Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: 8T/lSpNeQVmU55Q/NsPqoo6cvBO/QG2tP2tqmMKTuwo=
Subject key identifier: 95:A6:DE:B8:FC:FA:89:2B:F5:F5:E5:F7:A2:57:A3:B2:4D:2C:4E:DD
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019CABA2688731784642F144265BB549AB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1549
Signing time: Sun 01 Mar 2026 23:01:13 +0000
Manifest this update: Sun 01 Mar 2026 23:01:13 +0000
Manifest next update: Mon 02 Mar 2026 23:01:13 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: daqaf85XNW47VD8jlpL5t8PTp7PJmaGP4oCCJtZ+Qgg=)
2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:68:87:31:78:46:42:f1:44:26:5b:b5:49:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Mar 1 23:01:13 2026 GMT
Not After : Mar 2 23:01:13 2026 GMT
Subject: CN=95a6deb8fcfa892bf5f5e5f7a257a3b24d2c4edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:48:a2:55:fa:f3:32:4b:10:80:6b:a8:a3:
f0:b7:3f:ca:66:9f:f9:48:f8:ff:01:30:44:c0:0b:
86:d1:e9:18:5c:64:9b:bc:32:ef:57:95:fc:a4:33:
4c:98:9b:1d:6d:8b:c0:19:b2:77:9c:71:73:51:4a:
e0:eb:fe:05:49:fc:6e:be:0d:1c:85:ff:86:22:61:
19:b0:5e:9a:f8:7b:29:8d:b3:42:b8:fb:07:68:30:
97:c3:f2:22:33:6a:89:8d:90:1d:a7:77:f8:02:5b:
96:60:97:4e:9b:da:91:28:42:84:83:67:3f:26:68:
75:71:de:e9:bb:5d:8a:49:0b:66:65:f4:db:11:9e:
9a:52:fa:2b:6e:a5:92:7f:a2:e3:b3:81:3a:4c:94:
6a:6f:91:80:2c:fb:f1:5b:a2:00:f8:0c:99:d7:aa:
12:13:3f:47:10:d1:98:f5:6b:c5:16:90:e8:2c:35:
4c:d2:14:3f:4e:cb:be:e8:c7:94:a8:4e:38:75:66:
31:13:ae:af:5b:0b:6c:0f:b6:31:b3:9e:f4:82:1e:
63:95:35:82:16:35:73:10:c1:32:92:8b:f0:78:6c:
c2:94:d1:3b:c0:f5:86:ff:96:78:01:fc:33:aa:85:
76:90:e2:60:89:37:15:81:6d:6e:6d:df:6c:0a:55:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:DE:B8:FC:FA:89:2B:F5:F5:E5:F7:A2:57:A3:B2:4D:2C:4E:DD
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:20:6f:d0:47:56:2e:89:71:b4:fb:10:4b:13:e0:97:43:48:
3c:d4:9a:c1:47:7c:28:c5:f8:e1:8e:c2:d3:1d:b6:20:8c:e8:
23:bd:43:44:4e:fc:b1:96:a5:77:25:38:d7:37:79:cc:0d:16:
a0:22:a5:61:a7:f1:95:22:34:82:08:fd:5b:82:54:a5:04:34:
21:3d:2f:d5:94:df:7a:56:78:df:a8:38:8e:9e:2c:fa:de:50:
76:77:53:4d:fa:26:ca:0c:ab:79:ad:85:a9:3b:f5:34:e3:9d:
57:cf:ef:6c:30:fa:bf:c4:ff:d9:53:19:95:24:95:25:11:46:
e0:37:12:11:27:7e:ab:e3:bd:fe:c9:5b:8d:4e:8c:9f:6d:c8:
26:d9:0b:16:96:49:e4:db:97:78:ee:dc:8e:95:15:b0:fa:9b:
6d:31:7a:5d:49:0b:4f:14:6f:c1:60:88:4b:a0:f6:4d:d0:cc:
02:d5:35:f2:49:c8:ce:8a:c1:ba:ea:7c:60:7b:97:36:5f:fd:
c6:7d:15:0b:66:7a:dd:7f:4d:80:e7:4b:ec:a1:5b:0d:1f:73:
cc:0d:1f:2c:d5:32:38:ee:9f:74:48:3f:a4:36:67:32:9e:4c:
de:11:98:c1:7f:64:1b:c2:d3:53:23:12:e7:86:54:69:45:6f:
ff:8e:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:42 2026 by rpki-client