Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: BrmVfMXjhjQyuD08AgeQ8667x7bz7PG2cU24Hb2syj0=
Subject key identifier: E3:B9:77:A2:26:8C:BC:EA:C9:DB:77:55:A8:82:08:1D:70:E1:0C:79
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 019D9B87D7C09D3EEFD5DB22AFBE9A5C8CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 0799
Signing time: Fri 17 Apr 2026 13:01:04 +0000
Manifest this update: Fri 17 Apr 2026 13:01:04 +0000
Manifest next update: Sat 18 Apr 2026 13:01:04 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: Ci/fqz6f5fti0enEJi2OYMLjBLsvZy1WDzWRnkKr2Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d7:c0:9d:3e:ef:d5:db:22:af:be:9a:5c:8c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Apr 17 13:01:04 2026 GMT
Not After : Apr 18 13:01:04 2026 GMT
Subject: CN=e3b977a2268cbceac9db7755a882081d70e10c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:fc:c3:7b:3a:a0:d7:f8:22:f8:3d:49:9d:
e6:ea:e4:08:10:28:a7:59:46:9e:84:32:07:e0:17:
c6:50:6f:9e:f7:05:ad:75:34:2e:ce:b7:ac:f3:0f:
9e:10:0e:1b:c0:67:06:fa:4e:e7:45:2d:db:f6:ee:
34:f6:9c:de:ee:dc:7a:35:f5:cd:68:fb:d5:35:5b:
e3:8b:63:76:ab:17:c7:aa:ca:8a:4e:2e:cf:96:59:
39:c4:8b:98:c9:7d:20:20:c0:30:ee:df:4c:92:2a:
55:3b:ec:8b:39:5e:2d:10:09:d0:51:cd:58:b0:41:
e5:29:7a:0e:13:4c:db:c5:05:6d:12:dc:41:07:94:
52:61:4e:d4:07:5a:58:d2:17:27:98:d1:6f:28:42:
6d:22:12:3d:2d:12:07:55:ce:e6:7b:cc:bb:f8:9b:
da:dc:b2:ba:57:70:80:db:3b:ce:b4:14:df:dc:f8:
45:16:5f:5a:03:82:e0:d2:ae:97:95:f1:09:07:19:
33:a2:87:6b:e9:fc:97:e0:df:c9:1c:e7:b0:c3:c5:
c6:84:c2:b3:29:54:00:d7:ab:c6:71:c9:87:52:db:
74:a0:ec:6e:51:14:3a:a6:b5:22:b3:05:ba:80:08:
fe:14:e0:3f:ff:0c:9c:19:22:4e:43:79:ce:10:82:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B9:77:A2:26:8C:BC:EA:C9:DB:77:55:A8:82:08:1D:70:E1:0C:79
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0c:6d:d1:0a:b6:84:d2:15:6e:70:66:67:fa:9f:59:09:34:
4d:1d:76:15:3b:f4:15:31:0f:4e:31:ca:15:9c:e7:c7:cc:72:
ea:df:50:6e:e0:f9:0c:2f:4f:d4:e8:c1:a1:8e:68:bd:f9:c9:
7b:95:5f:67:21:6e:25:dc:71:4f:db:85:b2:33:91:10:56:d0:
e1:de:38:8e:76:96:33:a0:61:5a:a3:e5:b5:e0:db:27:b6:a1:
ef:85:c2:9d:5d:8e:0c:bc:ed:f4:85:fb:56:06:35:a9:f8:86:
35:fa:02:1f:90:f2:2b:67:61:ef:39:4e:3b:80:98:dc:59:84:
f5:c9:3e:ce:87:84:f7:c5:33:c6:91:de:b2:25:83:4b:d9:6a:
96:05:f1:f4:c9:55:cd:97:fd:a1:40:92:3f:9e:66:88:c9:43:
03:7e:69:15:9c:c3:ac:b9:f4:12:7d:b9:0b:c2:18:d3:2e:87:
09:45:07:de:ec:9b:2e:28:7d:32:6b:8e:4a:d0:46:29:22:6d:
ce:76:aa:d2:c7:4d:e5:c8:e8:9f:7d:21:e7:56:5a:30:2f:ed:
e3:be:76:53:fa:ac:80:79:e5:95:09:c3:2e:5f:74:a8:11:4b:
01:17:f7:ac:e6:fa:e1:e0:07:15:20:62:1a:5a:76:06:20:47:
1c:4b:29:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:20 2026 by rpki-client