Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: ddipqLkrkmNN/2aqo7GgOwjQ06HBWU3DgQ4simmmCGk=
Subject key identifier: C1:27:22:95:A9:DA:C8:41:AF:23:6B:45:35:0E:AB:6C:09:50:D9:DA
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 01A0E098C79D30BCC60322714F4BFFFD2BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 02:01:43 +0000
Manifest this update: Sun 27 Sep 2026 02:01:43 +0000
Manifest next update: Mon 28 Sep 2026 02:01:43 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: ygQfBzZsEf0f2Ggh35DWQdOp42LiviJqYu4FQzqOHi0=)
2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:c7:9d:30:bc:c6:03:22:71:4f:4b:ff:fd:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Sep 27 02:01:43 2026 GMT
Not After : Sep 28 02:01:43 2026 GMT
Subject: CN=c1272295a9dac841af236b45350eab6c0950d9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:26:d7:83:a5:60:85:3d:c1:07:e8:f0:0e:
20:00:46:e9:05:65:ed:c6:d6:93:6f:d1:49:e8:e7:
93:6b:04:40:86:c5:db:39:63:4e:a3:f0:b4:0f:c9:
f9:42:3f:1f:32:73:22:7d:8a:01:01:54:18:71:f4:
52:20:46:be:fc:88:c7:b6:eb:25:50:4d:40:0e:ec:
ad:94:6e:06:64:7d:5b:05:2e:69:fa:ca:c6:d4:dc:
22:59:d1:8a:a2:c6:eb:a4:06:49:ca:92:b4:4d:12:
6b:4b:72:d0:bd:42:b4:ee:32:c5:48:48:14:61:b4:
b3:e3:96:7a:95:22:12:45:eb:4d:6a:20:c8:a0:9a:
36:d9:c7:0b:3a:8e:be:c4:52:bc:0f:e3:c8:74:91:
98:39:36:ea:94:84:68:1d:15:70:3a:d9:83:a5:ad:
b8:4e:d3:da:98:fb:5a:90:c1:4e:a8:ef:5d:07:c6:
cf:e9:6e:0c:21:68:54:9a:b6:01:5e:0c:0c:f1:b7:
1f:fe:39:6b:fd:42:03:56:ad:a4:a4:7d:ba:ac:28:
b6:86:45:09:b1:0e:f5:e7:c2:5a:d6:96:0a:66:31:
13:94:41:cd:7d:e2:95:b6:1c:6c:fe:ea:27:5e:31:
a8:58:57:ce:d8:2c:02:4e:ae:d5:c2:88:82:68:60:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:22:95:A9:DA:C8:41:AF:23:6B:45:35:0E:AB:6C:09:50:D9:DA
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:aa:09:94:c2:25:4c:bf:79:b3:af:52:6c:46:a9:3d:11:c4:
87:ba:08:ae:0f:20:8c:b9:9a:37:e2:e4:0e:db:4a:9b:d6:e2:
4c:51:83:a0:88:78:07:a2:e2:f3:7d:79:3d:93:02:86:90:13:
0b:98:87:0d:77:71:f8:25:fe:a8:04:7a:43:40:8d:c0:15:49:
83:b8:f1:23:5c:10:9c:f8:76:80:09:13:4a:3c:b5:a9:0c:09:
4c:fe:e5:45:a2:29:25:ac:48:a9:4a:75:98:76:d1:92:42:99:
42:be:79:b6:0c:3a:ea:5c:a7:58:8e:5d:bf:3e:c6:00:c2:a9:
53:33:4e:6a:b1:36:b5:c7:d7:bd:5f:09:7b:84:cb:0b:d9:c7:
92:a6:42:28:5a:2d:55:9a:e4:88:28:1a:bf:92:04:21:3a:e5:
eb:44:2e:37:20:04:74:a4:66:fd:64:15:a0:55:f7:e0:6c:67:
1f:c2:7c:96:95:95:85:00:a2:61:26:c6:15:fc:c7:36:eb:cf:
2f:48:c1:46:2d:06:a3:39:9f:a1:39:49:f7:5d:90:4d:c8:5b:
e8:14:c2:98:95:2c:e9:27:ae:ff:24:52:2e:d8:89:ed:20:20:
97:c2:7f:0d:98:d0:bd:c9:e2:ef:a0:91:88:49:a8:80:3e:c5:
6c:85:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:45:37 2026 by rpki-client