Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: y6UNhA0AxffnBMnwJIZGevRKM/Jm1IVh/QJiicIT7g4=
Subject key identifier: AF:D6:38:76:E7:0F:61:84:ED:3E:57:5F:42:9A:55:B0:D9:C2:DC:82
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 019FAC08F1899CDCE30DF88EEEEE27F40431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0EC5
Signing time: Wed 29 Jul 2026 04:01:34 +0000
Manifest this update: Wed 29 Jul 2026 04:01:34 +0000
Manifest next update: Thu 30 Jul 2026 04:01:34 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: ovQVKFNFcg84BInH1rE04KWsvV2PoWyRQaiht7mVRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:f1:89:9c:dc:e3:0d:f8:8e:ee:ee:27:f4:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Jul 29 04:01:34 2026 GMT
Not After : Jul 30 04:01:34 2026 GMT
Subject: CN=afd63876e70f6184ed3e575f429a55b0d9c2dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:16:35:93:c3:9e:fb:ea:32:30:fb:76:cc:
99:a2:bf:23:94:03:d1:41:b8:1a:fa:1b:cc:ce:20:
49:39:20:67:fe:63:5e:c0:d5:64:67:0f:bd:3e:25:
94:d8:02:25:22:e2:e5:c7:17:85:c8:21:c9:19:4e:
db:2e:45:89:ca:01:63:28:66:f3:b2:49:00:25:3c:
fa:76:4b:b2:d6:fe:90:14:32:3b:20:c0:25:a1:f6:
d1:26:23:56:f0:47:66:2d:27:48:eb:92:ab:7b:20:
7d:b3:8d:45:f1:cc:56:6b:c9:3e:77:93:db:9b:bb:
1d:02:a4:ee:10:92:36:50:89:ba:2a:23:e7:54:5a:
f4:6d:d8:0c:a6:5d:c3:2c:fe:32:ad:aa:e4:86:2b:
71:4f:55:0a:fc:f9:b4:c7:c4:88:f2:b8:09:30:8c:
73:b2:0c:f0:3d:50:ca:ca:14:9d:7b:7d:8e:56:c0:
89:5f:c4:f5:08:e9:65:61:fc:e7:cf:4c:6c:8a:dc:
c8:d5:6b:c0:b4:19:83:95:e7:15:bd:dc:30:c7:f4:
29:7e:ed:d8:96:2d:f2:53:6d:b3:a2:4d:d2:f4:86:
d1:02:89:d6:37:3b:34:7f:88:4b:3c:eb:6f:7f:6d:
e8:d6:8d:3c:dc:79:a3:a6:28:dc:5d:e3:37:96:8c:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:38:76:E7:0F:61:84:ED:3E:57:5F:42:9A:55:B0:D9:C2:DC:82
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:24:50:59:ae:f1:dd:86:fb:f5:2c:ef:59:de:9b:6d:b5:75:
68:ef:ef:ef:c7:ea:ca:b7:3c:3b:24:2e:e8:4d:20:25:98:b2:
4c:e4:63:5f:02:8a:06:0a:55:af:1a:de:48:5b:54:4d:aa:e1:
6b:6b:0c:df:2f:3d:d6:a3:48:25:2c:3e:35:2c:ce:f7:e0:15:
85:99:70:56:3e:b3:2e:1d:9d:69:a3:0e:80:55:92:b2:7a:c4:
e3:73:fa:43:c4:0b:28:b3:47:71:67:bb:0b:a4:5b:62:19:c6:
46:81:ba:16:73:72:e8:c6:c2:80:82:09:d2:28:1b:63:97:e8:
73:92:b5:9d:34:11:6c:93:f7:7f:88:a1:e9:ec:7b:eb:c9:0d:
02:c1:3e:e1:91:3e:4c:5a:21:44:04:05:73:e2:4a:e4:7d:f2:
36:8d:1d:3e:82:c9:81:1f:dd:9f:5d:4c:6c:e9:64:01:ce:c0:
5c:f5:2a:33:80:80:ce:66:2b:1b:3f:ae:50:07:4c:8e:4c:17:
10:57:24:05:38:db:d1:63:2e:6b:d1:60:f1:4a:7e:d7:31:90:
50:8d:ff:71:e3:1d:9a:a9:80:16:c2:3c:72:01:2f:c8:74:9e:
16:8d:3c:79:9c:b6:e6:bc:f4:e9:95:e2:f3:43:e0:31:c0:74:
54:f2:01:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:49 2026 by rpki-client