Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: Ha8gDvarQMKMaEH9/nh+JLMjimXxH0kz6vclY2QRgIo=
Subject key identifier: 7F:85:D0:56:42:33:A6:D4:B6:01:BB:34:5B:23:AB:A1:9B:E3:15:52
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 019CAD5A20C7AAAE3F103F9D73501C572CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0D38
Signing time: Mon 02 Mar 2026 07:01:30 +0000
Manifest this update: Mon 02 Mar 2026 07:01:30 +0000
Manifest next update: Tue 03 Mar 2026 07:01:30 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: SOKJB3y8yLIJRQDmx8Qk6c2quRNcNSom3ZLNQG0mCmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:20:c7:aa:ae:3f:10:3f:9d:73:50:1c:57:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Mar 2 07:01:30 2026 GMT
Not After : Mar 3 07:01:30 2026 GMT
Subject: CN=7f85d0564233a6d4b601bb345b23aba19be31552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:6e:6c:49:df:80:25:0a:ba:cb:a1:0c:3b:
9e:56:94:40:31:0d:c0:6b:ee:67:ad:9b:b9:1f:45:
2f:de:13:81:02:68:c9:7b:6c:1e:f1:7e:7b:29:cf:
37:6f:6d:86:ed:bf:cc:6b:0b:ad:65:d1:e9:8a:12:
34:78:ca:22:73:4d:3a:ad:31:b2:50:5e:53:09:e5:
99:c4:71:40:6d:01:c9:67:92:61:b1:b7:f5:26:a7:
e6:66:20:4a:1e:d0:41:2a:96:fb:62:61:4e:a8:67:
19:04:8d:61:a6:96:97:07:63:b6:f9:32:f3:2e:03:
e8:ae:5f:46:c5:59:58:9e:a1:ac:ad:3e:75:55:4f:
5e:49:a5:15:84:ed:90:5f:68:2c:54:51:1b:7e:25:
c6:31:55:28:3c:4c:cf:10:5c:86:f6:fa:15:85:59:
86:3c:85:59:6a:12:00:9b:3b:a8:bb:6d:7d:a2:a7:
f9:a6:2f:da:db:4a:66:ee:01:d8:9c:8f:be:1c:cf:
90:5a:fe:29:3a:33:a6:5c:fa:c8:c9:d7:76:11:41:
99:36:ca:ef:ab:d6:b8:0a:0d:3c:8e:f1:86:17:14:
de:54:42:ac:c0:e1:e0:01:b4:8c:4d:35:c9:aa:20:
38:04:18:dd:78:cc:bb:2e:72:ff:1f:f9:81:a8:8c:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:D0:56:42:33:A6:D4:B6:01:BB:34:5B:23:AB:A1:9B:E3:15:52
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:06:8d:b4:f2:54:e8:6c:56:9c:45:9a:98:68:2e:3e:d6:a5:
84:29:e2:d8:2b:d8:91:a5:b8:4b:f7:7a:ea:80:5a:91:2d:8d:
c8:1c:86:9c:18:6f:c5:16:2f:05:f7:65:f7:94:e6:57:c5:36:
08:b3:5f:7c:f1:00:56:f1:8a:ff:e5:37:dd:e9:12:82:6a:5a:
b7:9d:a7:89:db:98:58:2c:d9:9e:f2:36:41:13:10:bd:84:bc:
64:00:e1:0c:6e:4a:5d:96:d9:d3:1e:13:b1:de:07:37:fe:a5:
85:38:36:9b:f5:14:11:a4:da:90:0f:62:9f:72:95:cd:70:15:
cd:bb:90:38:69:58:6a:0a:6c:1f:7c:df:07:f6:db:6d:b8:31:
08:30:d1:17:4a:47:56:17:68:95:35:b0:ef:d9:a6:ac:70:26:
a1:31:2e:55:8c:b6:ce:9f:38:4a:97:ff:d0:3f:db:7a:2c:d7:
4e:92:1b:73:31:26:60:22:88:d9:ae:b4:c9:0a:9e:d6:06:5f:
24:c1:9f:60:4e:60:35:fb:97:9a:c0:9c:af:02:f4:1d:01:07:
28:0c:48:6c:11:bf:10:69:4e:74:e4:86:ad:7b:6d:4c:cd:d4:
a5:85:69:8e:39:bc:4c:62:b3:38:95:74:d2:7e:f3:47:24:c9:
eb:a2:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:44 2026 by rpki-client