Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier: ijpca/1K1QUVma53s8JJQ5RQRMk4EeA+zvhgQruVTr0=
Subject key identifier: 39:4C:7F:2B:63:26:12:31:B0:61:47:63:35:FF:8C:76:68:02:AA:40
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 019EBE7F437A3F38AF03CD28535478770CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number: 088D
Signing time: Sat 13 Jun 2026 01:01:11 +0000
Manifest this update: Sat 13 Jun 2026 01:01:11 +0000
Manifest next update: Sun 14 Jun 2026 01:01:11 +0000
Files and hashes: 1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: idVcJ0EjbdHHkvhA13RK7orlgL+d2J6vZoxShi7S+6I=)
2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:43:7a:3f:38:af:03:cd:28:53:54:78:77:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: Jun 13 01:01:11 2026 GMT
Not After : Jun 14 01:01:11 2026 GMT
Subject: CN=394c7f2b63261231b061476335ff8c766802aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:11:92:c0:7d:ef:ce:7a:02:be:5b:21:51:
94:3f:89:7c:37:b7:d3:7a:c9:cd:5f:38:20:d3:9f:
cc:2c:46:35:6d:5b:bd:54:a6:af:1a:ea:cc:8e:69:
2d:f5:17:a6:8e:e1:9f:4b:58:bd:90:a0:21:ad:84:
76:a5:90:9a:63:af:f4:51:cd:f1:eb:9b:16:b1:eb:
0a:39:17:c5:fe:c3:84:b6:82:d5:41:0f:c6:86:f2:
2e:d0:4c:a0:77:d1:0f:4c:79:06:d7:0e:73:9d:20:
40:e7:f5:29:38:ce:3c:51:40:09:09:56:d8:cb:65:
c5:8c:a4:3c:73:46:ce:c4:b9:a7:a1:08:bf:31:69:
8c:e1:7e:c0:bf:cf:9c:f8:9b:bb:fe:c0:df:97:c0:
eb:94:02:75:16:0b:b0:7c:8f:db:85:a3:0c:70:87:
cc:41:14:9d:92:e8:d3:c2:a8:11:56:cd:8a:ea:87:
60:1f:d7:c7:a1:92:5a:1f:4a:19:39:cb:e3:f1:fe:
ab:52:61:0c:19:97:fa:d7:d8:8b:cd:31:21:9a:9e:
8b:66:82:ec:87:de:9f:28:f5:09:f7:c1:7c:da:e5:
87:c9:a4:93:2f:e2:23:f3:81:1d:cb:0d:62:fd:e7:
29:b6:5e:3a:78:8e:38:a1:46:41:e4:d4:16:1d:0e:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4C:7F:2B:63:26:12:31:B0:61:47:63:35:FF:8C:76:68:02:AA:40
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3b:bd:eb:88:ae:d9:9a:ef:49:cf:68:b2:7d:ef:80:b4:d4:
7a:16:ed:38:d5:3a:d6:99:0a:86:77:0f:1f:c8:e6:3a:b5:f0:
6e:58:d3:5f:1f:be:e7:8d:9e:c4:3a:28:c3:37:84:98:d1:91:
75:ed:0e:61:e7:af:36:0b:ff:0a:d8:a6:83:70:79:5c:2c:b0:
13:56:82:50:3b:60:60:44:09:62:2e:e5:20:60:7f:ff:a6:a5:
28:89:6c:e0:19:1a:31:b8:7e:59:86:15:fc:20:47:50:31:a9:
5c:00:e0:b9:6c:76:66:8c:00:2f:af:3e:7d:14:7a:6c:f0:0d:
c3:f1:0d:fe:ca:85:61:ab:66:e1:ea:eb:29:f8:a4:4c:f4:da:
e4:04:80:3e:8f:90:c8:b2:01:bc:51:ac:c1:4c:23:7f:da:cf:
44:b7:1a:76:4e:db:4d:a8:10:ad:b5:a9:9d:d4:73:a2:2e:51:
9d:a9:c9:62:30:e2:27:bc:39:96:f4:7f:55:1d:46:3f:ff:c4:
ad:c5:de:8c:17:ff:61:7b:7e:e5:ce:22:27:61:fa:86:c0:d0:
d8:13:8b:a6:d9:51:fd:27:c4:c3:18:c6:de:df:c5:b2:53:9f:
31:67:be:65:2e:29:81:b2:68:0b:56:68:62:7d:17:53:6d:56:
1a:84:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:32 2026 by rpki-client