Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: J6rJtdUAboDT7ZjMfawBHr2xxH0l9dc8JJsjt/KMnEY=
Subject key identifier: 58:8E:99:90:60:F7:3C:C5:3B:97:09:76:E9:A1:C7:6E:EC:3B:6D:95
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019FA93DC4A6CEE935FC4EB3C7972710F8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0904
Signing time: Tue 28 Jul 2026 15:00:25 +0000
Manifest this update: Tue 28 Jul 2026 15:00:25 +0000
Manifest next update: Wed 29 Jul 2026 15:00:25 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: kiyugswBYmrv9BPqgekQS0SF21gWSCsMuYXgiSEEjPs=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c4:a6:ce:e9:35:fc:4e:b3:c7:97:27:10:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jul 28 15:00:25 2026 GMT
Not After : Jul 29 15:00:25 2026 GMT
Subject: CN=588e999060f73cc53b970976e9a1c76eec3b6d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:7b:a1:c4:c1:d2:df:6e:a4:eb:be:55:f7:
91:22:cf:29:a2:66:33:f5:43:6c:39:f2:66:5d:79:
12:41:ec:9a:7e:7c:52:58:73:bc:47:78:4b:d5:4a:
1c:57:83:2f:c3:d4:67:8a:04:7d:67:da:51:c3:a1:
12:c6:d5:ca:93:b7:fa:6c:62:9e:f5:67:93:84:ce:
bf:55:55:9b:58:c3:ab:fc:35:e9:9a:ae:e6:f9:91:
76:15:03:8a:58:3a:77:c2:9d:cf:6e:0a:9a:d7:0e:
2c:15:f5:73:76:6a:3a:6b:ad:48:c6:bd:cc:da:51:
19:87:9a:fd:61:26:4f:a9:4f:20:6f:f1:7e:92:69:
f9:df:e9:f9:9d:0d:4f:26:83:71:94:80:64:91:92:
bc:b3:93:1a:e8:99:3d:3e:dd:75:32:f7:57:b5:43:
42:54:7e:0f:85:84:c8:89:74:e2:5d:ea:6c:a5:4d:
39:22:19:6c:9b:ad:7d:be:ee:12:b5:3f:38:3c:3c:
d8:c1:81:9a:10:62:bb:51:30:c9:e3:e8:79:2e:64:
4c:a4:83:e4:33:9c:df:95:04:d6:24:64:6e:51:0d:
7a:f4:90:4b:8d:b0:fa:2d:ae:0e:d0:65:70:e9:17:
41:55:cd:8f:43:2c:bb:37:f7:05:29:55:4e:57:c3:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:99:90:60:F7:3C:C5:3B:97:09:76:E9:A1:C7:6E:EC:3B:6D:95
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:68:fd:df:75:bb:f5:9c:75:93:cd:6c:c8:21:96:61:fa:1a:
79:23:4a:9d:e8:86:20:27:3f:1c:87:fe:2b:cc:9a:d8:48:fc:
fa:42:43:46:a1:b9:e0:1d:85:58:56:8e:14:4d:78:4f:9b:49:
74:48:05:81:c5:ca:5d:19:29:2d:47:e6:98:f9:98:9f:2c:34:
d7:25:f8:41:65:22:c7:83:f9:7b:24:70:4b:79:d0:71:81:a3:
f4:da:72:93:9a:ac:db:b1:c4:d6:59:38:36:bc:0c:dc:a1:0c:
5d:29:dd:4d:1f:65:6b:8b:42:b9:c7:e7:a1:05:6d:76:a0:6c:
a9:ba:3a:8c:86:ce:98:7a:9c:62:00:60:46:e8:a7:e8:2b:ca:
f5:33:0c:15:35:5e:7f:a9:35:6d:a2:9f:39:91:2a:75:50:fd:
f9:5a:30:ec:64:37:47:1c:5d:8f:9c:8f:75:8e:31:ea:8b:b5:
1c:87:8c:48:c2:07:1d:60:a9:36:67:eb:0a:da:2f:83:4b:1e:
94:4d:5c:81:28:03:12:7d:c2:cd:80:9c:c1:77:7c:bc:83:c5:
8c:66:6e:25:99:fe:4a:18:b8:e3:a8:ad:30:c9:ac:d3:55:75:
c1:0c:70:ed:fd:ac:10:b4:5e:91:8f:2a:c3:84:72:2c:c8:b8:
d5:00:e4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:33 2026 by rpki-client