Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
File: Bv170s3aV23AzQiOvm7mAZceEjQ.mft (raw, json)
Hash identifier: Ow+plJ4eUqTwKr6f6dremevD94D0E2lUIXs7oLfAO5o=
Subject key identifier: 00:FC:3A:B2:8D:C5:D6:26:AD:8E:32:F2:ED:7B:44:B9:8D:B6:46:3D
Authority key identifier: 06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
Certificate issuer: /CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Certificate serial: 01A1C3D487C522B9F6053FD80D50DCFC51EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
Manifest number: 12C0
Signing time: Tue 10 Nov 2026 05:00:47 +0000
Manifest this update: Tue 10 Nov 2026 05:00:47 +0000
Manifest next update: Wed 11 Nov 2026 05:00:47 +0000
Files and hashes: 1: Bv170s3aV23AzQiOvm7mAZceEjQ.crl (hash: SkC38GtZXiru4MgeCYQiWs/ph+KAzhCcT5epIuarYR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:d4:87:c5:22:b9:f6:05:3f:d8:0d:50:dc:fc:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Validity
Not Before: Nov 10 05:00:47 2026 GMT
Not After : Nov 11 05:00:47 2026 GMT
Subject: CN=00fc3ab28dc5d626ad8e32f2ed7b44b98db6463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:9f:a4:25:14:d9:6c:8d:b8:10:33:cd:02:
80:ee:f5:3e:ea:e7:b9:6a:7a:e7:78:01:c7:3f:cf:
34:69:59:c5:ca:0d:25:df:5d:6c:74:6f:b2:5e:40:
ff:cd:c4:ba:92:a0:44:8f:fe:44:7f:13:76:04:cd:
33:11:09:b8:67:f4:1f:f6:78:7b:b5:0c:80:1a:b4:
b6:44:27:81:5d:37:ad:a7:2d:3c:c9:7d:0f:ed:ce:
ba:be:ae:bc:d7:b7:b6:4c:82:a2:5e:42:24:c2:8b:
a2:0e:bd:85:e0:b2:80:1e:46:48:2f:3e:cd:a5:bb:
ef:95:c8:63:9a:7d:c5:1b:58:b5:0b:f6:be:99:d2:
87:7c:d6:4b:60:b8:1f:61:11:3e:96:fe:14:49:64:
81:88:2f:52:1e:b8:6c:c4:01:51:a1:00:bf:ca:2b:
fa:e6:fb:4c:8a:41:92:e6:a3:ae:28:d7:b5:a7:b5:
58:0a:ec:66:d9:eb:35:be:f9:fb:42:3f:48:bc:ab:
dc:17:6a:2d:9c:59:81:61:c0:41:34:c6:d8:29:b7:
c4:71:94:34:53:c3:fb:99:41:b2:17:a2:51:90:df:
10:97:66:aa:55:59:db:ed:b8:77:25:f8:49:cc:fd:
92:cc:29:d7:9b:1d:38:12:f1:d1:b7:b6:79:25:f2:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FC:3A:B2:8D:C5:D6:26:AD:8E:32:F2:ED:7B:44:B9:8D:B6:46:3D
X509v3 Authority Key Identifier:
keyid:06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ad:9f:1b:03:22:e9:a8:5d:46:d6:0a:ea:7a:a0:30:f0:26:
42:1d:96:ae:1d:a2:29:4b:f6:6f:7c:cc:a1:0a:49:73:f4:a6:
cf:7b:22:e6:af:4a:5c:cc:c2:19:ac:af:c5:6a:cb:7b:8e:c3:
65:52:f7:3d:b3:39:1e:f9:3e:22:53:b1:11:49:e1:59:4f:36:
da:49:1e:db:50:56:21:3b:c8:43:0b:f2:31:71:e7:b4:da:52:
85:74:3c:6a:d6:3c:d1:64:2a:c2:7b:91:5a:f9:e9:60:1c:f6:
c3:42:28:ed:ff:2c:a5:69:ba:2a:4e:cc:77:39:40:4b:28:80:
3d:33:31:c6:c6:0a:7e:41:a4:dd:91:24:61:2a:f0:1c:37:3a:
39:82:90:5f:ff:86:b9:6a:7f:66:cd:36:af:e5:88:9a:e5:98:
1c:7f:a6:2b:ce:42:ce:3c:8b:e5:e0:32:e7:7b:5c:8e:b4:b3:
04:fd:f0:bb:80:36:87:f7:68:d9:ee:38:78:91:eb:ea:68:d0:
37:93:f1:a7:59:9f:67:b0:df:c3:f8:b3:8f:82:ca:75:cc:38:
71:57:51:14:d1:8d:2b:1b:5a:5c:b0:70:7e:70:d7:d6:1e:33:
29:d5:e0:26:d3:56:73:d9:bf:c6:b0:e7:11:6d:73:23:d8:62:
54:8d:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:10:42 2026 by rpki-client