Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: 7ZCu2JW9RhNEhtAOT4MvjzyOhOwscq6qS86MssXWKWA=
Subject key identifier: 91:86:D2:49:2D:BB:92:81:99:9A:F7:A8:1D:31:03:A1:8C:CC:1A:C6
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019D9AE2E957CE22A67EFEB8113EFF6C8D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0991
Signing time: Fri 17 Apr 2026 10:00:55 +0000
Manifest this update: Fri 17 Apr 2026 10:00:55 +0000
Manifest next update: Sat 18 Apr 2026 10:00:55 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: sxKrUg/O5hq+LtJORDFpG0suwqPHX/80ZeBTmdgJp3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e9:57:ce:22:a6:7e:fe:b8:11:3e:ff:6c:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Apr 17 10:00:55 2026 GMT
Not After : Apr 18 10:00:55 2026 GMT
Subject: CN=9186d2492dbb9281999af7a81d3103a18ccc1ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:47:64:e4:b4:bd:b8:1b:d1:11:8f:c7:1e:
a6:63:2f:d4:1d:ef:30:16:e8:43:08:75:e7:93:54:
b3:e7:c8:9a:9b:c4:14:37:84:4b:d1:3d:db:16:46:
c8:9a:01:f5:a1:50:66:81:df:9e:f4:c7:c3:2a:06:
77:33:f3:17:bd:ce:22:27:9d:6c:2e:21:f6:44:d6:
a6:3e:98:4e:64:44:ff:4f:79:95:1a:70:d0:8e:80:
c0:7e:ed:27:8d:ee:12:51:5e:9a:83:a1:2c:15:c5:
37:7b:52:7a:8e:55:4a:78:c3:ea:6b:15:22:71:da:
cc:18:ab:5f:07:e6:9e:d4:40:67:61:97:4e:e2:70:
64:c0:3c:a4:f1:67:7f:ca:cd:ae:31:1c:b1:9e:8d:
a5:5b:66:32:17:34:2a:fa:78:58:01:46:13:05:ce:
dd:08:5b:44:94:29:b7:c2:c7:0d:7d:51:73:51:6a:
fd:91:81:07:c6:ee:b7:31:49:c9:8a:5f:92:51:b6:
24:01:86:14:6e:8b:31:8e:32:7f:3f:4b:a3:d6:85:
2c:3b:cd:ea:23:98:81:d4:a2:c3:f5:b5:41:02:ab:
bd:d7:1d:9d:a1:35:d6:e0:5e:ca:57:c5:7e:47:ae:
0c:d8:f2:ee:a7:29:e7:62:89:62:f0:75:56:f8:bc:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:D2:49:2D:BB:92:81:99:9A:F7:A8:1D:31:03:A1:8C:CC:1A:C6
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:65:c7:04:3e:6a:0c:0c:11:bc:4d:52:2f:f5:f2:78:e8:42:
62:a5:25:94:97:88:f1:2e:b5:d8:46:5b:ae:4e:8e:ec:d3:22:
5d:af:1c:7a:6b:5a:3e:98:d3:e1:0c:6e:fb:ea:40:e4:cb:95:
a3:6e:c5:54:c2:31:d2:4a:1f:4a:ef:3a:8b:97:8b:c4:9a:11:
18:8f:02:e9:52:4a:4f:47:67:1b:ae:91:d9:29:5e:5b:82:39:
87:77:8d:e6:6a:4e:50:8a:4a:e5:4b:49:3d:44:09:95:61:d6:
65:a0:69:a8:57:99:26:6b:cc:74:e9:46:61:5b:44:40:d5:9f:
f2:e2:c5:39:8c:88:98:d9:b1:c3:fa:dc:cb:ac:7c:a4:8d:a2:
72:53:da:db:c6:e8:9f:71:62:85:4a:3d:82:5b:36:9c:17:e7:
fe:66:21:09:c7:31:cc:c1:79:e4:f4:e9:00:17:61:54:cf:c8:
29:43:dc:82:6e:28:7c:a2:7b:a1:2e:c0:ed:68:23:6c:40:a5:
2c:78:a9:cd:9e:e7:7b:c4:b4:45:61:12:7c:82:49:2d:38:cb:
1d:25:b3:c0:41:bf:14:79:99:85:59:a1:d5:06:7e:bf:18:ff:
95:61:35:b7:07:09:84:52:ee:86:34:16:22:97:65:80:de:95:
d7:99:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:57 2026 by rpki-client