Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: Uziap1/cMwsa4zE/cYuZZjQT1g7jA2I+gWSlj+uo1MU=
Subject key identifier: A7:33:DB:8D:34:64:5A:56:C4:FA:A2:12:44:3E:7A:13:14:87:92:5E
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019EBDA29F880FD9853EC35C4201D1A6331F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 088A
Signing time: Fri 12 Jun 2026 21:00:11 +0000
Manifest this update: Fri 12 Jun 2026 21:00:11 +0000
Manifest next update: Sat 13 Jun 2026 21:00:11 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: SJ6mBvX9OhynVEDkANxdy1+pc7xH0rGvgYRehrS83YQ=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:9f:88:0f:d9:85:3e:c3:5c:42:01:d1:a6:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jun 12 21:00:11 2026 GMT
Not After : Jun 13 21:00:11 2026 GMT
Subject: CN=a733db8d34645a56c4faa212443e7a131487925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:19:86:d7:b4:13:d4:4f:40:b2:6a:6e:23:
ba:0b:c1:05:53:fd:c5:94:30:35:8f:b5:70:ab:05:
fc:3e:71:16:69:c6:f4:13:66:21:a9:15:33:8c:4d:
f7:d4:65:14:8e:f1:2c:91:d1:2b:38:ee:0a:7f:20:
7c:ee:99:b4:e3:90:6a:94:74:47:1b:5a:a0:c6:3a:
f2:fd:42:b5:fb:c1:19:76:50:a7:e7:03:fa:83:b8:
9a:bf:16:cd:b3:31:d1:60:b5:8f:79:e3:dc:9e:cc:
fd:9c:f2:46:10:c2:85:4a:81:03:aa:ca:52:8e:f5:
77:82:03:13:5e:ba:93:ed:60:6c:3e:65:4a:64:0b:
c1:8a:31:fc:a6:7d:f1:2b:93:b2:d3:28:0d:d2:81:
2a:44:7b:4b:aa:7e:83:67:63:d6:79:8e:8f:97:a9:
da:2d:6a:92:fd:68:c9:9e:90:ad:f1:9c:15:13:e9:
84:29:a6:03:38:93:5f:41:b2:6e:63:50:ed:b3:7d:
f1:91:c2:4e:5b:3c:a7:8d:2e:22:1f:fa:32:5d:ff:
92:33:d7:3c:db:7c:64:a6:d9:58:5f:c4:07:31:2c:
0a:83:0d:9c:81:3d:20:e4:c9:06:fe:24:52:cf:aa:
53:53:c3:88:ba:30:ba:cb:c1:07:ef:86:65:5f:bd:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:DB:8D:34:64:5A:56:C4:FA:A2:12:44:3E:7A:13:14:87:92:5E
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:48:53:6f:bb:68:8b:b6:95:27:cf:70:80:4e:91:4e:77:
06:d7:c3:11:c1:1e:e9:7c:79:26:e8:06:d0:6a:06:8a:d7:29:
4d:28:62:8b:37:46:0b:14:a8:4b:ab:4a:39:37:99:8f:16:8e:
04:39:2a:03:3c:96:a3:8b:41:23:3c:66:7e:07:ff:ae:04:7f:
fc:fc:e1:69:79:fa:33:40:42:29:08:ac:31:50:f7:7e:6c:20:
03:e1:da:50:5f:e7:c3:99:d1:14:ed:9e:1d:00:0d:28:6d:b2:
6c:ff:96:27:b9:95:a8:03:aa:d0:28:46:3f:19:a1:bb:f3:9c:
3c:48:6c:87:de:ca:33:91:6a:6d:d2:b3:76:53:c7:61:44:fe:
74:fb:96:53:6d:34:c4:14:33:81:3a:e9:49:4e:ad:9f:a2:ba:
37:45:59:ae:d9:1c:2b:33:a8:a5:03:e5:a9:f3:b6:2f:be:29:
ee:14:cb:78:36:8e:a2:df:1e:47:86:9b:23:15:6a:e3:d4:38:
47:22:bd:8a:74:08:dc:cb:bb:9e:8f:38:16:1e:ec:2c:82:1f:
84:dc:0d:cd:29:05:00:fd:2d:40:f8:ff:bf:e2:a1:94:8b:2a:
f0:92:18:e8:7b:5a:e4:03:62:db:e7:35:ec:0e:c1:98:38:b8:
1a:a3:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:16 2026 by rpki-client