Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: On+lVsa2zBVJ+MnfPEzjDqYjW5c+p8HMw28QJKWfK2o=
Subject key identifier: 59:C2:1B:75:53:DB:D3:AA:EF:4D:69:B6:ED:C2:0E:37:48:CA:C4:2E
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 019CADFEB3C26F1E48D61E4001C6027A8AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 071E
Signing time: Mon 02 Mar 2026 10:01:16 +0000
Manifest this update: Mon 02 Mar 2026 10:01:16 +0000
Manifest next update: Tue 03 Mar 2026 10:01:16 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: YInTvqAL3sULaPHduggR2ei9O/Zbr5MSsNNxUSpqs8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:b3:c2:6f:1e:48:d6:1e:40:01:c6:02:7a:8a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Mar 2 10:01:16 2026 GMT
Not After : Mar 3 10:01:16 2026 GMT
Subject: CN=59c21b7553dbd3aaef4d69b6edc20e3748cac42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:b7:82:f0:f5:21:d9:87:fd:3a:9d:d0:c3:
32:4f:61:73:6b:76:86:c3:af:c9:9c:f1:ae:6a:2f:
8f:cc:d9:dc:f8:d9:34:4b:01:02:15:1b:cc:c8:48:
57:22:50:fb:c2:28:f9:e6:8a:d3:9f:2b:be:8b:87:
c4:97:47:80:77:b7:02:45:02:4f:62:e5:29:cd:0c:
92:a4:71:8d:57:21:8e:9c:9c:c0:a6:84:b3:86:24:
92:fb:4d:3b:37:50:d7:9c:5a:0c:92:bd:31:57:b7:
6f:26:1f:a7:b9:39:41:ff:5d:e1:20:21:09:05:1b:
ba:c4:50:ba:31:57:c0:f8:5e:06:1c:c1:d2:7a:a3:
27:91:57:cd:8d:ac:c6:49:82:07:f9:57:78:dd:3d:
67:e7:0b:66:2b:23:96:27:48:8c:70:6c:11:1f:f1:
40:cc:5c:4b:8e:30:a2:b4:97:f5:67:07:74:62:77:
e0:12:9e:ab:50:3a:7d:c1:4e:e0:e4:68:b0:61:2c:
0a:5b:f1:fb:46:d0:dd:71:0e:7b:07:38:a7:83:82:
04:52:12:ed:71:e2:49:92:69:f1:49:f7:1a:fb:f9:
58:37:b9:21:2c:92:84:41:b2:21:29:15:a1:72:0b:
5c:81:67:cd:a9:de:50:c9:64:c3:47:bc:52:a5:73:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:1B:75:53:DB:D3:AA:EF:4D:69:B6:ED:C2:0E:37:48:CA:C4:2E
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2f:39:ed:5a:78:1a:9c:4a:47:c7:05:28:32:01:91:3a:60:
1e:93:7f:2c:58:f8:e2:5c:5d:0f:06:d1:74:c7:82:37:c7:25:
55:79:dc:bf:4e:66:14:8f:a7:36:39:50:ed:0a:03:5a:d7:ed:
e1:76:9b:fd:13:d0:7d:15:86:42:2b:78:be:16:8a:68:67:7f:
f2:0f:a5:ce:4a:85:53:47:76:17:f9:67:73:c6:f1:33:58:a1:
85:39:b5:b5:93:e3:03:cb:ea:57:31:a7:f5:90:f9:81:f3:ca:
15:fa:33:5a:44:7e:76:16:9c:79:68:c0:e4:ee:f7:39:ec:79:
a7:42:99:f7:56:3a:48:c3:0b:97:b8:ee:e5:24:0a:17:6f:43:
24:77:ae:c2:45:74:64:28:2f:83:38:ce:c6:16:3e:5d:6f:b2:
ce:f8:dc:2e:98:3a:99:66:e0:81:0c:5e:4b:29:0e:c5:67:cc:
ad:25:c4:df:76:ba:b3:7d:f3:e5:e8:93:2b:67:e9:82:3c:9c:
f6:3c:84:2a:88:19:d3:5d:70:08:2a:df:16:6c:b3:d6:51:5d:
4b:38:80:7c:8d:9d:4f:24:ea:28:75:7a:be:32:97:a8:7e:83:
aa:10:c6:5b:27:00:7a:95:b5:cc:2f:33:c8:02:e8:09:fb:e3:
30:17:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:07:03 2026 by rpki-client