Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: Xx3A+7HagqeYNuXvB8Mm4k/yJCdHGegm8ybNipslztY=
Subject key identifier: 8E:01:3A:F0:E5:64:F7:DB:29:76:E0:B3:AB:38:B5:50:29:CB:90:23
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 01A1C40B2C79B0574B933C481DE37D55F654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 1AE7
Signing time: Tue 10 Nov 2026 06:00:28 +0000
Manifest this update: Tue 10 Nov 2026 06:00:28 +0000
Manifest next update: Wed 11 Nov 2026 06:00:28 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: 4ViCyi5h7CLtNjR9dN4/Lalk3JbcvpNBnMyj/f0Agho=)
2: sA4kl7o5kbctohYhMH3tb8jEvIM.roa (hash: yvgE8Ar+rDnZHHbM7lyidYb1LqwSWRPZgw35u9TtMhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:0b:2c:79:b0:57:4b:93:3c:48:1d:e3:7d:55:f6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Nov 10 06:00:28 2026 GMT
Not After : Nov 11 06:00:28 2026 GMT
Subject: CN=8e013af0e564f7db2976e0b3ab38b55029cb9023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:6a:96:5c:43:09:50:6b:2c:91:db:c8:1a:
27:5e:25:70:79:ba:46:a5:ff:0b:8b:aa:b4:88:e2:
23:2d:5e:6e:c2:4c:d7:93:9e:e9:e5:2b:5d:8f:56:
35:2d:31:dd:29:41:88:3f:0a:8c:3d:fc:ef:46:6d:
c0:61:db:8f:1d:38:cd:cf:23:b9:53:6a:bb:cb:df:
4c:6b:f3:43:95:b6:e2:ed:e3:cd:ca:e0:23:cc:ef:
ac:1e:86:89:3b:46:b4:0c:43:2e:d7:40:59:27:9a:
2e:a1:48:61:33:15:c4:20:07:af:a3:fd:b3:0b:33:
e9:9b:69:47:1d:81:72:2a:82:1c:03:0f:a7:90:13:
9e:31:82:bb:14:ff:f3:58:ad:15:f0:87:85:e7:43:
f3:66:f0:ec:63:13:5b:d4:ec:83:32:2a:7c:97:9d:
30:01:e6:b7:48:92:90:e7:21:6f:21:d8:c8:9f:a4:
85:87:84:58:66:e6:05:4c:2f:93:f8:e0:03:b6:99:
46:af:78:55:a5:7e:00:e5:bf:b7:3a:4d:2f:6a:b0:
3a:2a:58:3d:1f:d9:6d:96:02:d3:d6:b8:31:c8:ab:
42:b7:c0:19:e5:c4:58:bd:78:aa:a9:84:09:aa:22:
51:ec:81:50:b6:e2:d5:48:85:89:cd:b9:30:f1:92:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:3A:F0:E5:64:F7:DB:29:76:E0:B3:AB:38:B5:50:29:CB:90:23
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:52:35:bb:e4:23:e1:0b:49:c7:b2:cf:9b:36:9a:aa:a8:38:
90:8d:cd:b1:d9:69:ab:fe:10:5b:68:db:e0:fc:51:ba:f4:f5:
15:5d:63:35:ee:f7:5c:cc:3c:2a:af:46:04:6e:ab:6b:3b:6c:
fe:86:b2:d5:bf:df:ce:24:74:eb:1f:71:5e:3f:a7:3c:c6:35:
c9:1f:40:d6:ae:93:33:3a:9a:e9:71:2f:ab:f9:18:61:23:d5:
01:b6:c6:11:e9:79:58:76:ec:3a:a2:68:45:d6:30:b4:37:f1:
1f:4b:9f:22:8f:3c:6b:8b:e5:2b:41:21:6d:42:10:a7:0d:b0:
65:d2:c7:3d:6c:25:cd:e1:19:74:3b:5c:23:05:49:d1:a7:47:
2b:1d:84:51:61:36:78:7f:f2:4d:47:2e:6a:68:5b:fd:ec:23:
74:06:4e:7a:ee:26:b6:4f:97:bc:76:b7:db:80:9b:58:b3:a6:
53:98:a1:d2:c9:d9:96:af:bb:5d:a7:b0:fa:7b:a9:d8:54:c4:
cd:50:96:79:55:83:6e:fd:ba:27:de:d5:f1:75:19:07:7c:12:
bd:bc:f1:9d:6e:df:49:08:56:62:1f:d4:8e:d6:59:8b:5d:fb:
d7:e5:5d:e8:fa:79:86:79:fe:3e:02:f2:65:28:de:67:69:bd:
b6:cb:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:14:09 2026 by rpki-client