Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: NFQGUsrK8guLMH7eYNbgFEbEPTCDTyMAb/19UPXFW7Q=
Subject key identifier: FB:C4:5D:CD:86:6F:9F:01:0A:FD:39:AB:56:E8:74:07:E4:6E:4A:4F
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019D9818B70AD3A2C65C53EA9D7997331457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 07F2
Signing time: Thu 16 Apr 2026 21:00:49 +0000
Manifest this update: Thu 16 Apr 2026 21:00:49 +0000
Manifest next update: Fri 17 Apr 2026 21:00:49 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: CaB6E/Chg8x9r8LHz8GxTdXK+WXiEACvCRr2kVrPst0=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b7:0a:d3:a2:c6:5c:53:ea:9d:79:97:33:14:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Apr 16 21:00:49 2026 GMT
Not After : Apr 17 21:00:49 2026 GMT
Subject: CN=fbc45dcd866f9f010afd39ab56e87407e46e4a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:26:f3:38:9d:f6:95:31:fa:b1:41:b1:52:
a8:8a:24:7a:e6:28:ca:6e:85:cd:87:f0:49:39:27:
94:39:c7:b5:56:cd:0e:75:27:72:1c:2b:52:70:ed:
e5:6f:20:20:3f:a9:48:4e:de:0e:17:01:44:3f:de:
eb:c0:74:c6:fc:1e:da:24:c6:1c:08:84:c6:ba:8b:
dc:36:4c:e5:d8:72:1a:7f:05:65:93:af:f6:9f:42:
49:65:a7:dc:ba:21:3e:0f:bd:ce:1f:22:3f:02:43:
37:7a:26:ec:69:26:43:e8:f5:14:c8:45:69:93:c6:
84:77:a3:6d:ea:85:46:73:9a:1b:d1:77:2e:69:5c:
79:28:25:aa:02:6b:83:3a:d0:92:7a:fe:9e:72:b4:
42:ec:8c:12:64:33:a5:ca:57:1a:2d:33:7f:a1:a9:
7a:44:56:ba:66:c0:8d:d3:2c:3d:cf:37:42:91:c8:
17:19:22:13:97:dc:8b:27:c4:b2:d3:b0:02:a2:d9:
e7:5c:67:1e:1a:74:db:d5:fb:0f:19:e4:70:96:c0:
4a:4d:90:ce:c3:56:12:da:9f:51:36:e3:f0:71:12:
00:d7:04:f8:e3:8c:02:c6:02:c8:f6:8f:1b:9d:a2:
cb:0e:4f:fa:12:98:86:dc:80:d6:29:ca:91:ed:cc:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C4:5D:CD:86:6F:9F:01:0A:FD:39:AB:56:E8:74:07:E4:6E:4A:4F
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fc:45:d9:d3:4f:1d:62:1a:af:76:f9:49:f8:b6:de:4f:c3:
e5:25:23:b3:40:db:81:a7:67:fe:2f:84:c3:f0:4f:2f:a5:f7:
61:5a:f9:c2:e2:76:38:07:8d:da:59:da:16:8f:a0:36:d9:dd:
a1:d0:86:22:a9:db:94:fe:22:04:d0:f0:b8:e3:04:84:73:d9:
64:3c:bd:89:4d:a9:54:fc:70:d4:0f:7e:b9:76:6e:ff:41:9d:
2c:81:45:44:70:14:13:fc:24:22:81:74:3d:3d:bd:25:25:b2:
ef:80:5f:55:83:5e:c2:d6:ff:7b:4e:6c:ad:2b:1d:53:03:8e:
29:5f:90:f6:0d:55:b0:f4:3f:7a:24:d0:89:55:b6:6e:fe:46:
17:b2:14:74:e2:6b:b3:83:fd:e4:b3:8f:4f:95:19:8c:9f:ba:
cc:cf:d6:e3:b4:ad:52:25:68:25:0b:4a:e0:f5:ed:af:6f:5b:
bb:31:1a:13:86:8c:b4:cc:66:11:fc:7d:b4:ef:e9:c2:43:0d:
df:7f:61:8f:68:cc:46:56:43:5d:78:b0:9d:b2:40:00:37:6d:
33:f3:89:18:25:2f:ad:93:f1:bd:8b:40:a7:57:61:76:57:77:
9e:aa:03:53:79:ce:02:80:bf:ac:1a:fd:de:06:f5:c0:11:65:
0a:4c:a2:82
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2YGLcK06LGXFPqnXmXMxRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx
ZDNjZjkwHhcNMjYwNDE2MjEwMDQ5WhcNMjYwNDE3MjEwMDQ5WjAzMTEwLwYDVQQD
EyhmYmM0NWRjZDg2NmY5ZjAxMGFmZDM5YWI1NmU4NzQwN2U0NmU0YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fsm8zid9pUx+rFBsVKoiiR65ijK
boXNh/BJOSeUOce1Vs0OdSdyHCtScO3lbyAgP6lITt4OFwFEP97rwHTG/B7aJMYc
CITGuovcNkzl2HIafwVlk6/2n0JJZafcuiE+D73OHyI/AkM3eibsaSZD6PUUyEVp
k8aEd6Nt6oVGc5ob0XcuaVx5KCWqAmuDOtCSev6ecrRC7IwSZDOlylcaLTN/oal6
RFa6ZsCN0yw9zzdCkcgXGSITl9yLJ8Sy07ACotnnXGceGnTb1fsPGeRwlsBKTZDO
w1YS2p9RNuPwcRIA1wT444wCxgLI9o8bnaLLDk/6EpiG3IDWKcqR7cwcEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPvEXc2Gb58BCv05q1bodAfkbkpPMB8GA1UdIwQY
MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy
LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5
MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePxF
2dNPHWIar3b5Sfi23k/D5SUjs0Dbgadn/i+Ew/BPL6X3YVr5wuJ2OAeN2lnaFo+g
NtndodCGIqnblP4iBNDwuOMEhHPZZDy9iU2pVPxw1A9+uXZu/0GdLIFFRHAUE/wk
IoF0PT29JSWy74BfVYNewtb/e05srSsdUwOOKV+Q9g1VsPQ/eiTQiVW2bv5GF7IU
dOJrs4P95LOPT5UZjJ+6zM/W47StUiVoJQtK4PXtr29buzEaE4aMtMxmEfx9tO/p
wkMN339hj2jMRlZDXXiwnbJAADdtM/OJGCUvrZPxvYtAp1dhdld3nqoDU3nOAoC/
rBr93gb1wBFlCkyigg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:37 2026 by rpki-client