Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
File: Bv170s3aV23AzQiOvm7mAZceEjQ.mft (raw, json)
Hash identifier: OfBCI1HtTR//EidF/8Mr4RXOonQ3e+NeIKyNxIeWofw=
Subject key identifier: 83:43:4B:6A:51:BB:5E:6D:BA:30:9B:9F:22:E0:F1:C4:68:EA:CD:C5
Authority key identifier: 06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
Certificate issuer: /CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Certificate serial: 01A0C10D0911C8C2EAA441AE5DBA974DAA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
Manifest number: 123A
Signing time: Sun 20 Sep 2026 23:00:52 +0000
Manifest this update: Sun 20 Sep 2026 23:00:52 +0000
Manifest next update: Mon 21 Sep 2026 23:00:52 +0000
Files and hashes: 1: Bv170s3aV23AzQiOvm7mAZceEjQ.crl (hash: tlzBOzA31S+Whi/q0/Tbdjhi9KzHVDFkUyZDwtuv/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:09:11:c8:c2:ea:a4:41:ae:5d:ba:97:4d:aa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Validity
Not Before: Sep 20 23:00:52 2026 GMT
Not After : Sep 21 23:00:52 2026 GMT
Subject: CN=83434b6a51bb5e6dba309b9f22e0f1c468eacdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:8c:5a:ea:3e:1f:8c:61:84:f4:e1:44:65:
7c:1a:d3:e2:58:26:2f:b1:23:a6:94:51:6b:8b:db:
01:7c:dc:db:79:ce:4d:66:1c:00:1d:02:ab:c4:3c:
9a:d9:26:52:a3:3b:af:bf:15:70:10:38:f7:ee:94:
9f:e3:2f:44:8a:1f:3f:45:81:d2:4c:a9:a3:7f:66:
64:86:be:5d:7f:04:ae:52:bd:49:13:27:ad:7b:50:
c0:5f:1b:98:30:30:7b:7f:47:02:00:6d:80:78:58:
2d:fb:5e:d4:41:cc:0e:63:a8:6b:50:29:a6:f1:3a:
dd:c7:ac:18:9a:6c:57:02:61:55:8b:ec:1d:47:66:
45:25:4a:51:a0:4d:e6:4f:f7:ed:85:21:76:e3:76:
d4:37:6b:b2:bd:5c:53:81:3b:0a:f2:17:a1:03:6c:
d1:21:a6:08:f5:21:fb:2e:96:b6:34:5d:b7:e7:ac:
96:74:32:4a:e1:b3:a0:a0:13:5a:65:c1:5e:4f:1a:
9a:d4:0c:ac:86:1b:5d:94:42:23:5b:f1:2f:43:0d:
34:43:8d:e9:d4:5a:3d:41:e4:9e:9a:2d:74:96:58:
ce:5c:05:58:72:cc:ee:6e:4a:b7:95:f4:66:f9:b6:
8d:7b:5e:c4:8d:9e:e1:72:87:9f:fb:27:76:1a:ef:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:43:4B:6A:51:BB:5E:6D:BA:30:9B:9F:22:E0:F1:C4:68:EA:CD:C5
X509v3 Authority Key Identifier:
keyid:06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fe:e0:93:45:64:5a:93:66:60:98:8c:8f:ec:85:da:0b:b6:
f0:a9:e9:b7:b9:c7:71:45:1f:f4:46:dd:e4:29:ff:42:81:80:
90:01:6f:c7:1b:73:41:57:b8:3e:3d:a5:cb:e3:6b:76:d5:e8:
ed:1e:53:9c:4b:e2:3a:84:e3:61:87:6a:89:63:4b:0f:5b:85:
6a:86:4d:72:7a:77:cf:9b:33:23:bc:e8:1b:fe:47:10:1f:79:
cc:10:3f:00:3f:3c:0d:c0:0b:3b:10:4d:ea:92:83:15:9c:99:
87:f4:3a:ed:6b:50:9e:7a:2f:7f:91:d3:df:84:61:90:11:fc:
1a:21:15:1c:cb:f1:d8:06:03:52:64:ab:53:6f:76:61:4a:c3:
58:8d:93:df:be:c0:74:28:45:5b:f1:06:17:91:2f:3d:b6:81:
6c:84:fa:7a:c9:ce:b7:27:e7:e0:93:2f:27:2e:e5:62:c6:0f:
4c:fb:d6:36:00:b7:79:bf:6e:31:b4:4d:fb:71:f8:25:66:fe:
e8:91:c5:86:f4:8f:39:05:07:7f:84:03:d6:32:7b:49:e8:62:
db:3d:6a:71:bf:48:5e:5a:c9:c4:9d:35:a8:5f:70:8c:f0:a4:
47:21:95:33:c8:92:0b:de:25:d4:7c:97:f6:af:a4:b4:1f:11:
0e:ba:db:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDQkRyMLqpEGuXbqXTapxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZmQ3YmQyY2RkYTU3NmRjMGNkMDg4ZWJlNmVlNjAxOTcx
ZTEyMzQwHhcNMjYwOTIwMjMwMDUyWhcNMjYwOTIxMjMwMDUyWjAzMTEwLwYDVQQD
Eyg4MzQzNGI2YTUxYmI1ZTZkYmEzMDliOWYyMmUwZjFjNDY4ZWFjZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28iMWuo+H4xhhPThRGV8GtPiWCYv
sSOmlFFri9sBfNzbec5NZhwAHQKrxDya2SZSozuvvxVwEDj37pSf4y9Eih8/RYHS
TKmjf2Zkhr5dfwSuUr1JEyete1DAXxuYMDB7f0cCAG2AeFgt+17UQcwOY6hrUCmm
8Trdx6wYmmxXAmFVi+wdR2ZFJUpRoE3mT/fthSF243bUN2uyvVxTgTsK8hehA2zR
IaYI9SH7Lpa2NF2356yWdDJK4bOgoBNaZcFeTxqa1AyshhtdlEIjW/EvQw00Q43p
1Fo9QeSemi10lljOXAVYcszubkq3lfRm+baNe17EjZ7hcoef+yd2Gu9KNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINDS2pRu15tujCbnyLg8cRo6s3FMB8GA1UdIwQY
MBaAFAb9e9LN2ldtwM0Ijr5u5gGXHhI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnYxNzBzM2FWMjNBelFpT3ZtN21BWmNlRWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MjBkZjEtMzRjYS00ZTU3LWIzZTEt
YjhkNGJiYTcwMjFlLzEvQnYxNzBzM2FWMjNBelFpT3ZtN21BWmNlRWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82MjBkZjEtMzRjYS00ZTU3LWIzZTEtYjhkNGJiYTcwMjFl
LzEvQnYxNzBzM2FWMjNBelFpT3ZtN21BWmNlRWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev7gk0Vk
WpNmYJiMj+yF2gu28Knpt7nHcUUf9Ebd5Cn/QoGAkAFvxxtzQVe4Pj2ly+NrdtXo
7R5TnEviOoTjYYdqiWNLD1uFaoZNcnp3z5szI7zoG/5HEB95zBA/AD88DcALOxBN
6pKDFZyZh/Q67WtQnnovf5HT34RhkBH8GiEVHMvx2AYDUmSrU292YUrDWI2T377A
dChFW/EGF5EvPbaBbIT6esnOtyfn4JMvJy7lYsYPTPvWNgC3eb9uMbRN+3H4JWb+
6JHFhvSPOQUHf4QD1jJ7Sehi2z1qcb9IXlrJxJ01qF9wjPCkRyGVM8iSC94l1HyX
9q+ktB8RDrrbXw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:21:17 2026 by rpki-client