Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: 7qFmN3B72tsZOgc6VR/GHM5RBMVrpKwm+1GHw2hvIPw=
Subject key identifier: 99:83:7A:EE:EF:D5:52:5F:7D:99:C8:C6:A1:1C:7D:43:B5:B9:8E:F3
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 019FA9E307D56CA9A8900E81EBC10687C37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 180C
Signing time: Tue 28 Jul 2026 18:00:55 +0000
Manifest this update: Tue 28 Jul 2026 18:00:55 +0000
Manifest next update: Wed 29 Jul 2026 18:00:55 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: sRBJjwf7P5BKeQj2uo+419R31aJA2m07tT2sZI+O7nc=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:07:d5:6c:a9:a8:90:0e:81:eb:c1:06:87:c3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Jul 28 18:00:55 2026 GMT
Not After : Jul 29 18:00:55 2026 GMT
Subject: CN=99837aeeefd5525f7d99c8c6a11c7d43b5b98ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:ae:2c:e2:1d:b3:6c:70:99:63:2c:9d:c9:
12:65:f8:7f:57:1d:5e:68:f9:8a:2a:9b:b7:93:e6:
1a:14:c2:73:01:11:17:76:6b:f3:37:4f:4a:5e:95:
cc:ed:cb:f4:c2:4c:d0:d2:bb:94:62:dc:1e:11:c2:
79:01:7e:e6:14:51:37:fb:28:04:05:33:7c:25:4e:
59:3b:6e:a4:0c:8d:30:a2:b5:f5:aa:e9:b3:04:f3:
fe:75:2b:48:03:09:6e:ad:68:88:e3:1f:da:e7:35:
ad:b8:24:9e:d0:64:75:5d:e8:6b:2b:74:24:75:d3:
91:09:b1:c3:9c:ec:f2:32:db:b8:d4:48:9b:fe:86:
14:34:76:07:24:51:41:ba:00:6c:c2:ed:f7:07:43:
8b:78:07:b9:57:f1:68:91:3f:26:48:3e:7f:f2:1d:
37:c9:2c:54:b1:2c:58:0c:f5:22:40:6b:37:45:ed:
5b:c4:7a:f1:99:47:1a:c8:2b:e3:9e:11:9c:87:9a:
6c:19:fe:bc:08:5e:aa:cc:7b:dc:09:84:e8:ec:85:
2f:b7:08:a2:34:1d:01:b4:87:8e:8b:16:9b:a8:43:
9b:6a:1c:e4:7b:7c:c8:0f:8b:7a:08:fc:18:36:01:
c2:69:68:2e:f9:1e:d3:5f:db:df:79:a4:54:ed:4d:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:7A:EE:EF:D5:52:5F:7D:99:C8:C6:A1:1C:7D:43:B5:B9:8E:F3
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:be:e0:eb:d4:11:d7:9b:13:34:6a:60:b9:ce:93:72:f9:00:
d4:38:e1:f5:da:5d:9a:30:ab:e5:63:e5:ad:78:1b:25:fe:e1:
e4:b3:91:19:e2:00:24:22:41:5a:46:d6:36:5e:a8:42:b2:c8:
63:fb:cb:1f:e5:87:a7:62:fa:66:45:5f:36:06:d5:87:7d:44:
ab:2a:e4:aa:a5:3b:8d:17:3d:40:04:13:56:0c:e3:ac:6a:be:
fd:41:d8:41:b1:7b:0f:37:dd:0b:73:fc:0b:02:f0:2b:8d:49:
51:60:91:d0:a8:cb:5d:2b:f7:96:75:04:d4:26:45:e7:10:ed:
fa:c0:7d:d6:e2:93:4a:7c:bb:23:8f:28:fe:7c:57:fa:12:fc:
28:29:6c:55:96:5f:22:c8:77:95:d6:21:e6:da:b1:b7:d7:d4:
08:c3:cc:6c:30:38:4d:99:a9:d6:66:69:9f:84:39:70:da:77:
b5:2d:7c:50:83:98:80:fd:68:f7:9f:3a:13:64:5e:f8:73:e0:
8d:79:85:1a:c3:21:a8:0a:9f:43:89:26:d1:2d:c7:18:e3:ef:
fa:0c:79:08:f7:67:ab:92:8c:5f:ae:7d:a7:b2:aa:18:6c:75:
8b:a1:5b:d3:bd:02:b9:10:ac:f1:0a:76:ea:66:c4:fe:55:81:
63:db:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:40 2026 by rpki-client