Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: Ug1AytAN0D50zyi6MJ/HCAkiF5dt39FWHtLTg8aW4gM=
Subject key identifier: 33:04:2F:67:31:66:D0:9E:41:37:48:6E:E4:1F:15:75:58:4F:F7:10
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 01A0DEE12B36C1B7549BA16D0A20CBB6263D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 18AC
Signing time: Sat 26 Sep 2026 18:01:33 +0000
Manifest this update: Sat 26 Sep 2026 18:01:33 +0000
Manifest next update: Sun 27 Sep 2026 18:01:33 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: 1Wdb64jzwG8jXQi7MIPwp9v2g8FrkLksZsGV7kf2PeE=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e1:2b:36:c1:b7:54:9b:a1:6d:0a:20:cb:b6:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Sep 26 18:01:33 2026 GMT
Not After : Sep 27 18:01:33 2026 GMT
Subject: CN=33042f673166d09e4137486ee41f1575584ff710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:6c:a5:96:0b:e7:50:ef:a4:d0:f6:8a:54:
df:fd:7b:90:7f:11:17:a6:06:32:e1:55:06:7e:db:
a7:b0:12:66:5c:96:19:7d:33:b9:70:b4:31:15:39:
ff:4a:ce:40:16:7f:1e:26:c6:4e:2a:4d:0a:a2:7a:
48:ea:4e:5e:13:4f:4e:ab:8f:52:b1:2b:07:d8:df:
bc:e8:b4:c4:f3:cf:94:62:16:66:39:2b:6e:9d:e4:
2e:b9:0d:8b:36:93:7c:fd:c3:94:84:79:16:84:74:
eb:20:d6:5f:ba:b5:58:1a:30:27:af:42:70:55:aa:
e2:e2:24:8d:4f:2e:ea:e9:1a:45:52:d3:9a:9e:ee:
c1:f6:0b:67:9b:1f:17:3f:32:fc:2c:33:53:f7:44:
4a:86:1f:40:46:e6:11:e0:c3:10:7c:81:e8:00:85:
90:f5:dc:84:16:2d:cb:7e:52:3b:3d:b2:ee:f8:34:
2a:e5:6b:5b:11:36:6e:07:27:a4:86:a8:a9:be:31:
e6:5b:e6:1b:38:fd:90:b5:15:b0:34:12:b2:34:00:
f0:e0:d3:4d:9c:17:2e:ce:5a:7a:b9:43:38:22:de:
6e:42:66:cf:32:e4:e0:2d:44:3a:44:67:d3:1c:73:
19:52:7a:28:08:18:cc:d1:c8:9c:86:99:1f:d3:11:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:04:2F:67:31:66:D0:9E:41:37:48:6E:E4:1F:15:75:58:4F:F7:10
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:9e:1f:c6:1a:93:72:ff:95:04:5f:ad:ed:ed:c4:49:aa:
ad:01:3e:0e:24:46:4f:86:49:97:70:49:7b:a2:2d:5a:2c:8c:
20:03:7a:c7:dc:07:4d:be:fe:1e:5a:14:8b:a8:ed:da:10:5b:
d9:28:7b:77:8e:21:27:27:e6:01:93:d7:de:80:d5:d7:ce:3c:
04:f6:e1:6d:da:1b:32:cd:b5:4b:b3:03:cd:c3:7a:d0:69:d9:
44:9f:21:07:04:b5:b6:27:eb:e4:1b:1b:b3:3b:40:92:b2:24:
ca:47:f6:a3:ef:b7:80:df:7f:41:5a:f9:90:0a:60:60:99:94:
e5:76:8e:95:5e:0d:86:cb:85:27:74:21:6e:f8:7f:a8:61:b6:
5c:fa:38:3f:bb:84:8d:ca:fd:ff:c7:f2:0a:a6:8c:7b:ad:47:
3b:b7:ee:60:36:b2:97:7d:af:1d:dc:8e:0b:fd:6b:da:d1:37:
4d:20:17:a5:0d:a5:82:86:57:7f:74:f7:05:f7:73:71:ec:91:
d2:24:a1:8a:f0:b9:6a:7b:a2:45:b3:3d:c2:90:49:cc:5c:af:
a1:67:8e:89:1e:70:42:0d:ac:13:9e:30:74:20:47:c9:67:5b:
a9:5c:02:c1:ec:c8:e1:6c:23:3c:35:29:a0:22:b3:99:69:7b:
b5:de:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:43:30 2026 by rpki-client