
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: 6rEx6WtFGyM1fwz/Czns2hMFm3sE24Kw8JTK8D1eaS8=
Subject key identifier: D4:3E:77:16:56:3E:07:43:56:CB:B0:8E:47:F8:14:89:FF:8A:E3:5B
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 01A0C7EA8A65C8D21EB4729A114161EF77CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 0D99
Signing time: Tue 22 Sep 2026 07:00:31 +0000
Manifest this update: Tue 22 Sep 2026 07:00:31 +0000
Manifest next update: Wed 23 Sep 2026 07:00:31 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: vLBqhWinsu+ovdreF7V5bnBpSZ5Cm7Z7+dbLEM/I6sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:8a:65:c8:d2:1e:b4:72:9a:11:41:61:ef:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Sep 22 07:00:31 2026 GMT
Not After : Sep 23 07:00:31 2026 GMT
Subject: CN=d43e7716563e074356cbb08e47f81489ff8ae35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:12:ff:bf:5f:49:9c:ea:64:9a:71:66:8c:
fe:4c:cc:aa:3c:ca:64:d3:15:b1:70:38:da:dd:b0:
26:a5:2f:ee:5e:7c:4f:65:a4:c2:03:f8:9e:be:a1:
32:09:69:50:12:06:74:8d:ba:2f:28:64:31:02:89:
9b:a0:14:25:35:3f:6a:31:c7:be:36:8c:ad:f7:c2:
03:94:cc:b0:f7:50:dd:17:b3:93:ae:4b:3b:b8:ae:
a6:0b:c0:25:1e:68:6d:99:53:4c:00:97:0f:4f:1a:
ac:15:9c:2b:fb:cb:59:01:53:8b:09:cd:37:66:04:
9e:7a:18:98:a2:71:58:8d:53:45:7d:35:33:70:f2:
3b:f0:77:da:1e:c2:4d:12:93:fc:0b:5e:05:8d:e3:
2e:59:81:aa:a9:b3:a2:33:43:eb:65:1d:32:41:76:
1e:59:09:2b:f3:de:4a:18:68:84:7a:59:66:79:c5:
25:54:dd:ed:63:8a:9d:c0:fe:b3:3c:bf:c5:72:61:
cb:0d:27:e4:f0:03:f9:f9:15:fb:cb:eb:9d:fe:ee:
6b:4b:02:81:0b:24:6f:38:11:f6:00:9b:9d:c9:65:
74:7a:3f:a0:f8:07:2a:65:c1:53:75:a1:95:e6:df:
c8:9f:98:cb:84:73:51:47:eb:bd:af:46:92:5d:2b:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:77:16:56:3E:07:43:56:CB:B0:8E:47:F8:14:89:FF:8A:E3:5B
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8c:fb:9d:f1:87:5a:f2:4c:96:c8:e5:86:02:37:19:c4:2f:
d4:ff:55:a6:41:b5:81:07:32:a2:05:09:be:6c:2b:e4:8c:0b:
d9:ce:5a:91:79:d7:cc:f8:23:d8:a0:28:b6:a1:30:81:39:a6:
a5:59:87:bc:05:b9:f1:d5:9d:f4:43:ae:7a:b4:18:81:42:df:
8e:a3:7b:41:dc:81:4e:95:d8:a2:31:c2:33:d2:96:95:14:79:
07:34:06:92:17:42:61:65:01:7c:67:6c:7b:db:ab:0c:8b:73:
af:3f:e1:5a:b7:6d:1f:17:57:96:df:ce:7d:c1:7d:64:bf:07:
cd:da:9c:9e:48:d7:00:be:18:f1:90:73:52:e1:c8:9d:f4:81:
e9:90:1b:6f:aa:97:45:b5:4e:ee:d0:97:f7:48:c7:87:14:95:
16:5e:e1:e2:29:fa:91:e1:8b:75:90:ba:60:ab:92:0d:45:46:
ab:fa:8c:c6:80:8c:81:1d:de:fd:64:b8:dc:5e:57:66:43:36:
cd:59:01:fd:7d:99:28:7c:c6:6c:9b:33:fc:a2:1d:21:81:ff:
5a:b3:30:16:f3:b6:05:21:99:45:2e:d1:0a:1f:63:85:e5:74:
44:6a:fd:08:f6:14:02:2a:8f:f4:a1:5e:66:21:27:89:9a:3c:
97:a1:11:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6oplyNIetHKaEUFh73fKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ2ZTgyMzQ5NDcyY2NhZmQwYTA2OWY1NzhmNjQ3YzMw
YTk4NDYwHhcNMjYwOTIyMDcwMDMxWhcNMjYwOTIzMDcwMDMxWjAzMTEwLwYDVQQD
EyhkNDNlNzcxNjU2M2UwNzQzNTZjYmIwOGU0N2Y4MTQ4OWZmOGFlMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ugS/79fSZzqZJpxZoz+TMyqPMpk
0xWxcDja3bAmpS/uXnxPZaTCA/ievqEyCWlQEgZ0jbovKGQxAomboBQlNT9qMce+
Noyt98IDlMyw91DdF7OTrks7uK6mC8AlHmhtmVNMAJcPTxqsFZwr+8tZAVOLCc03
ZgSeehiYonFYjVNFfTUzcPI78HfaHsJNEpP8C14FjeMuWYGqqbOiM0PrZR0yQXYe
WQkr895KGGiEellmecUlVN3tY4qdwP6zPL/FcmHLDSfk8AP5+RX7y+ud/u5rSwKB
CyRvOBH2AJudyWV0ej+g+AcqZcFTdaGV5t/In5jLhHNRR+u9r0aSXStO9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ+dxZWPgdDVsuwjkf4FIn/iuNbMB8GA1UdIwQY
MBaAFAVdboI0lHLMr9CgafV49kfDCphGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEt
NWFhZTNhYjc4OTk1LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEtNWFhZTNhYjc4OTk1
LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIz7nfGH
WvJMlsjlhgI3GcQv1P9VpkG1gQcyogUJvmwr5IwL2c5akXnXzPgj2KAotqEwgTmm
pVmHvAW58dWd9EOuerQYgULfjqN7QdyBTpXYojHCM9KWlRR5BzQGkhdCYWUBfGds
e9urDItzrz/hWrdtHxdXlt/OfcF9ZL8HzdqcnkjXAL4Y8ZBzUuHInfSB6ZAbb6qX
RbVO7tCX90jHhxSVFl7h4in6keGLdZC6YKuSDUVGq/qMxoCMgR3e/WS43F5XZkM2
zVkB/X2ZKHzGbJsz/KIdIYH/WrMwFvO2BSGZRS7RCh9jheV0RGr9CPYUAiqP9KFe
ZiEniZo8l6ERwQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:38:00 2026 by rpki-client