
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: YwkXwCntoAyeQrXvZmUEYLjM80PlIAmul4ah60I5oC8=
Subject key identifier: E1:9F:19:AB:C9:DE:01:6E:D3:B1:81:E1:1F:AF:F8:B6:BA:B1:76:69
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 019CAA8FBE47FA1B220372581D7974C54D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 08CD
Signing time: Sun 01 Mar 2026 18:01:12 +0000
Manifest this update: Sun 01 Mar 2026 18:01:12 +0000
Manifest next update: Mon 02 Mar 2026 18:01:12 +0000
Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: NHL/PMqm2nQeXxcWsO8J/Y1j2IoQtEzO8XFkvqBp9OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:be:47:fa:1b:22:03:72:58:1d:79:74:c5:4d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Mar 1 18:01:12 2026 GMT
Not After : Mar 2 18:01:12 2026 GMT
Subject: CN=e19f19abc9de016ed3b181e11faff8b6bab17669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:00:5f:bb:14:50:b9:e1:f4:8a:00:af:5e:
31:d6:65:30:2d:87:94:6b:02:27:88:f8:bf:ae:37:
6d:76:72:28:91:76:48:23:a5:c8:20:e0:14:27:a1:
53:f2:2b:14:2a:10:64:e5:d7:ca:b8:a9:57:ba:af:
12:c9:49:34:b0:35:e0:da:62:5a:63:a8:74:72:3e:
83:eb:e0:87:cb:c6:ac:16:64:c7:73:d7:61:a5:09:
c0:62:b1:27:44:a6:42:14:08:fe:09:37:74:ea:52:
76:3d:dc:a3:04:e0:91:4e:d0:c7:db:40:91:b6:a5:
de:b5:5a:0e:8c:46:84:d9:ec:e3:06:e1:88:2c:4a:
92:a2:3c:da:8f:8e:61:c0:82:a0:78:a2:b6:d9:73:
9a:f0:3e:6f:e5:1a:b5:d8:22:cb:2c:ac:f7:f0:8b:
70:09:c6:b1:69:e4:57:5a:dd:a0:76:9f:a9:ef:99:
40:36:b6:57:64:ea:e2:f3:cc:b1:46:05:cb:4d:fd:
18:fd:aa:68:11:67:91:56:49:50:2f:ef:44:88:09:
d9:86:27:af:3f:f3:69:0a:65:6e:d2:d1:64:5f:71:
99:3c:f9:8c:b4:05:1e:cd:49:2d:21:83:e8:39:50:
9f:de:f9:15:16:8e:69:e4:80:86:fe:84:07:15:dc:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:19:AB:C9:DE:01:6E:D3:B1:81:E1:1F:AF:F8:B6:BA:B1:76:69
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:f1:3f:b6:26:5b:29:f7:b7:e5:e0:77:69:18:15:58:30:
e2:58:14:8c:dc:8f:b8:14:f3:e8:87:fa:27:b3:87:56:72:82:
95:b3:96:b5:2e:11:88:9d:d8:25:59:7e:38:5c:62:f5:f1:a0:
cf:8b:5d:53:60:9d:e8:05:1e:84:18:91:c5:57:55:45:69:ae:
84:eb:5e:39:17:23:ce:af:cb:30:60:71:c1:0e:ae:50:23:74:
d1:99:7c:63:fe:db:0e:69:a6:8f:3a:fa:18:f6:1b:e2:a8:c1:
4e:cc:e0:57:93:e7:f2:9d:c8:62:41:a9:1c:d4:43:f6:07:bb:
91:c5:ca:91:de:75:04:b3:ba:2c:17:e2:00:fe:b4:a1:3b:f0:
f9:63:aa:c5:da:c0:a4:cc:2b:f4:6c:b4:97:42:9b:34:4b:45:
b5:6e:1b:c1:1c:64:22:f5:37:33:22:ef:6b:7d:49:d8:85:76:
cb:d1:40:f5:5e:62:32:fa:c4:9b:2e:32:75:40:6d:9e:0d:40:
05:c7:4e:8e:ac:87:0d:f0:04:5d:5b:e2:ba:fb:05:91:e5:7b:
ac:a6:96:ef:09:73:b6:3e:22:7e:d5:d1:8e:8c:da:2f:aa:f9:
14:7d:4f:8e:5a:b1:de:fb:2b:28:ab:91:4d:86:10:4a:80:0d:
ab:f7:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:09 2026 by rpki-client