Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: y+ZNsFHLuP4KS48bQ37kuDTudUCjPg0yCHb/91839Fc=
Subject key identifier: 78:E3:04:9F:91:56:CC:3E:35:37:B3:F5:CE:C6:95:9F:D8:5C:AF:47
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 019CAAFD63DEA5A1EB52D31C3DF3BF276D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: Fw+r53zT4r34dPpqFgHE6TQJnDSSLTxWw98nWXRz9Dk=)
2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:63:de:a5:a1:eb:52:d3:1c:3d:f3:bf:27:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=78e3049f9156cc3e3537b3f5cec6959fd85caf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:3d:d0:41:de:e4:d6:d8:7c:35:e6:78:10:
1f:9a:9a:4d:53:d0:b8:07:ed:9a:60:47:1f:27:6d:
9f:54:47:97:73:8a:10:f1:30:82:a7:f9:21:c3:f5:
eb:e5:b5:98:56:cf:28:3f:8a:da:a0:68:1b:d9:bd:
e4:af:40:80:92:9a:68:4d:2c:be:f6:f7:29:2d:3d:
00:5c:ee:ae:aa:5a:8c:ff:46:5c:08:de:ac:37:2f:
1b:ab:38:80:f9:0f:4e:c8:8c:d3:ad:3d:41:0e:5c:
d8:0c:bf:7f:85:fc:e2:75:b4:d6:ba:99:e9:78:f0:
c7:c9:73:1a:1a:b2:a3:ee:0e:42:ac:fc:17:c3:66:
a0:30:8b:38:c0:e6:09:1a:44:e1:a7:57:e3:11:ba:
9a:41:d1:da:50:f7:7e:be:e9:32:f4:8c:d7:c2:81:
79:42:a3:24:bb:d4:38:5e:60:1b:33:c4:fa:cc:93:
93:1b:a9:07:71:c6:7d:ff:a1:ea:44:d6:05:21:af:
67:2e:61:52:a9:54:26:38:6a:ed:dd:d4:bf:0f:9c:
0c:ee:7d:cd:39:ae:b1:3a:bd:f4:f0:5f:b8:93:f3:
82:48:c0:26:91:23:a0:9c:5d:d2:5b:38:cc:cf:0c:
3b:86:55:4e:d0:b5:78:07:be:92:7b:89:64:12:64:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:04:9F:91:56:CC:3E:35:37:B3:F5:CE:C6:95:9F:D8:5C:AF:47
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1c:e7:d9:e4:1b:3a:66:2e:1c:dd:cc:c5:6e:4f:7a:fe:1e:
9a:4c:f6:59:b9:1c:8c:9a:0c:b2:41:58:81:5c:39:fd:68:7d:
30:84:86:0b:4a:22:a4:7f:e6:8a:8d:fb:93:42:39:48:9d:c4:
ae:74:11:ed:85:3f:51:36:a2:6b:d6:15:c4:d9:14:59:9f:48:
7c:28:9f:a1:be:9d:44:8a:af:1f:fc:ba:62:87:15:52:a9:02:
00:7a:48:c0:a2:4d:47:18:68:f6:ef:d1:d4:65:49:a1:7a:f6:
ae:50:a8:a2:85:df:f8:48:3b:43:62:2b:06:10:88:8a:5e:16:
18:0a:42:9e:79:2a:70:77:65:c8:5f:34:91:33:7b:bb:02:a1:
d5:a8:a1:1c:02:f5:12:51:e2:fe:79:05:ec:ae:2b:2b:3d:81:
39:39:f6:ae:d1:02:a6:14:c1:3c:50:c6:80:70:f6:23:4e:ab:
45:f8:fd:d6:2a:3e:8f:cc:19:78:8d:6c:74:30:35:fa:b7:aa:
85:ee:ba:2c:df:50:ff:07:2a:c2:84:8c:c5:de:5e:36:58:5e:
9c:b9:77:ac:29:00:99:36:35:af:8d:ae:5f:9f:cc:b7:81:55:
8b:79:86:ff:4f:3f:ee:66:3c:e0:2e:00:a2:2d:48:9f:06:7e:
6e:56:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:52 2026 by rpki-client