Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier: Anbh5vgju4vo4AyvnHr8tbkGdFNYtp1YUpXAOMIlYqA=
Subject key identifier: 0B:66:CD:CF:71:9B:35:12:C3:21:B6:24:91:59:F6:56:DE:CC:AF:BE
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial: 019CAF7F21E47A79A2CCFC3531CA652E1BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number: 067C
Signing time: Mon 02 Mar 2026 17:01:10 +0000
Manifest this update: Mon 02 Mar 2026 17:01:10 +0000
Manifest next update: Tue 03 Mar 2026 17:01:10 +0000
Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: CQ7tOW4EOPU7cOL1aPM/iDYCFmvo247En4DDFdeB/d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:21:e4:7a:79:a2:cc:fc:35:31:ca:65:2e:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Validity
Not Before: Mar 2 17:01:10 2026 GMT
Not After : Mar 3 17:01:10 2026 GMT
Subject: CN=0b66cdcf719b3512c321b6249159f656deccafbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:84:cd:50:e2:7b:60:a3:e7:2c:c6:31:53:
83:b3:16:62:e0:7d:1c:df:e8:68:69:0c:5d:42:a8:
c6:4e:66:39:7f:7b:39:ba:25:b2:ba:d7:a2:a4:4e:
37:28:c4:f4:6b:14:31:5c:c4:2a:a1:45:10:d1:c7:
92:41:d2:08:a5:dc:66:33:d9:f6:5a:5e:60:b2:bb:
6e:5a:6f:71:94:a5:61:a2:80:37:a8:fa:a6:aa:31:
7c:e2:a3:55:07:62:2b:f6:a2:11:67:2e:1b:cb:f2:
d7:e0:1e:8a:ae:df:d1:21:83:bd:08:ea:47:cf:a0:
bd:6f:4c:e6:3d:d2:91:92:e6:3b:6f:3f:a6:a6:79:
82:af:9f:60:bb:56:5f:a9:9d:6b:dd:5c:aa:5f:64:
9c:b2:0d:38:6d:2b:08:8b:10:db:4e:37:f4:45:cd:
09:20:41:7c:4e:53:e7:3e:0d:52:a1:c0:cf:f2:a5:
a5:4b:1b:6d:7f:a5:61:33:2a:01:95:fa:30:ab:24:
f0:bf:09:57:5a:d7:55:fe:fd:ac:ba:0b:9e:f7:f0:
8a:78:4c:dc:89:05:92:54:e1:ed:9f:84:f5:65:d6:
d4:e7:c8:6e:62:17:b8:89:5a:de:d9:89:78:f1:81:
f2:d3:2c:3b:3e:11:ac:b2:f6:7d:37:d0:44:27:10:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:CD:CF:71:9B:35:12:C3:21:B6:24:91:59:F6:56:DE:CC:AF:BE
X509v3 Authority Key Identifier:
keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:66:42:36:4b:0d:70:2c:cc:c7:92:ba:96:f1:2c:a8:5c:f9:
72:5c:10:20:59:5a:5b:34:b4:04:84:f1:3b:6a:dc:a2:4c:1c:
4d:94:d6:8d:95:55:58:3f:72:e7:36:e9:d4:d6:a0:ca:92:f4:
fe:a8:2d:68:31:76:02:ca:bc:19:f5:df:c7:ab:a8:72:2a:4b:
6c:79:dd:7f:73:ab:8b:b1:ed:32:ce:35:50:ed:40:ae:88:1b:
0c:1d:20:04:23:9e:92:96:ab:bc:0f:69:a5:8a:4d:74:d1:7f:
23:26:66:dd:a7:7c:91:32:4f:b4:2d:8e:58:ae:a3:ba:eb:2f:
44:60:6b:3d:4d:2d:ad:42:79:ec:80:59:20:d0:75:02:a4:12:
c0:1e:49:22:d1:2d:01:d7:12:4a:3c:e5:f8:91:ab:eb:74:b6:
55:72:a7:fe:25:6f:19:1c:94:6a:3d:71:38:f5:0f:d6:2c:9b:
86:bd:71:c2:24:d9:3c:8a:2f:5a:36:6a:00:78:a1:b5:9b:32:
bb:16:e4:4c:c5:aa:27:cf:8c:f0:7f:22:99:c9:22:4f:87:02:
6b:71:f4:3d:20:4c:d0:e0:1a:90:b5:a6:3d:00:78:7f:eb:02:
50:8f:5a:b1:42:d2:e6:df:cd:62:27:fc:27:28:7b:98:a3:89:
de:bd:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:24:16 2026 by rpki-client