Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: 0IvV9JS2oMuv4d6ibHEV6aIWun0ncoUWRl/Vc/rszy0=
Subject key identifier: 7D:1D:D1:CD:B2:8C:D0:A5:26:2E:E4:20:62:04:CE:C0:46:44:35:CC
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 019D977434CC4324C709FB330ED2280F884C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 0A43
Signing time: Thu 16 Apr 2026 18:01:08 +0000
Manifest this update: Thu 16 Apr 2026 18:01:08 +0000
Manifest next update: Fri 17 Apr 2026 18:01:08 +0000
Files and hashes: 1: L128U4uHpPB8XXEkgPNjVcIZ9XE.roa (hash: IYk8giMHsoZQEDIjV2cGRAdLhqHOaoQ1gIQuvMVROxs=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: OQHqvKcVaqArp/B7+MYIytBEJDrMAfKWy2OkHKf6tSo=)
3: rVOox5dPkR2CoxnWpLrFqt5-ty4.roa (hash: rByt/VY+jKmLbOAYRP4mcgPGysuMY2q4MeT7LbpcziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:34:cc:43:24:c7:09:fb:33:0e:d2:28:0f:88:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Apr 16 18:01:08 2026 GMT
Not After : Apr 17 18:01:08 2026 GMT
Subject: CN=7d1dd1cdb28cd0a5262ee4206204cec0464435cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:dc:25:19:7c:a6:44:ef:e3:ad:bf:65:16:
ee:43:bb:c5:0d:d2:41:34:5b:26:b3:11:9d:03:90:
81:51:86:9f:cd:3e:51:a5:85:6b:90:fe:ac:78:82:
7b:8a:d9:85:cf:0a:aa:d3:2b:1a:cf:37:54:7c:c2:
b6:b4:18:e0:f3:84:37:49:a8:e5:5c:84:fb:58:45:
46:2b:ae:ae:b5:e5:12:31:4c:b0:81:41:d1:08:55:
88:4b:31:48:81:34:b8:98:a8:30:0a:dc:f1:8a:8a:
b2:5b:62:26:ec:0b:0f:11:82:0f:18:cb:e8:9c:5e:
10:1b:99:c0:a6:3f:b3:07:c3:00:c5:3b:79:b4:6d:
2a:49:d7:c5:d9:0c:9a:cc:e7:87:2b:ea:be:62:dc:
d4:21:91:45:5e:37:b9:72:94:18:37:87:0c:73:74:
00:e5:00:d6:20:dc:f1:07:e4:52:84:2a:9a:84:09:
83:11:5f:ea:7e:9c:e4:01:7c:44:b8:f5:cf:fc:c5:
57:06:61:64:68:86:30:4c:0c:d2:7c:a3:29:c1:40:
e7:3d:5d:91:ef:86:ac:34:8d:71:b2:73:1b:cd:4f:
d1:44:07:75:a8:76:95:da:c3:14:ce:fc:08:ee:65:
06:a4:9c:5d:44:27:d5:c5:85:34:be:50:11:38:13:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:D1:CD:B2:8C:D0:A5:26:2E:E4:20:62:04:CE:C0:46:44:35:CC
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:39:55:0a:59:34:f1:e0:0b:c7:ab:44:bb:25:47:d0:d0:0a:
32:2f:18:e0:df:d3:1d:d6:7d:64:53:f6:d0:d7:69:32:ab:ab:
83:20:d7:0a:59:21:85:c5:8a:82:93:10:b8:76:b6:48:aa:c7:
a2:0d:72:62:06:74:33:3d:17:f2:b2:c5:d3:a3:c8:56:1c:b2:
86:8c:21:62:82:d9:07:ae:09:e5:6d:01:35:57:b6:e8:00:ee:
60:93:da:fc:81:28:c2:e3:88:c9:34:1c:a4:d0:2b:d7:39:a8:
28:ca:a7:8d:4a:89:1a:88:04:dc:5e:b1:97:fe:4b:1f:a5:63:
67:b4:e6:9e:7f:b7:54:10:93:bf:0a:24:06:5b:a6:d0:4a:fb:
0d:63:fd:19:7c:da:f4:15:f7:3a:e2:01:15:09:b7:28:6c:82:
ce:ad:a4:9a:18:a8:5b:f1:e9:e1:7a:f1:b0:04:6a:da:61:9f:
84:6b:ab:a5:d5:82:8b:fd:6a:d4:f0:0b:80:76:30:44:38:7b:
4b:0d:75:c0:27:92:0e:4b:bd:dd:92:b6:0b:51:fa:a3:bd:b9:
5d:90:25:a6:7a:c2:71:00:ab:30:ee:00:6f:70:f2:25:d4:df:
83:1e:12:71:16:24:10:0c:a6:19:92:e7:97:6d:68:8f:e8:df:
7d:49:c2:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdDTMQyTHCfszDtIoD4hMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTA4YmQ1YWRkZmFiZjE1MWQ5MDc5ZTNkM2QzNDEyNjk2
NjZmYTcwHhcNMjYwNDE2MTgwMTA4WhcNMjYwNDE3MTgwMTA4WjAzMTEwLwYDVQQD
Eyg3ZDFkZDFjZGIyOGNkMGE1MjYyZWU0MjA2MjA0Y2VjMDQ2NDQzNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXbcJRl8pkTv462/ZRbuQ7vFDdJB
NFsmsxGdA5CBUYafzT5RpYVrkP6seIJ7itmFzwqq0ysazzdUfMK2tBjg84Q3Sajl
XIT7WEVGK66uteUSMUywgUHRCFWISzFIgTS4mKgwCtzxioqyW2Im7AsPEYIPGMvo
nF4QG5nApj+zB8MAxTt5tG0qSdfF2QyazOeHK+q+YtzUIZFFXje5cpQYN4cMc3QA
5QDWINzxB+RShCqahAmDEV/qfpzkAXxEuPXP/MVXBmFkaIYwTAzSfKMpwUDnPV2R
74asNI1xsnMbzU/RRAd1qHaV2sMUzvwI7mUGpJxdRCfVxYU0vlAROBMkCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0d0c2yjNClJi7kIGIEzsBGRDXMMB8GA1UdIwQY
MBaAFG8Qi9Wt36vxUdkHnj09NBJpZm+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4Nzgt
MDk3YjRkNmQ4MWU0LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4NzgtMDk3YjRkNmQ4MWU0
LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDlVClk0
8eALx6tEuyVH0NAKMi8Y4N/THdZ9ZFP20NdpMqurgyDXClkhhcWKgpMQuHa2SKrH
og1yYgZ0Mz0X8rLF06PIVhyyhowhYoLZB64J5W0BNVe26ADuYJPa/IEowuOIyTQc
pNAr1zmoKMqnjUqJGogE3F6xl/5LH6VjZ7Tmnn+3VBCTvwokBlum0Er7DWP9GXza
9BX3OuIBFQm3KGyCzq2kmhioW/Hp4XrxsARq2mGfhGurpdWCi/1q1PALgHYwRDh7
Sw11wCeSDku93ZK2C1H6o725XZAlpnrCcQCrMO4Ab3DyJdTfgx4ScRYkEAymGZLn
l21oj+jffUnCew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:57 2026 by rpki-client