Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File: bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier: 0erBhetlsD52SQptSAD9EL0ks1tY6GnZaJjhPrKoD1U=
Subject key identifier: 8B:9F:FD:7A:19:64:53:B4:CA:91:65:85:BA:7C:32:31:10:A5:7B:3A
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer: /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial: 019FA71880F65929A27DD4B09FFF9DC3D188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number: 0280
Signing time: Tue 28 Jul 2026 05:00:28 +0000
Manifest this update: Tue 28 Jul 2026 05:00:28 +0000
Manifest next update: Wed 29 Jul 2026 05:00:28 +0000
Files and hashes: 1: IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (hash: MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=)
2: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: B/TPu8Du2RkWSXwfGzedd0FUyUSx22YWKmSkkVlMKqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:80:f6:59:29:a2:7d:d4:b0:9f:ff:9d:c3:d1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Validity
Not Before: Jul 28 05:00:28 2026 GMT
Not After : Jul 29 05:00:28 2026 GMT
Subject: CN=8b9ffd7a196453b4ca916585ba7c323110a57b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:63:44:f9:97:2f:a7:d9:35:f9:12:8e:15:
ce:71:58:1a:44:d4:7b:b7:e4:48:81:88:02:59:1c:
d7:2a:a6:fb:42:b6:ca:b0:40:60:b9:47:87:55:f7:
da:41:09:fd:5e:dc:33:08:92:ad:e7:08:6c:4d:81:
3a:6d:a2:9b:0f:f0:a7:a7:51:f7:ed:47:f8:c6:5e:
2b:fc:46:83:d2:03:d6:25:55:16:ea:24:40:8f:de:
a6:f6:c1:fb:9a:f2:3c:20:11:a8:74:8c:77:36:54:
15:36:69:ce:be:f2:4a:0c:f9:93:ce:85:fc:fa:55:
70:5d:78:c6:13:c1:22:ce:80:28:03:f8:53:8a:87:
75:b9:7a:3f:c7:9a:e6:4b:8c:04:a3:78:14:05:04:
9d:23:7b:99:d0:18:05:f2:85:39:9f:e2:cd:47:d1:
8c:13:30:3b:61:da:99:19:f9:16:6b:80:1d:c9:a6:
14:1a:6b:c9:10:b8:ec:90:27:8f:0c:e8:7c:ed:04:
b3:84:68:09:e0:31:86:12:40:8b:2b:87:ca:df:80:
46:d1:d6:72:93:1d:d2:b9:0f:a2:45:0b:ff:a2:ef:
57:cb:c4:57:f1:73:5a:ba:d4:94:89:f2:7d:7d:c0:
fc:11:0b:88:16:32:6b:01:df:f7:ff:8c:04:73:63:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:FD:7A:19:64:53:B4:CA:91:65:85:BA:7C:32:31:10:A5:7B:3A
X509v3 Authority Key Identifier:
keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:90:a5:33:eb:79:4f:c3:04:49:93:7b:2f:58:e3:c9:d4:d0:
89:7d:cc:34:9b:8f:e4:64:b6:9d:1d:44:90:d4:e3:8c:6a:cf:
82:0a:3f:c9:96:6d:01:72:35:39:2d:62:e1:15:fa:79:c6:5f:
bf:7c:66:f4:cf:7d:a5:0c:1a:8e:7a:a6:75:a8:60:a2:ac:a0:
52:06:0c:ab:33:ca:77:64:45:55:0b:0e:6f:f3:6a:9a:17:cf:
72:ca:52:4d:96:a8:b8:a8:89:ba:f8:5e:3e:d6:45:4a:b2:cc:
3d:44:f8:12:6c:a8:96:09:f6:44:78:6e:99:e5:e7:b4:64:76:
91:15:4c:23:c5:22:7e:56:cc:b0:c9:1e:31:9b:0d:3f:a8:52:
67:e8:ad:2e:e1:e5:5f:7c:51:33:82:0a:49:46:cf:e3:4d:26:
17:eb:54:fb:68:3d:1a:3e:0a:21:23:75:93:b1:e4:be:6c:65:
45:2c:7c:9c:cf:14:7e:a2:97:30:aa:0e:bb:9c:52:d4:98:b2:
d4:65:69:98:06:7c:8e:ea:ee:21:51:94:fe:32:92:3a:52:36:
c8:90:89:d8:cf:3d:35:c0:00:a5:72:c7:b7:fc:f6:b7:68:f7:
04:02:cb:8a:99:ed:2c:8a:26:51:d6:5d:76:9d:b5:45:8c:3e:
f9:6f:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:34 2026 by rpki-client