Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: liVheZZteTLsOZMIUaI4lixtYtmt1dQrlm5xPBCHFoI=
Subject key identifier: FD:AE:00:8A:04:73:63:F2:F1:53:89:A2:9F:FE:09:D2:5F:7F:88:99
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 01A0D94C70D5E2D069F93F34E0E698266ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0DB0
Signing time: Fri 25 Sep 2026 16:01:00 +0000
Manifest this update: Fri 25 Sep 2026 16:01:00 +0000
Manifest next update: Sat 26 Sep 2026 16:01:00 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: dA+K4pGhd8uHPewkH5PGJDtb4bSxzqPwRt32Fl9+ZIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:70:d5:e2:d0:69:f9:3f:34:e0:e6:98:26:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Sep 25 16:01:00 2026 GMT
Not After : Sep 26 16:01:00 2026 GMT
Subject: CN=fdae008a047363f2f15389a29ffe09d25f7f8899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:1b:51:69:ad:63:96:dd:b7:10:3f:36:cf:
a3:77:cc:ee:c3:87:b8:21:9c:e2:f5:91:bb:f0:ac:
f4:19:2e:d0:84:67:47:1c:95:c7:ac:a4:7e:56:e5:
3a:61:21:1f:b4:87:ac:37:b7:fd:b4:0a:77:98:ee:
0e:70:2a:d1:65:e0:fe:87:ed:f1:a9:3b:7a:e2:c5:
4a:0d:fc:f0:db:cc:d0:13:e4:c7:d6:e4:3c:6c:cc:
b4:80:8e:70:7e:c3:9e:4d:af:32:f3:89:7d:1e:a8:
69:68:1e:be:e5:53:e2:09:28:97:5d:a2:13:dc:a2:
eb:8b:92:e1:77:d8:ce:2e:66:b1:58:ad:43:59:4d:
ef:46:77:9d:9a:ae:cb:48:ba:1e:9e:5c:09:f0:52:
d9:6c:b4:e5:21:4c:6a:49:c2:c7:1f:3f:76:23:21:
d4:1e:be:f9:50:d6:ee:91:9b:16:2e:73:97:3c:63:
c7:55:c3:e4:6b:59:3d:72:9b:1e:d7:3b:9a:6b:13:
54:e9:55:49:5a:1d:a9:1a:06:f4:a8:c7:91:4c:2c:
bc:87:d9:7c:b9:42:08:38:11:61:20:3b:28:1c:1a:
68:50:e9:64:e1:60:7d:0c:0a:70:f4:a7:4b:61:49:
ae:80:a5:7e:5c:4a:33:25:c7:06:c0:d4:fb:cc:75:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AE:00:8A:04:73:63:F2:F1:53:89:A2:9F:FE:09:D2:5F:7F:88:99
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:50:50:32:e3:5e:cd:3b:59:b2:e8:91:2e:32:63:d5:e0:39:
08:0e:82:83:41:ba:24:9d:08:43:1b:9d:51:0c:fb:d4:9c:e8:
00:b1:22:d9:87:80:2f:1b:0b:c5:88:28:80:d1:e2:b2:6e:2f:
7d:7e:e0:78:e1:2d:db:71:bc:da:78:33:fc:59:3f:eb:d5:e8:
4b:c2:89:1b:7f:87:86:4b:3e:21:85:57:19:05:41:80:bd:43:
b8:c9:e9:94:d0:ef:a9:8a:09:3c:f9:ad:f1:81:85:e0:c4:12:
fc:b2:86:da:84:06:c3:e8:79:e0:93:c7:28:e8:b0:09:b8:38:
a9:ea:f2:f9:48:23:42:46:f2:78:84:53:23:a7:ac:5a:95:58:
8a:9a:65:b4:bb:9c:98:0e:82:46:bc:5a:83:4b:a7:dc:7c:4d:
07:10:cc:d6:3e:63:3b:ba:90:dc:30:7b:f1:39:f1:61:f7:35:
cb:c1:78:d2:21:1a:6b:62:7c:1d:87:6d:28:1d:be:b2:ac:de:
4f:0e:20:ed:1a:15:f3:8a:d7:6c:c7:32:46:e7:f6:d4:57:1f:
13:5c:f4:9d:86:26:fc:da:1d:48:b2:13:5d:90:74:ef:db:66:
e6:4d:8c:88:92:67:23:ce:5b:f0:09:5a:a5:25:f1:0e:b8:25:
86:7f:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:53:26 2026 by rpki-client