Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File: bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier: FmjM9uebMCD7IGX5alpX+d4FrLbsvnc4Oxrrna74pIc=
Subject key identifier: 31:16:A4:94:38:B9:B2:48:63:B5:3D:B8:E4:27:B8:3D:F0:CB:B1:E1
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer: /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial: 019CA9EB11F3842DF32B2354B46D0AC538AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number: 5D
Signing time: Sun 01 Mar 2026 15:01:20 +0000
Manifest this update: Sun 01 Mar 2026 15:01:20 +0000
Manifest next update: Mon 02 Mar 2026 15:01:20 +0000
Files and hashes: 1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: sj2pu6YwttX6mlwu4nSGcjm2GTSobsRzazDGtqEkOK4=)
2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:11:f3:84:2d:f3:2b:23:54:b4:6d:0a:c5:38:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Validity
Not Before: Mar 1 15:01:20 2026 GMT
Not After : Mar 2 15:01:20 2026 GMT
Subject: CN=3116a49438b9b24863b53db8e427b83df0cbb1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:ca:f6:c6:6a:0d:e7:89:e0:64:59:89:f8:
26:ef:ec:03:a8:a3:a0:b8:1f:73:2b:90:77:b3:e2:
b9:c9:ee:0e:e4:ac:72:53:9f:10:70:7d:6c:e5:01:
a6:ca:0a:83:2d:7f:25:af:9c:5a:de:0a:80:b3:6e:
f5:1e:80:28:5b:79:49:49:e3:35:85:10:de:e6:46:
e6:39:fa:25:50:a7:3d:b0:ee:89:59:0b:0c:46:33:
2e:69:53:ed:72:83:6d:df:4c:d8:99:e3:18:6a:75:
9a:57:49:cc:4a:50:24:c1:2d:da:42:eb:cc:53:46:
dd:78:55:9b:ee:5e:a2:ac:4a:7a:8c:3a:78:1f:8d:
04:d7:30:c3:40:07:7a:4f:4a:b0:56:8e:ed:c3:c5:
37:44:b3:62:29:58:da:1b:35:55:96:c0:e3:e6:a4:
35:78:f3:a5:99:3f:57:b6:d4:69:5d:0a:16:c7:61:
ee:88:66:ee:f9:6e:7a:f7:b5:95:85:86:15:ea:ce:
b5:20:5a:a8:21:f2:2b:d0:e2:7d:2e:a1:0f:10:40:
33:80:39:82:b3:5b:62:d4:32:83:93:f8:92:ea:fc:
6f:23:a9:54:0a:d6:d1:c4:c1:ce:d8:d1:a6:2a:72:
54:20:f4:b8:a0:dd:90:26:72:10:ba:d4:68:03:b5:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:A4:94:38:B9:B2:48:63:B5:3D:B8:E4:27:B8:3D:F0:CB:B1:E1
X509v3 Authority Key Identifier:
keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:c6:f9:0e:84:02:46:07:0d:7a:58:9f:c0:58:42:5f:d8:
16:a2:e7:a7:42:15:c2:68:81:d6:dd:13:3e:6f:fe:15:53:8c:
94:4a:4f:44:b1:fc:04:70:43:ae:26:20:3f:c2:bd:30:6c:85:
ce:2d:92:7d:13:76:09:ec:2b:78:49:74:b5:9e:9b:9c:9a:5e:
9b:2b:e8:18:00:b9:25:3f:59:ff:95:b1:fd:9b:c3:61:04:4b:
dd:83:81:32:c1:de:68:35:b1:69:3b:59:06:29:e3:f5:3f:c4:
0f:99:f2:2d:75:69:0d:98:ef:7d:36:93:91:67:22:77:2c:63:
7e:8e:2e:e9:83:03:89:b4:20:e3:4b:1e:ff:30:bf:a2:fe:78:
fa:5f:eb:5e:0e:d1:d1:8f:b4:b8:91:98:9b:27:c6:9e:6e:89:
37:e3:d0:25:b3:3c:a0:f0:90:1d:a7:08:33:2e:51:69:cb:9c:
be:53:9b:09:2c:c9:b5:ea:6a:21:d0:b6:83:77:69:44:a3:fc:
b0:02:3e:0d:ec:bc:96:0d:b9:cc:e4:5a:7e:46:3a:53:a5:a0:
59:5f:d4:2d:66:4e:96:62:91:a4:85:97:bd:c5:f9:61:04:9f:
04:a7:7c:1d:8f:85:e7:7b:ae:92:6e:f1:a4:a1:69:7c:db:2f:
a7:e6:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:57 2026 by rpki-client