Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: oPAyEE2oGqAjozp+Kc3J0n32D3a4FjGr5OXGEI2uzv4=
Subject key identifier: 5C:61:65:83:BA:27:94:9F:72:48:88:EE:6F:2E:B3:B9:B5:B8:F0:57
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 01A0CDEC967610A83F116348D5CA92B5BFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 11:00:29 +0000
Manifest this update: Wed 23 Sep 2026 11:00:29 +0000
Manifest next update: Thu 24 Sep 2026 11:00:29 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: uEFahovQCeKj6pm1l5f4fa1GppMzNrAX+TOzGA3bY1Q=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:96:76:10:a8:3f:11:63:48:d5:ca:92:b5:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Sep 23 11:00:29 2026 GMT
Not After : Sep 24 11:00:29 2026 GMT
Subject: CN=5c616583ba27949f724888ee6f2eb3b9b5b8f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:3c:10:ec:f3:1d:34:d9:89:8c:77:73:0f:
da:1c:df:f4:8e:11:65:c3:e8:db:33:5c:30:85:87:
9c:9d:cc:f7:73:69:af:f3:7f:fd:38:7e:45:d5:b0:
6f:e6:35:2a:5e:fd:79:c2:df:15:36:61:b4:15:12:
84:28:85:f8:32:21:e0:a8:2b:e6:92:9f:5a:0d:b3:
32:50:74:2a:e4:6b:80:de:c2:5f:b3:26:7c:7c:19:
b4:e2:e6:b2:f7:4f:6c:ef:e5:7c:35:c0:64:37:14:
98:3d:12:bf:dc:a5:a1:be:e5:4a:ab:db:40:81:55:
ba:d0:78:2f:c6:90:12:69:7b:9b:d6:cf:df:03:9c:
0a:35:3b:27:bf:74:1e:6c:84:60:f3:5c:4b:af:ae:
6e:dd:7c:8b:21:7d:9e:65:c1:47:18:f8:de:6e:d4:
8e:eb:0b:60:ef:89:1d:d9:ae:cb:b9:d9:75:20:f0:
e5:f9:08:74:ce:42:ce:71:c3:d0:6a:4e:b4:d9:5a:
d9:28:f8:20:ea:c4:58:92:a0:e1:78:da:55:46:d8:
6f:76:32:9a:4a:b7:96:7b:9d:30:c3:49:cf:2a:e0:
e4:fa:8e:e2:92:13:e9:97:8d:96:86:df:d8:fc:92:
1d:cb:c9:91:f6:6d:cf:06:f9:0e:6c:7b:59:04:ec:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:61:65:83:BA:27:94:9F:72:48:88:EE:6F:2E:B3:B9:B5:B8:F0:57
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:c8:ed:29:6a:19:da:18:d1:b1:6b:bd:42:ea:c3:fb:cf:
69:e6:bc:a5:fd:1e:a8:c7:6b:43:4a:98:13:94:d8:9c:59:42:
c7:04:0c:96:0c:19:a3:e7:29:2c:fb:6e:5c:7c:f6:e1:41:e8:
ea:14:51:8c:b7:97:ad:8f:5e:29:10:26:ec:c1:3c:9b:db:f1:
63:a1:45:e9:0e:59:78:bf:87:fa:5b:dd:68:d3:d8:b8:9a:4c:
9e:92:5c:c4:ac:3e:aa:d6:7d:56:29:5c:63:b9:b0:90:62:5c:
fb:a2:21:a8:36:e6:09:3a:a0:42:8c:64:3c:a0:09:9e:d8:eb:
d3:ea:f2:31:d4:e8:12:7e:f0:3b:a1:fb:0f:60:c7:75:fe:56:
91:0d:92:9a:d2:cd:e9:bf:49:ac:de:7e:04:86:f6:ef:8d:7d:
a6:a1:66:30:5b:cc:53:a6:4f:89:ad:18:76:73:09:cc:4d:5f:
30:31:0c:e0:87:2c:f6:95:c3:ba:49:ea:65:67:76:f9:cd:f0:
d1:34:2d:db:80:95:53:be:56:1c:f1:1f:62:84:91:00:21:d4:
cb:0b:69:79:00:ba:5e:40:e7:bf:b1:bb:22:17:d9:d2:4a:fb:
5b:7d:8f:7f:ae:74:5a:f5:21:aa:ce:3c:f2:25:47:95:72:b4:
53:a4:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:35:19 2026 by rpki-client