Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
File: Bv170s3aV23AzQiOvm7mAZceEjQ.mft (raw, json)
Hash identifier: dvxngDDrdDI7zXxsDCDL+xbmmTEyIjUTvHWXA7xSdVI=
Subject key identifier: CD:75:29:8F:6D:61:69:E7:F1:3C:EA:26:E4:59:BB:C9:70:B0:4D:3C
Authority key identifier: 06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
Certificate issuer: /CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Certificate serial: 019FA9072CFF3D455EB8270A3D0FD4298BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
Manifest number: 11A9
Signing time: Tue 28 Jul 2026 14:00:47 +0000
Manifest this update: Tue 28 Jul 2026 14:00:47 +0000
Manifest next update: Wed 29 Jul 2026 14:00:47 +0000
Files and hashes: 1: Bv170s3aV23AzQiOvm7mAZceEjQ.crl (hash: X1z1CzO9ibj4zlu72bTAKlcwuY9ZTN4nYPWbGF1LnCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:2c:ff:3d:45:5e:b8:27:0a:3d:0f:d4:29:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Validity
Not Before: Jul 28 14:00:47 2026 GMT
Not After : Jul 29 14:00:47 2026 GMT
Subject: CN=cd75298f6d6169e7f13cea26e459bbc970b04d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:9a:c5:f9:f1:76:83:38:8f:7c:f9:bf:70:
f5:83:5e:86:04:96:5e:78:8b:fc:11:0b:66:d5:2b:
23:b1:a0:53:9f:24:36:d5:a8:64:4f:bf:f6:17:af:
75:cb:6c:70:1f:4c:dd:52:a6:bd:f3:64:2a:09:c4:
ea:d6:cb:2e:30:04:ab:f0:6a:3d:44:47:e5:96:d4:
f2:bd:d5:39:c0:a0:e5:67:6f:75:3f:1a:73:76:c7:
21:03:a4:41:8d:c8:43:2b:90:25:6c:4a:f3:b7:83:
f2:16:20:44:e3:95:ba:95:dd:4f:9b:ed:e4:61:26:
60:57:bd:3d:8b:2f:e7:70:75:7e:52:5e:72:64:b2:
d2:dd:75:94:ff:72:57:0d:3b:fd:ce:83:1a:f2:27:
49:c0:6f:74:75:cf:2b:13:2d:f7:19:00:a6:10:9c:
33:2f:ec:90:52:f9:e0:70:04:03:3f:0f:8c:b6:4a:
31:e2:a5:9a:b9:b2:f8:70:a8:ac:b3:30:69:e1:53:
c4:b6:1b:6f:8e:db:af:cf:a0:51:c7:b0:8d:33:e9:
aa:a8:37:83:14:e9:81:67:60:75:a0:a3:9b:4d:29:
09:21:9c:c1:ad:e4:3f:9b:f7:bf:b3:a3:8b:47:8a:
1e:d8:9d:24:91:b0:56:d5:99:93:3a:9f:c2:bc:9d:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:29:8F:6D:61:69:E7:F1:3C:EA:26:E4:59:BB:C9:70:B0:4D:3C
X509v3 Authority Key Identifier:
keyid:06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9f:4c:7a:7c:8c:b3:2a:3f:6f:11:be:b6:25:92:77:f7:a8:
c1:5f:f4:3e:d9:5d:93:0e:a8:ac:84:3e:ec:21:0f:c6:fa:69:
9c:00:33:c6:56:f7:cc:07:c4:16:4e:17:35:1c:21:9f:0b:42:
7c:aa:68:00:2e:e0:9e:24:0c:5e:6f:74:0f:38:39:ea:0c:91:
6e:66:b6:12:7d:3b:9e:1d:50:1e:6c:c9:05:0a:c9:6a:af:1b:
72:e7:5e:05:00:d3:95:2f:52:ab:70:32:d3:58:ba:af:99:11:
60:6a:0e:fa:67:8a:b6:d0:60:de:d8:0f:8e:c8:ac:c7:dd:15:
28:7a:8d:36:60:7f:d0:ea:0d:6e:84:48:f4:f6:02:f9:6d:8e:
e8:f2:a3:4a:15:c7:c8:8f:b0:7d:b4:b9:66:eb:fb:31:8c:b2:
5d:73:bc:fe:0a:ff:f4:de:78:06:d9:0c:d5:c2:dc:25:06:f9:
62:95:9f:16:d6:28:22:9d:b0:8b:a7:af:08:14:64:0d:25:c2:
88:a9:de:84:f6:f9:a0:bf:8f:d5:07:08:5a:11:97:d4:71:83:
9d:48:86:fd:9a:76:45:fd:69:1e:36:67:36:58:18:6b:b8:3f:
f9:27:c9:18:d3:6f:45:c8:1b:5a:e3:70:02:ad:04:05:46:63:
ee:a7:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:27 2026 by rpki-client