvSaUebss.crl (hash: 76BpRT7m+yJjJh63x6qYse6wTUFUG/K4gPQY9TE4w58=)
2: MpAtPvXf2NUZLrtZHr5wLDE9ing.roa (hash: wDbKs3VjtAP4258J/lY8NrGeGS7zhrnbtOERXhqM3tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:ce:b0:40:08:4a:70:b1:20:42:82:4f:48:43:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069483175568ff6308da25ce69042f49a51e6ecb
Validity
Not Before: Jul 29 03:00:16 2026 GMT
Not After : Jul 30 03:00:16 2026 GMT
Subject: CN=20b8a55d6359ce6f26c3ef647e542b8512855daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9c:5b:46:04:18:86:42:a2:44:7b:95:95:d5:
60:89:18:a9:f8:65:72:60:7e:5b:1d:48:6d:b7:f9:
e1:e2:d3:bf:b3:97:ae:8b:0a:68:a1:34:ba:71:61:
c5:2f:6d:59:4b:88:43:50:2e:c3:37:5c:be:85:2f:
44:d9:62:92:75:f8:97:90:1c:10:a7:82:fc:13:db:
c3:62:c2:ba:6f:e6:d6:05:a1:8d:ee:71:d2:d9:d1:
09:7f:40:fe:5b:8a:69:8e:84:2b:6a:81:3b:ff:03:
b1:4d:15:75:6b:fa:fa:42:8c:04:f8:02:77:71:dc:
c9:1d:7d:c8:68:35:04:78:97:e2:1e:61:ed:d3:62:
0f:85:72:c9:c9:28:dc:e4:0c:86:67:5d:66:d3:bf:
00:41:20:3b:de:17:a6:fc:e3:8e:af:e7:14:a5:31:
10:03:df:43:a6:63:b5:53:97:db:60:fe:71:84:1e:
b4:af:05:bb:4c:bf:8a:17:f1:dd:d9:81:c8:91:62:
2f:ac:bf:47:f0:dc:ee:11:26:53:be:5b:8e:4a:30:
19:2d:6e:98:ba:0b:5b:d0:d9:0b:15:8d:76:8f:d0:
35:2d:13:4d:57:96:75:88:73:d4:f8:7b:1a:0b:5f:
44:73:b4:16:d0:4c:4d:4d:38:3f:bd:1d:f4:c9:54:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:A5:5D:63:59:CE:6F:26:C3:EF:64:7E:54:2B:85:12:85:5D:AF
X509v3 Authority Key Identifier:
keyid:06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:db:8d:eb:81:bf:ed:d7:5b:32:3b:d6:19:da:df:23:67:62:
f7:3e:81:7d:07:81:0f:ee:bb:9e:4c:0a:c2:08:6d:d5:eb:30:
ce:cb:7f:88:9c:c1:07:ae:0d:6f:4a:c4:aa:97:bc:52:35:e4:
7a:61:a9:b7:7f:40:d5:c6:9f:69:5f:c8:86:2e:88:88:fc:6e:
a0:52:a0:0f:35:9c:80:2f:01:6f:3a:82:28:76:1f:59:19:94:
59:7d:85:3f:3a:f0:bb:cc:67:f3:07:28:8a:8e:88:c8:c1:f1:
fe:02:d6:e0:12:e9:c1:4f:f2:c2:ea:03:3b:d2:d1:2e:6f:4c:
b2:c4:d8:9e:47:19:bf:65:e2:36:98:26:2d:e4:a0:75:32:ee:
d6:d9:af:3b:4a:34:00:6f:93:4e:f5:26:4d:3a:f7:c8:40:46:
3a:cb:c6:5f:d2:4c:bf:74:fb:02:d5:e9:5f:3a:17:52:da:2a:
83:29:89:9f:2d:94:3d:0f:7a:18:d9:bf:8f:f1:2b:2d:ff:01:
2e:e4:b9:28:2f:73:6d:41:79:c9:33:65:63:28:30:8d:22:b0:
36:74:b0:63:c8:72:ff:c5:43:fb:95:15:12:ff:5a:ae:a2:28:
73:df:a0:bc:8f:50:b9:3f:89:e2:ae:58:4a:34:30:94:41:5a:
74:b4:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:41:32 2026 by rpki-client