Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier: 04EUF6BW2AAbW2FR2AiRmFA0QPK+RJtAZuDBNnf8d+k=
Subject key identifier: A8:22:7E:25:DB:12:2F:11:E3:1A:C4:5E:E8:C6:5A:AF:3F:9C:36:18
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 019D99D00E82B83666C273E115F5142E876B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number: 09B3
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: Xn3cZdoc1oZaLWywlmWWyAyOfWE.roa (hash: 551kHSptW/6M3u7HIciWUsHuNYgd69T++wpfoLJomDU=)
2: ZEYC6JLSqxni0uz7DKcSIeVn5Xk.roa (hash: Hu5pf5fH3eE/w+eCyfmBaRutu6BnQiTjm+7RrzLF/6A=)
3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: 7zdonLvbnvwbtJ0aGedE8xe0CXViAOzjZL3gNnxr2ds=)
4: p_5KG3Sp9mR-pXEa46SnlH8Aek8.roa (hash: 3dV+rW9N+9OA8iBH1axyHdTqUPpTMbGp4N0HyyUoeQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0e:82:b8:36:66:c2:73:e1:15:f5:14:2e:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=a8227e25db122f11e31ac45ee8c65aaf3f9c3618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:65:2e:58:29:c4:fd:ab:17:aa:7f:24:37:
64:1b:b5:b4:dd:eb:18:a5:a2:4b:73:b0:e7:f4:47:
23:d5:a4:63:d8:e1:9b:69:a7:12:58:16:9c:67:77:
89:2f:e2:ff:44:b7:42:42:09:f6:14:b1:f1:55:12:
51:8b:92:bd:d8:c9:47:ad:bf:6e:f6:43:9e:a7:73:
15:a3:55:76:46:66:b3:bb:b1:24:ec:fe:20:aa:1b:
93:ba:60:2a:68:4e:fd:0e:2e:b3:21:16:49:36:5e:
83:75:5e:58:54:0f:dc:30:be:cf:51:af:6f:09:32:
bf:3c:cc:55:f4:aa:c0:30:ce:31:23:4f:b1:49:56:
5b:36:cc:4c:c3:3e:5d:dc:e9:7b:ab:75:82:ca:b5:
e9:50:b2:7e:dd:ed:de:32:c0:3d:36:fb:c0:88:1e:
c4:23:89:e2:50:b5:8d:74:f5:5b:24:4c:2e:c9:dd:
70:91:50:59:b0:e0:65:98:eb:0c:c4:13:f7:13:c3:
a9:d3:d8:fe:e5:d8:49:42:64:e3:c6:66:5a:0f:6d:
d8:ed:22:b6:9d:75:ef:2f:a7:be:65:2c:fa:0d:ac:
24:9e:42:a8:2e:d7:a9:b5:48:f7:f9:aa:08:b6:be:
8b:47:da:a9:cf:02:58:d4:89:92:e2:b9:fc:47:62:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:7E:25:DB:12:2F:11:E3:1A:C4:5E:E8:C6:5A:AF:3F:9C:36:18
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:83:91:47:ca:6f:65:2c:80:33:a6:7e:da:2f:02:29:f6:61:
18:40:bb:1e:0d:56:85:b6:29:36:62:be:c1:ea:3a:9d:3e:26:
3d:c3:42:a7:df:67:a5:9c:7d:7a:d0:35:ec:24:39:11:b2:25:
5f:5f:43:11:f0:01:b0:2f:be:0c:1d:81:9d:6a:5d:a5:2e:80:
07:7c:50:f7:cf:a7:9c:fe:e6:84:29:63:da:ba:a0:74:d8:9e:
ad:15:38:54:73:82:a3:5d:74:3f:49:45:80:40:9d:9a:fc:79:
4e:5f:fc:38:75:5e:1b:99:a9:cf:78:1a:2b:a0:c0:1f:e7:4b:
64:3b:31:5a:c4:2e:4f:0e:9f:db:2e:41:78:64:35:a3:70:2e:
a2:fe:f9:61:41:f5:4c:9a:a0:9d:67:b5:db:88:0b:37:a0:31:
b4:8e:f0:ed:95:43:a6:07:11:78:a4:2e:5f:f5:16:3f:28:cd:
40:6f:d2:52:ca:32:d5:99:48:1d:71:c3:0a:28:d5:71:0a:b0:
27:61:56:d2:37:32:a2:f3:84:a5:7c:91:74:77:7a:8b:bd:c8:
7b:8c:6c:c6:f2:a1:cb:3a:e2:00:fb:77:3f:88:03:e2:93:69:
8e:f8:a4:f1:50:06:25:26:08:70:52:45:e1:81:2f:51:62:be:
77:d9:43:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:51 2026 by rpki-client