Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier: nhTT/RPQUPyY6uj1ZVWXVM+p7mevXm6hN4Yv0/oWJb4=
Subject key identifier: 19:6E:CA:18:25:E0:48:EB:48:FC:67:BF:62:2D:10:21:99:98:F8:82
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 019D9AABDE8D2DF8D9A29E2DB273750BFB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number: 0D11
Signing time: Fri 17 Apr 2026 09:00:47 +0000
Manifest this update: Fri 17 Apr 2026 09:00:47 +0000
Manifest next update: Sat 18 Apr 2026 09:00:47 +0000
Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: oaO0b3Q599NqUR3UBbe9gxDtWXvJwcUI1fY1RtIkH4g=)
2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:de:8d:2d:f8:d9:a2:9e:2d:b2:73:75:0b:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Apr 17 09:00:47 2026 GMT
Not After : Apr 18 09:00:47 2026 GMT
Subject: CN=196eca1825e048eb48fc67bf622d10219998f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:7d:be:37:89:41:90:9b:5c:33:87:4f:10:
6e:ae:bb:42:03:77:3a:ae:2f:17:ea:b2:47:d5:37:
02:7e:fc:98:d0:78:bf:e7:59:45:42:74:11:fb:c8:
e0:c6:9f:5a:7a:28:a0:9d:1b:92:ec:50:51:20:fe:
d4:93:f1:ad:16:a0:49:2a:99:70:e6:c1:a1:a9:05:
3f:11:d2:66:00:dc:d6:eb:3d:3d:26:07:db:11:4f:
e8:2c:6f:db:06:ce:d6:f8:bc:11:01:d1:5c:d6:36:
0b:f4:21:ce:5b:0a:41:4f:d3:a0:60:83:c0:85:db:
94:50:29:ac:ef:05:ad:21:bc:be:5b:10:f6:1e:38:
39:25:b9:11:59:2f:fe:81:92:2d:b2:8b:73:10:85:
f6:c3:9d:b3:4b:09:da:53:a8:24:c2:ce:94:f8:43:
d5:7d:ce:2a:cc:2d:a0:43:34:19:c8:96:d6:eb:26:
36:51:cc:ee:3f:9b:73:ef:a0:8a:eb:59:5a:2a:d6:
d7:7d:be:fc:6a:b3:42:a6:38:2d:bf:b7:89:69:66:
a3:9d:09:85:f8:c4:c5:e6:39:21:68:70:1e:dc:8b:
02:88:1d:50:8a:f7:d0:bc:1e:a3:67:25:ff:bc:a7:
0b:4b:4c:d4:e6:b1:31:11:99:24:f8:61:16:d9:5d:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:CA:18:25:E0:48:EB:48:FC:67:BF:62:2D:10:21:99:98:F8:82
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:63:16:9b:e8:95:b5:64:76:96:99:e8:56:25:d1:45:09:61:
00:a9:af:39:f6:f9:e5:30:de:31:5f:b3:5a:1a:3e:30:a4:81:
cd:5c:67:61:8e:0a:5b:2b:31:98:d1:a6:33:74:32:cd:ad:cf:
8e:bb:ea:03:fe:27:54:b3:8e:fc:7b:36:3d:04:ac:d1:a1:e9:
ff:38:3b:18:22:a5:b6:a6:09:ad:3f:11:21:a0:70:36:64:9f:
2f:ae:97:b1:75:50:ee:95:a7:c1:fc:e5:ea:13:a0:49:c0:bc:
13:cd:76:bd:65:5e:e9:a1:6f:31:3b:06:8a:1f:53:65:3f:9b:
58:d8:62:12:6a:16:09:79:50:1d:71:53:13:04:83:0e:42:93:
76:62:b0:1b:27:64:b5:2b:18:27:0a:78:9f:47:59:b4:9f:f1:
8a:35:db:03:82:9c:f5:7f:f3:92:5c:20:f8:41:53:a2:ee:29:
38:a8:8c:40:12:1c:b2:6c:f4:0b:78:70:37:c0:23:4c:e8:c6:
e9:79:08:f2:1e:39:b7:7a:cd:6c:df:44:da:4f:d5:e8:c4:4f:
e2:6d:a1:4b:18:96:98:1c:5b:b0:c0:a6:c1:31:a5:7d:db:f9:
b9:5f:5f:15:25:b4:7c:19:c8:e9:9d:8b:e2:8a:8e:3d:b7:af:
16:ee:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:33 2026 by rpki-client