Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: ddMSLFXiU+ApdCH0K25hJVD105DVz7eaChlpZV3HDJE=
Subject key identifier: 22:A3:1A:AC:59:CE:9C:40:CA:9C:08:B6:F3:77:AB:07:03:83:B5:C6
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 01A0C143730FD9F7D265FAEA35AC29AA7B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0AEB
Signing time: Mon 21 Sep 2026 00:00:17 +0000
Manifest this update: Mon 21 Sep 2026 00:00:17 +0000
Manifest next update: Tue 22 Sep 2026 00:00:17 +0000
Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: U0pZrBt7hPlneqXllqzyuxf1zz/xyRvpXYtLQdN7cpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:73:0f:d9:f7:d2:65:fa:ea:35:ac:29:aa:7b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Sep 21 00:00:17 2026 GMT
Not After : Sep 22 00:00:17 2026 GMT
Subject: CN=22a31aac59ce9c40ca9c08b6f377ab070383b5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:5c:19:5d:0e:83:4d:63:33:68:2b:9c:7e:
8b:49:1d:97:ea:aa:65:92:8f:ce:39:2c:72:5c:45:
81:47:52:28:f5:a6:86:b2:23:93:b6:27:57:90:89:
a6:3e:74:35:96:51:e2:1e:98:b4:2f:fb:9f:ca:f5:
a1:04:84:a5:b2:6d:39:31:a3:4e:ae:dd:ce:e0:e5:
62:fd:52:99:03:02:3b:47:72:dd:ab:74:fb:73:53:
b5:ca:3c:eb:70:1d:09:a5:21:d7:59:f7:ab:87:02:
d0:ff:31:2d:28:4e:d8:d1:fa:1e:9b:aa:dc:af:78:
2c:d8:48:e9:e8:7d:ec:4e:b4:aa:f8:13:37:cc:e4:
5e:77:81:3b:34:b5:43:1e:73:f4:95:f7:a3:35:4d:
7d:d2:06:0b:0e:52:46:03:e9:d6:e3:5d:32:ee:08:
61:bf:29:5e:01:92:35:2a:b1:b6:9f:df:df:c7:ff:
b1:dd:02:59:df:90:f0:8c:98:a2:e3:34:6c:11:c7:
80:08:0a:de:b1:f1:04:fa:56:38:2c:8a:94:f7:57:
f7:f4:94:f3:09:32:24:ab:20:63:da:56:93:bf:77:
85:0c:5d:e8:45:c2:52:47:21:fc:85:6c:a1:1f:a8:
0e:ec:2e:d7:f8:43:66:d0:44:f8:42:64:83:d5:ef:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A3:1A:AC:59:CE:9C:40:CA:9C:08:B6:F3:77:AB:07:03:83:B5:C6
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c9:64:a5:c0:53:8a:65:be:71:04:1a:0c:0b:75:32:17:01:
70:be:04:a5:d8:72:38:eb:3b:98:86:e2:5e:b8:6b:92:e2:30:
ba:42:4b:7b:03:eb:ce:53:ea:dd:5c:c0:0e:1f:53:ca:c3:75:
d8:60:8a:ed:42:12:03:01:09:3d:ae:9e:e9:10:5f:e7:c0:ef:
5f:fc:13:9d:2b:5c:ec:76:6f:1c:1a:0a:85:b8:5f:89:49:27:
5b:df:93:cf:e7:28:ee:2d:d0:6f:98:72:9d:0e:07:da:c6:65:
f9:41:32:6e:37:9c:71:00:a5:94:a0:40:e8:0b:f8:e7:33:1e:
85:a3:7c:3c:92:87:a0:4a:d5:5e:15:a4:49:c1:fe:70:97:7d:
fe:a9:a8:e8:26:aa:db:50:98:b3:56:01:24:74:9d:24:c6:b4:
b0:7c:60:12:6c:9e:49:88:7b:66:5f:f1:83:e2:eb:a3:08:d7:
7e:d3:db:a3:eb:89:25:17:a7:f0:40:62:3b:c5:95:8f:0b:bc:
bf:3e:1f:e5:b8:01:74:37:1b:39:fa:68:1b:13:0c:c8:29:5b:
84:50:ce:8f:60:9f:f5:9d:5d:32:af:67:cb:13:fc:e8:4b:f0:
de:03:fb:bf:28:55:37:e1:22:63:70:c6:b0:8f:e4:83:e3:15:
a5:fb:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:43:12 2026 by rpki-client