Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier: De6T0/a26+fsOFuLhh1M7L5ui3mS610lRBua/PFI01I=
Subject key identifier: 90:D3:C5:57:3B:2A:E4:B5:58:6E:3D:97:EA:5E:AD:CE:EB:D8:C6:77
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 019CAB3430259783A153F44F3F9ADD5D4B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number: 0C95
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: L25/M2yshuacLT6AXFA9j2nMWm3LmekGwNXb7IPPZhg=)
2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:30:25:97:83:a1:53:f4:4f:3f:9a:dd:5d:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=90d3c5573b2ae4b5586e3d97ea5eadceebd8c677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:c3:f1:25:6d:26:f9:a5:d6:59:59:f5:ba:
c6:f5:66:32:66:08:d4:31:03:80:fb:3c:aa:3a:b2:
a3:cb:38:1e:d7:4b:e3:e3:f8:80:ec:58:cc:ef:dd:
ef:e4:df:73:e5:bf:7f:33:a3:fb:dc:7a:57:12:d3:
53:4f:2a:ec:a8:b1:46:10:11:e9:fa:e6:8f:57:b8:
1c:c2:97:5d:1e:36:0e:de:4a:74:16:f5:94:2b:46:
05:8a:d1:de:84:ee:52:07:b5:4e:dd:64:f5:67:c2:
76:09:43:69:73:03:3a:78:39:1c:14:8e:88:b9:4f:
98:fd:16:57:58:50:6f:8f:f1:11:0f:71:93:85:8c:
62:4a:da:c9:37:a9:02:e2:0c:ef:49:a7:2d:73:c0:
4c:e6:84:e4:7d:7a:59:a3:54:e1:69:06:63:f0:6b:
6d:19:82:aa:f4:7d:8a:c0:f3:a3:2b:46:99:b0:96:
1b:8f:5d:21:3a:35:23:38:90:c6:14:e4:0f:64:88:
4a:c8:44:8f:b4:09:aa:bd:58:e0:e3:85:fe:94:33:
72:2f:d8:b1:5e:78:91:a7:f2:27:29:b2:82:eb:e6:
70:86:2e:98:07:08:14:a5:9f:e2:25:0a:d5:1b:52:
a6:3d:f1:c6:b8:79:74:2b:ab:59:f6:ff:17:58:58:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:C5:57:3B:2A:E4:B5:58:6E:3D:97:EA:5E:AD:CE:EB:D8:C6:77
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:f5:8f:85:1a:13:da:a2:ea:db:db:05:28:e9:4e:83:bd:
47:f6:80:ec:f6:de:22:5b:0d:c0:c3:1f:ac:87:d7:6d:1d:76:
c2:8f:7f:22:91:09:33:90:5e:9b:a0:6c:b6:23:51:84:6a:57:
7b:cd:f5:ed:2c:99:ab:96:8e:76:33:f4:60:a5:4e:3f:c6:91:
97:41:a3:97:e7:97:ad:4f:3c:d9:bb:e5:c5:89:44:d5:0f:7a:
45:c0:ae:fe:b2:88:81:1e:64:16:a7:ac:c1:99:a0:7a:b7:cc:
32:78:86:24:71:de:37:8a:8b:c1:e0:60:3e:97:d4:f2:14:05:
41:d0:1e:bd:bc:29:be:10:4d:c4:ba:9b:34:2a:b5:f5:b9:20:
fd:35:fe:0e:a4:e9:f1:eb:c0:76:27:c7:db:67:be:11:6b:4c:
dd:86:78:4f:68:2f:fd:97:92:5e:91:95:41:68:f1:a6:97:49:
8c:34:f0:77:b7:3c:c6:c3:58:52:f7:3c:45:3b:4d:cd:d1:f1:
90:29:38:c3:1d:75:33:29:2f:5c:20:29:dc:c6:86:3b:bb:04:
68:4e:a2:5c:dd:af:84:1a:5e:c4:50:77:ba:50:3d:4c:7f:d5:
4e:5d:1e:fc:63:b7:da:1b:5f:ad:15:a2:ac:32:df:32:1b:e4:
6c:30:c6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:23 2026 by rpki-client