Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: cnSUfrcPDdh+wiQck4JgHcLGFmpNu9558uuhRWFZHMY=
Subject key identifier: 2E:F5:26:9F:EC:06:A0:36:62:68:40:49:1A:6D:7F:49:A9:09:56:48
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 019D98F44423202AFCBAE3528DC85A6CB201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0DB2
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: 3r4rTml0FcatQbv4QIWbVK7HC5+NvCpwtiwi898nezg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:44:23:20:2a:fc:ba:e3:52:8d:c8:5a:6c:b2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=2ef5269fec06a036626840491a6d7f49a9095648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:44:c9:0c:78:ca:b6:cb:f5:12:4f:15:0f:
27:5a:ee:9d:73:c7:5e:21:53:64:2e:d7:ba:63:27:
ff:9e:9e:11:e6:96:d2:20:ac:b8:c3:56:23:26:e9:
ac:e3:f4:de:4e:b9:b4:86:52:25:31:0b:97:c0:f4:
23:98:e2:3f:2a:5f:49:c5:5e:68:b8:80:ac:6f:bc:
db:44:84:98:c9:dc:45:66:ef:f9:b9:f8:76:42:60:
bc:c1:68:f5:df:57:b3:41:1c:45:2b:fa:b1:d7:82:
ec:9a:c9:ff:b6:84:73:5a:57:24:f0:1c:f3:1b:11:
ce:6a:36:9e:c2:0b:8f:17:a5:ec:b8:a5:3c:29:f3:
e0:74:1a:cd:eb:e4:c2:c7:22:38:0a:88:48:e6:d7:
c8:8c:27:e8:cb:30:0c:cd:86:f1:77:00:d3:29:4a:
ae:96:97:f9:b6:c4:d9:5a:b2:4d:8b:d8:30:3d:d4:
b0:a7:36:b4:e6:d9:13:18:0c:87:5e:57:be:d8:d6:
5f:b9:ef:46:e9:47:8f:43:86:81:76:57:ee:1f:12:
e3:87:04:01:a1:7b:d5:81:c0:f4:cd:97:9f:34:5d:
80:2b:66:ad:a4:15:08:9c:88:10:c1:a0:91:11:cb:
ff:3a:eb:26:b3:57:5b:f5:82:5e:cb:fb:ef:25:df:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F5:26:9F:EC:06:A0:36:62:68:40:49:1A:6D:7F:49:A9:09:56:48
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f5:b4:49:6c:78:d2:d0:71:57:2d:10:fc:16:0b:97:08:f5:
c4:4f:8c:fe:0e:a5:9b:47:a3:7a:02:21:24:bd:af:ae:d1:a5:
6a:8f:b0:e2:4a:c0:8a:3d:7e:de:f0:3a:68:cc:13:ce:1d:27:
85:00:de:01:e9:4b:22:10:2e:84:cb:32:44:81:11:a2:62:96:
96:41:b6:72:b3:9b:96:47:45:0b:e8:13:df:83:f1:e3:bd:c8:
a0:2a:ea:05:de:ad:6c:58:da:45:4f:e4:99:7c:75:9a:92:92:
43:3d:3e:a6:bf:35:cc:b7:b0:2d:f0:2c:48:30:75:37:80:ac:
85:45:26:6c:02:cb:cb:ee:83:bc:61:8f:c2:cf:33:00:bf:59:
89:e4:87:16:0f:f5:03:5e:13:e8:54:68:61:79:b7:36:cf:c0:
7e:0b:6e:64:61:4d:27:53:27:c4:f3:1b:80:86:57:03:c7:74:
04:95:d4:77:9d:93:92:3b:eb:75:9e:e1:7d:17:87:32:97:cd:
61:4d:27:1d:84:bb:1d:40:61:e9:ac:6b:70:14:2a:b4:50:bd:
ad:51:b6:30:63:81:72:a3:51:f0:9e:df:2f:23:13:ae:2f:30:
c8:83:be:67:ac:46:3f:a2:ff:98:ad:e0:d4:71:13:3e:d6:bd:
c6:85:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:56 2026 by rpki-client