Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: r7iMIQQUXjIElojJ7pPTdWA1ggLlD/CEIEq88/8dYbQ=
Subject key identifier: EE:C2:09:87:D8:8F:48:B0:D6:EF:1D:03:4D:E0:55:64:91:06:FA:FC
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019FA862A05F6D02AB647B09632FF44FDFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 11:01:03 +0000
Manifest this update: Tue 28 Jul 2026 11:01:03 +0000
Manifest next update: Wed 29 Jul 2026 11:01:03 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: qbfs7r53v7Ugy0U4ymRUcYHqBTFJX+ZcsAculuUhNbk=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:a0:5f:6d:02:ab:64:7b:09:63:2f:f4:4f:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jul 28 11:01:03 2026 GMT
Not After : Jul 29 11:01:03 2026 GMT
Subject: CN=eec20987d88f48b0d6ef1d034de055649106fafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:2c:62:72:45:49:12:82:0b:9b:72:36:8f:
54:5e:ba:ba:59:f1:f1:88:22:fc:f1:bf:98:81:8f:
fe:12:3b:59:70:6b:d6:75:f2:a9:e7:e1:54:71:8d:
d2:4c:7e:5b:e7:e7:a0:17:7f:4c:32:52:df:41:4a:
62:c5:73:88:0f:6f:17:83:76:34:75:8c:c2:f1:a6:
31:95:20:6a:6c:da:c2:7b:d1:32:6d:ea:50:29:29:
bf:3a:42:36:24:49:aa:75:0d:89:c6:84:a0:11:db:
16:53:31:00:75:68:db:c8:d9:0e:0b:8e:48:dd:62:
ec:42:c8:ef:08:f2:6d:f9:a8:92:06:b2:6f:b1:49:
3b:40:ca:af:ff:90:c6:4b:1e:02:8a:e5:68:90:c1:
11:62:0c:0a:01:2b:59:df:b5:30:d7:c7:b9:92:92:
2d:20:78:da:82:a3:de:fe:56:4a:a3:47:13:59:69:
39:a5:73:a5:08:45:bf:be:4a:12:f3:3b:a9:83:08:
4a:aa:12:fd:64:4a:e0:e0:bb:d0:dd:d6:42:09:10:
92:91:78:99:43:ec:19:53:3b:56:47:cd:a5:1d:75:
06:1d:91:8e:0f:3e:1e:d1:39:2e:0f:52:89:73:fc:
e9:bc:ed:d5:54:db:8b:09:e6:ea:60:8f:25:ba:cf:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:09:87:D8:8F:48:B0:D6:EF:1D:03:4D:E0:55:64:91:06:FA:FC
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:45:d8:d9:1c:df:0f:80:1a:f1:3a:42:3d:21:8a:4f:75:15:
10:3c:ba:16:59:cd:ec:a4:ac:69:7d:65:26:bf:cf:15:5e:0f:
43:95:3d:bd:a8:a9:d9:b7:b6:e5:81:0f:2a:a2:14:aa:b9:44:
42:27:19:66:0f:b8:26:c8:02:ab:d2:51:db:69:ed:2a:ef:13:
1a:99:fb:3a:9f:80:c3:aa:a2:89:73:93:56:5c:f3:7a:c6:98:
f9:ea:52:c7:63:00:19:b8:0c:d0:67:be:99:b9:c4:49:06:4c:
09:97:a5:af:55:ab:1c:77:d2:e7:30:da:db:d4:c7:ee:61:71:
51:b4:7f:a8:c0:e7:c3:ac:cd:b7:c7:d3:77:7f:98:9d:bb:76:
71:7d:1b:45:21:57:a5:a8:3f:ec:63:9f:a8:14:dc:b6:33:0c:
cd:eb:4d:a8:ed:91:0a:2a:90:cd:14:76:3c:3b:27:83:af:c4:
16:89:62:d6:83:da:ef:a8:38:e3:6a:0b:10:9a:f4:41:19:ca:
cb:fc:eb:97:4e:f4:0e:52:e4:80:e8:a4:9c:70:e8:46:9a:69:
ea:c4:1f:45:5e:8d:19:0e:0d:3e:c8:91:98:13:e1:b1:70:27:
c1:62:03:3a:0d:2d:ce:e0:8b:43:96:a2:e2:7e:10:f6:16:46:
3a:66:73:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:44 2026 by rpki-client