Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: ImAYcTyolWRIqv5Sa9+N7lMRAZ2VY5C9D4d8fpEd34c=
Subject key identifier: 1D:05:C3:B8:9A:4C:EE:18:CC:79:E4:5F:B2:7C:E1:EF:C2:BB:14:CF
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 01A0C9D93A4244CC71EBC21235586542F146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0B37
Signing time: Tue 22 Sep 2026 16:00:51 +0000
Manifest this update: Tue 22 Sep 2026 16:00:51 +0000
Manifest next update: Wed 23 Sep 2026 16:00:51 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: cX1BUXsOFhz3shP7fgBNLX6TovrP1m+5UbWhpnx7N8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:3a:42:44:cc:71:eb:c2:12:35:58:65:42:f1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Sep 22 16:00:51 2026 GMT
Not After : Sep 23 16:00:51 2026 GMT
Subject: CN=1d05c3b89a4cee18cc79e45fb27ce1efc2bb14cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ac:87:77:a3:8a:8c:a4:d2:6e:63:79:4a:40:
02:72:76:54:3c:4e:94:16:33:68:c0:84:23:e4:c8:
2d:8a:63:98:0c:f7:9f:90:cc:92:77:8f:21:9d:ed:
e6:3e:87:0d:c7:d0:7a:26:c8:44:3a:fd:4e:3e:bd:
98:db:8b:21:f1:1a:18:9d:c3:56:09:a2:ad:ab:08:
d3:2b:78:83:11:20:1a:f1:f4:6a:a1:a4:ed:b5:ce:
e7:ee:28:9c:67:85:04:28:9c:42:ce:28:ae:6a:2e:
83:8c:32:2e:bb:05:e4:92:d9:af:d3:ae:22:7d:cf:
de:24:3e:df:c5:a8:90:61:a9:29:81:fd:e3:e1:c6:
c6:01:f8:a5:ca:59:d2:21:9e:25:b1:02:be:ac:24:
85:c6:84:32:45:98:52:dc:36:bc:1a:a4:d6:45:04:
b6:8e:d2:bc:4e:33:da:dd:70:2d:25:c5:63:89:56:
8c:69:5a:df:bf:4e:e4:d3:a0:f4:b5:bf:af:80:d3:
dc:6c:fb:c8:b5:1b:64:81:68:4e:c9:7c:22:6e:ee:
2e:99:91:49:e4:36:b4:53:e5:d4:1f:8a:65:58:70:
b8:aa:e1:b5:92:89:f2:d7:64:65:a5:37:67:24:dd:
ad:5a:fe:2f:7e:14:0f:af:bb:d2:a6:a2:9e:13:89:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:05:C3:B8:9A:4C:EE:18:CC:79:E4:5F:B2:7C:E1:EF:C2:BB:14:CF
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b3:fd:7e:d4:c2:ab:d0:5f:69:34:9e:d9:4d:a9:e0:d4:4e:
6b:ca:d9:ae:77:28:1c:69:cf:45:f0:8d:60:c9:d7:69:f9:ea:
8b:b6:d5:cf:b3:52:59:b7:74:e4:25:f8:67:ec:d8:d6:5c:64:
28:ed:00:41:b8:b7:7a:94:39:0a:bc:d3:f9:78:c1:34:9b:79:
d6:b7:31:be:34:e0:bf:aa:97:5e:0f:52:d9:1c:70:1b:f1:64:
93:c5:ff:81:33:a2:46:b1:a2:f2:b7:c1:e2:62:54:f2:cc:7f:
a5:63:bc:c8:86:54:68:9f:65:8e:1a:e6:a1:16:48:fe:06:71:
87:45:3c:65:e5:0a:66:d3:3c:16:79:53:bd:01:5e:bd:2c:c2:
49:5b:8e:95:55:82:07:ce:29:70:7e:7a:0e:04:31:4b:9c:b9:
7b:37:92:1b:05:f6:a9:68:e6:b0:ee:36:36:ff:26:81:38:22:
60:a2:f1:5b:d6:89:b5:27:ff:6b:d8:77:fe:cc:39:11:af:96:
9a:a5:3c:e3:92:b2:28:0d:22:44:24:19:3b:6d:db:54:b9:14:
42:c9:59:5a:fd:4a:a2:cb:82:a2:0f:06:99:f9:17:f8:b0:a6:
db:94:29:fc:12:30:2a:57:33:a2:60:e2:1c:38:c3:77:28:a7:
b6:3f:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:39:33 2026 by rpki-client