Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: OJBNmwvgXnGcXcgHHd/UqPlw3/BmvXbSEyPv7ZXpcBU=
Subject key identifier: 3F:49:77:A9:46:ED:76:FD:2F:E7:65:74:6B:7B:CF:35:BF:AC:6F:74
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 019EBE482A9621FAC623F9B497978D463799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 1792
Signing time: Sat 13 Jun 2026 00:01:00 +0000
Manifest this update: Sat 13 Jun 2026 00:01:00 +0000
Manifest next update: Sun 14 Jun 2026 00:01:00 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: sZ02+8/j54DPH/iCkfJBK+2dGeK7ZP8D11AYFkdMRxE=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:2a:96:21:fa:c6:23:f9:b4:97:97:8d:46:37:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Jun 13 00:01:00 2026 GMT
Not After : Jun 14 00:01:00 2026 GMT
Subject: CN=3f4977a946ed76fd2fe765746b7bcf35bfac6f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:e5:2d:9f:de:d4:32:79:2c:0e:c3:f2:3b:
5a:7d:f9:1d:03:b7:af:70:fb:70:f4:6d:20:92:18:
06:98:27:06:39:7a:1b:40:e6:87:51:d1:7e:6d:53:
a6:d7:c9:03:2c:f2:87:e5:72:e3:dc:42:cc:2f:31:
c2:eb:a2:a1:c9:2b:6e:02:2b:01:9d:83:ef:ce:9c:
55:90:70:64:a8:d3:23:0d:48:92:50:dc:74:9a:7f:
1d:a9:03:22:03:2e:82:62:94:b3:60:6f:b6:02:3b:
2c:bd:ae:ab:48:21:6a:7f:a6:a4:81:90:7b:04:db:
74:18:81:ad:53:b6:30:b0:45:2d:a0:b1:03:ec:5d:
8e:65:cd:d0:2b:99:78:98:d8:a5:bb:49:2f:d2:ba:
32:e1:d4:fb:59:ac:99:e2:c4:b8:2e:6b:cd:88:f9:
01:9b:c8:e2:79:35:8c:35:81:26:e9:ce:1e:b0:c8:
1d:a5:75:ea:ce:5e:41:f0:22:c6:22:4f:2f:f0:1c:
ab:e5:3c:a4:3a:4f:5b:ed:b0:00:ba:de:7c:7a:ee:
fb:64:2d:de:84:7d:0a:ed:dc:b2:1a:ce:fc:9e:ee:
2b:ab:d8:c4:f9:ed:13:ae:35:cb:f0:50:55:03:68:
4d:77:d6:73:da:7c:b3:eb:99:dc:3d:31:3c:d7:5c:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:77:A9:46:ED:76:FD:2F:E7:65:74:6B:7B:CF:35:BF:AC:6F:74
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:62:60:90:b4:27:1f:c4:2e:04:5a:b6:b3:40:2f:9e:6d:
91:1c:61:54:db:97:2f:8a:7c:4c:7b:00:9d:f7:c8:6f:bb:37:
40:f1:0b:58:be:5a:75:6f:f9:c8:18:8b:9b:71:f2:76:32:90:
b9:eb:21:f0:13:21:cf:83:07:58:9c:ef:08:0a:49:bc:04:f3:
c9:e4:d5:18:8f:2c:2f:1b:44:c0:84:10:91:b6:cf:7f:17:45:
2e:25:03:f6:28:24:ce:60:d4:26:4b:e9:3e:18:76:29:dc:bf:
98:9e:b9:7d:a7:22:ac:19:15:63:28:91:ce:37:02:2e:dc:fa:
f0:93:54:85:01:4d:7c:68:61:14:8b:5d:31:77:dc:94:7d:fb:
22:ac:f7:0f:65:f3:fc:2b:d9:77:f2:56:9a:95:4f:ec:dd:17:
cd:71:b7:87:40:f0:bf:9e:2e:58:b8:1b:f7:58:50:1f:e9:48:
ae:ba:0f:48:96:59:36:70:5e:5b:cc:26:12:42:b2:c6:96:c5:
ca:8d:73:1f:75:39:60:42:a9:7b:32:cf:05:c9:1e:c1:b0:a1:
e7:88:cc:cc:c3:c1:73:92:a4:b6:74:4e:7f:1a:17:64:56:35:
94:4d:3d:40:ae:98:1d:e3:36:33:c3:e8:96:39:73:5f:ea:a9:
f3:2a:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:04 2026 by rpki-client