Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: L2XaWmBjJ4ERm7owp5G7v+0sd5MwIBG8CRD7oaRH400=
Subject key identifier: FF:F7:F7:13:56:18:8E:3B:A0:8C:ED:78:17:82:C2:71:86:00:AB:E0
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 01A0C7EAA8C7521DCBF6BC9AE0F49F0B7369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0F58
Signing time: Tue 22 Sep 2026 07:00:39 +0000
Manifest this update: Tue 22 Sep 2026 07:00:39 +0000
Manifest next update: Wed 23 Sep 2026 07:00:39 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: iLIyJmjopPgodCqSebSVa6GPDiDpdEvcQ3YrXytH15g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:a8:c7:52:1d:cb:f6:bc:9a:e0:f4:9f:0b:73:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Sep 22 07:00:39 2026 GMT
Not After : Sep 23 07:00:39 2026 GMT
Subject: CN=fff7f71356188e3ba08ced781782c2718600abe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:a0:a2:96:cd:56:32:59:80:c8:d0:78:52:
a0:76:cd:b1:08:62:98:4c:48:52:66:9d:41:c8:3a:
e6:8e:fd:8b:33:f1:b6:3a:9b:1c:85:95:97:1f:1f:
e8:e2:d8:f7:b6:ae:07:e8:61:e7:f1:b3:fb:ae:2e:
e8:43:11:ae:88:8e:e5:1b:fe:02:ef:e4:ec:5f:b6:
97:92:01:c9:18:d1:64:07:42:d9:9e:52:86:34:ce:
77:9f:fb:40:5b:2e:07:48:3c:a9:55:94:5c:19:a8:
81:cc:82:8c:dc:83:cd:0e:57:e0:41:f1:5f:c0:66:
ef:ff:2b:c7:45:9b:c0:cb:2a:36:46:4b:5e:b1:8d:
fa:82:41:04:91:63:df:11:ef:ad:05:25:ea:98:89:
57:ce:12:e0:a0:58:0e:21:51:76:75:d2:2b:05:5e:
48:6e:d2:f6:80:0c:03:38:6a:6e:c0:76:52:13:ee:
b1:b3:94:a9:95:d4:55:43:4c:31:a0:54:79:29:93:
42:d4:8a:f7:3d:64:8c:6b:f3:00:6a:48:b2:96:26:
3c:b5:ec:5a:b4:e7:cb:34:94:5b:38:fd:a0:e2:79:
c2:f5:a7:41:d7:3f:dc:c3:87:0a:b9:f9:8c:09:7e:
1b:53:38:a3:a9:50:22:d0:6f:fa:72:a5:aa:1a:00:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:F7:13:56:18:8E:3B:A0:8C:ED:78:17:82:C2:71:86:00:AB:E0
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:18:53:d1:82:1c:a8:4c:e7:9f:30:33:d8:0d:2b:43:d5:4c:
ac:47:a7:6b:3a:0b:6d:89:ff:ef:34:04:3f:81:bd:21:6a:12:
57:b4:8e:31:93:e3:f2:b4:3f:8c:15:3b:9e:48:3f:68:9d:8d:
63:69:de:59:67:71:b8:c0:0e:5e:da:4b:ff:ad:89:92:9b:9d:
e8:0c:33:7e:c8:b5:76:97:f0:1e:89:93:77:71:22:0b:54:15:
bb:bf:0d:54:b8:38:72:db:14:6a:1d:28:e2:35:b6:7a:42:12:
be:c4:84:ea:35:3d:57:e7:9c:a2:58:c6:f3:a5:d5:cd:20:50:
36:4b:04:99:fb:d4:a8:99:1c:9f:01:62:3a:79:65:14:b8:43:
8d:15:7c:6d:34:ae:39:33:cc:48:77:e5:f4:42:99:f0:06:4e:
ee:55:ce:af:1e:39:ce:39:ea:f1:5b:55:d5:df:13:c1:7e:10:
78:33:da:4a:77:97:49:83:6f:71:ce:04:4b:9d:1d:39:a5:e8:
fd:62:47:89:4d:ed:56:0c:2a:dd:b3:d6:a3:31:3a:51:3b:28:
ca:58:0a:8d:20:f9:fe:89:9c:66:25:dd:6b:6c:ec:23:0d:df:
dc:9d:83:1f:3f:48:0f:3c:3f:0b:4d:37:8b:cb:7d:3b:7d:19:
42:aa:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:40:07 2026 by rpki-client