
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier: s/jM/PEtnUaD6wmgCEcYrdi/bZ0HHqvj70GeVUwzNbY=
Subject key identifier: 5F:32:06:FF:4A:5A:9F:48:03:57:68:44:18:4F:8F:57:A3:57:2B:FD
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 01A0C77D58031E8A10CDD1A13770A110714D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 05:01:15 +0000
Manifest this update: Tue 22 Sep 2026 05:01:15 +0000
Manifest next update: Wed 23 Sep 2026 05:01:15 +0000
Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: WBaY5jqjLeMFD0Jw0VY1Q4kVTbBWG8Uuhsp5XEB525A=)
2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:58:03:1e:8a:10:cd:d1:a1:37:70:a1:10:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Sep 22 05:01:15 2026 GMT
Not After : Sep 23 05:01:15 2026 GMT
Subject: CN=5f3206ff4a5a9f4803576844184f8f57a3572bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:3b:ef:1b:76:6f:50:8e:5b:92:d6:8b:59:
da:5d:2f:16:06:66:73:fd:e1:42:b1:c1:20:41:b6:
d7:f0:2e:53:aa:02:ef:9a:c8:b6:bb:77:81:0e:89:
3b:ef:6d:10:08:df:e3:49:04:bd:e3:16:a0:64:4f:
16:2e:66:a6:5a:4b:69:4c:aa:e6:e8:cd:6a:2d:a7:
bd:c4:f6:15:af:5f:e6:91:3f:eb:54:09:d3:05:4d:
23:b6:86:5d:c3:ea:14:20:2c:79:76:45:d7:bf:d4:
11:fe:f9:a5:23:a3:96:d9:35:5f:8f:5b:dd:49:38:
f3:0a:d7:25:e1:8c:03:ac:ec:c5:ac:bf:80:9c:48:
68:26:bf:61:d3:9c:41:b9:0a:4c:86:84:6c:8d:bf:
7b:3a:c8:46:67:c7:2e:3c:47:74:be:87:99:4e:4c:
e2:ea:de:ff:09:93:20:93:d3:89:87:55:39:cf:6a:
e3:21:c8:0d:54:e2:95:1c:68:4e:a3:07:dc:64:30:
34:73:9c:22:ad:c1:31:aa:0e:d6:9a:8f:8a:e7:14:
4e:f9:ef:bc:75:31:e5:af:70:ec:78:9c:8c:14:6b:
b4:5d:67:47:5a:ad:99:ed:ce:f4:d3:fb:29:c0:6b:
11:a1:c1:e6:14:61:f0:7b:07:52:f9:3c:ed:09:55:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:32:06:FF:4A:5A:9F:48:03:57:68:44:18:4F:8F:57:A3:57:2B:FD
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3c:dd:0b:0f:74:4b:c0:62:0e:cb:bd:09:4a:00:ca:37:f4:
bc:b2:32:78:ad:a5:2b:6f:36:42:ac:ad:83:6f:24:82:7c:24:
c8:57:0c:07:ba:2f:ab:cc:12:87:c5:ab:34:a6:f2:e2:dc:d9:
b0:dd:a1:63:c8:ca:5c:cb:bd:20:23:74:6c:a1:a4:3e:02:32:
da:d9:cb:9a:df:ee:d8:5d:cf:ea:75:92:e0:d3:8d:9b:d0:39:
77:cd:f1:ec:7f:51:ba:01:cb:fa:10:35:15:49:8a:f7:e7:e1:
66:2d:04:55:41:36:0c:b2:a5:39:62:66:75:73:aa:e1:32:db:
ee:8d:8d:fd:91:bb:6b:f3:e0:e4:8b:76:d2:a3:9f:8c:2d:92:
4f:5d:c9:65:3a:05:79:86:75:61:26:8c:e8:a1:02:bc:51:71:
a9:04:4c:ed:99:7d:f4:d2:db:fd:ff:f2:f0:14:b1:3f:6e:aa:
ee:38:e6:11:61:2b:2f:55:e6:03:da:48:05:28:1e:23:39:0f:
d1:c3:93:48:ed:02:6b:61:90:8a:1a:e1:6e:0c:5e:51:22:e0:
33:46:76:48:ae:0b:4d:47:25:ca:f5:c1:01:52:7c:a4:56:9a:
2b:93:a0:63:f0:cf:32:6a:e0:5b:62:14:f5:1a:c5:8b:e2:e4:
29:a4:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:00:12 2026 by rpki-client