Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: qJEiepd1GiWLCyuExWE5THoOpxyG7leZ756WRrlObKM=
Subject key identifier: 14:A6:01:F6:8B:32:CF:1E:32:64:B8:B0:B0:FF:CF:C3:AD:DC:09:2F
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 019FA93DFBFB4BB355EAA93B590EB54F69C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 15:00:39 +0000
Manifest this update: Tue 28 Jul 2026 15:00:39 +0000
Manifest next update: Wed 29 Jul 2026 15:00:39 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: wahMeIXOcDijU0UApbFeXB5lvPDGljZIkN8j3uzWxEA=)
2: sA4kl7o5kbctohYhMH3tb8jEvIM.roa (hash: yvgE8Ar+rDnZHHbM7lyidYb1LqwSWRPZgw35u9TtMhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:fb:fb:4b:b3:55:ea:a9:3b:59:0e:b5:4f:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Jul 28 15:00:39 2026 GMT
Not After : Jul 29 15:00:39 2026 GMT
Subject: CN=14a601f68b32cf1e3264b8b0b0ffcfc3addc092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:19:00:76:bb:5a:a7:50:8f:d6:95:eb:aa:
39:7f:5c:ea:76:da:9f:75:82:7c:c1:6e:51:6c:9a:
c6:b2:b9:43:06:88:31:d4:3d:1c:85:3b:1d:86:1c:
49:ab:a1:b6:2f:59:8a:07:ea:1e:4e:f7:d0:69:15:
d2:2f:49:db:5f:24:82:b6:a9:32:d9:b4:9c:74:46:
87:22:81:5c:81:8e:c3:c2:fc:bd:75:00:f0:ff:b3:
31:80:07:4a:ee:be:56:c1:07:18:ee:6e:a9:91:d4:
eb:d7:2d:c0:77:51:46:8a:c8:56:d9:38:5a:03:3a:
ab:6a:e5:d8:03:9e:13:a9:28:a4:f7:91:74:4c:3d:
2d:62:3b:4d:4a:50:a4:80:0f:11:78:8e:8b:db:b1:
bc:ce:18:5e:64:00:e0:2b:37:98:1f:f5:7f:25:25:
56:1f:b1:28:df:3a:cf:1e:88:4a:ee:ea:b0:66:aa:
d2:82:d8:5e:70:57:2a:8e:09:ab:43:40:ed:4b:e3:
aa:cb:9f:e1:f5:13:95:e6:ab:97:71:e2:c4:ad:5d:
40:75:4c:aa:84:04:af:df:6e:ba:0c:81:18:b2:4f:
b8:9a:24:65:e5:1a:a4:78:e7:21:04:cc:9c:10:0b:
d4:26:0c:85:87:99:73:4b:a7:48:62:74:24:0d:b5:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:01:F6:8B:32:CF:1E:32:64:B8:B0:B0:FF:CF:C3:AD:DC:09:2F
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c0:52:a0:ce:c5:76:0a:bc:bb:28:ba:88:f2:cd:cd:78:ae:
f3:db:02:6b:e1:0f:4d:4b:e8:23:d7:00:17:a7:06:e0:8a:f6:
89:c1:fc:78:69:a9:70:ab:29:74:3b:09:d2:de:ad:95:c4:60:
37:8a:5a:5a:71:06:a4:10:cd:b9:ad:eb:28:68:48:f1:1c:00:
e1:ea:0f:41:fa:93:27:67:71:2e:5b:90:d4:0e:6e:93:73:7b:
36:59:c1:e9:c2:f8:50:9e:ff:43:25:f1:7d:5f:c2:fd:3e:8e:
90:e7:b8:69:98:ba:82:49:ff:f3:9e:e8:03:9f:df:f9:4a:f3:
b0:7e:b8:be:ba:1a:81:3d:a1:a0:57:d2:4a:17:f7:0d:c1:e1:
24:2b:01:0e:97:d5:1e:29:8b:07:b3:2b:fb:da:0e:c5:42:3c:
b6:7b:9b:e6:64:78:c2:54:7e:7b:bc:5f:ae:29:76:57:a4:22:
11:5e:dd:2d:1b:a3:28:eb:53:b7:81:ab:20:dd:1a:79:1c:73:
62:d6:d4:81:89:f4:49:0d:cc:5a:22:14:03:0a:56:b2:8d:27:
c1:d7:79:b3:7f:b1:d6:c3:45:59:09:2f:67:7c:f6:e6:8f:8f:
95:d3:66:56:78:03:c8:38:dc:64:92:80:77:96:78:ca:52:e9:
38:83:ff:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPfv7S7NV6qk7WQ61T2nAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTNjNDMzZjZjMjI1MDE5ZDljYjVhNDMzMDAxMmY0Yzc3
YTFmM2UwHhcNMjYwNzI4MTUwMDM5WhcNMjYwNzI5MTUwMDM5WjAzMTEwLwYDVQQD
EygxNGE2MDFmNjhiMzJjZjFlMzI2NGI4YjBiMGZmY2ZjM2FkZGMwOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuigZAHa7WqdQj9aV66o5f1zqdtqf
dYJ8wW5RbJrGsrlDBogx1D0chTsdhhxJq6G2L1mKB+oeTvfQaRXSL0nbXySCtqky
2bScdEaHIoFcgY7Dwvy9dQDw/7MxgAdK7r5WwQcY7m6pkdTr1y3Ad1FGishW2Tha
AzqrauXYA54TqSik95F0TD0tYjtNSlCkgA8ReI6L27G8zhheZADgKzeYH/V/JSVW
H7Eo3zrPHohK7uqwZqrSgthecFcqjgmrQ0DtS+Oqy5/h9ROV5quXceLErV1AdUyq
hASv3266DIEYsk+4miRl5RqkeOchBMycEAvUJgyFh5lzS6dIYnQkDbUnywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSmAfaLMs8eMmS4sLD/z8Ot3AkvMB8GA1UdIwQY
MBaAFAVTxDP2wiUBnZy1pDMAEvTHeh8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEt
MTgyNTEyZjhiY2RlLzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEtMTgyNTEyZjhiY2Rl
LzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsBSoM7F
dgq8uyi6iPLNzXiu89sCa+EPTUvoI9cAF6cG4Ir2icH8eGmpcKspdDsJ0t6tlcRg
N4paWnEGpBDNua3rKGhI8RwA4eoPQfqTJ2dxLluQ1A5uk3N7NlnB6cL4UJ7/QyXx
fV/C/T6OkOe4aZi6gkn/857oA5/f+UrzsH64vroagT2hoFfSShf3DcHhJCsBDpfV
HimLB7Mr+9oOxUI8tnub5mR4wlR+e7xfril2V6QiEV7dLRujKOtTt4GrIN0aeRxz
YtbUgYn0SQ3MWiIUAwpWso0nwdd5s3+x1sNFWQkvZ3z25o+PldNmVngDyDjcZJKA
d5Z4ylLpOIP/MQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:37 2026 by rpki-client