
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: C9IbFngjZC5y/QdCkk8CdJehACmxjEeKWuqdzXRgosE=
Subject key identifier: A4:84:84:5C:AE:D5:E1:0D:47:CA:0A:7F:52:5A:BD:1B:A1:86:66:80
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 01A0C256300B3F8CB25DC56CBE0C95E3A2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1767
Signing time: Mon 21 Sep 2026 05:00:23 +0000
Manifest this update: Mon 21 Sep 2026 05:00:23 +0000
Manifest next update: Tue 22 Sep 2026 05:00:23 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: wLUE+9p2DP2WSw1c3BpGeERopbHK/9fCSFaWRdBeHQU=)
2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:30:0b:3f:8c:b2:5d:c5:6c:be:0c:95:e3:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Sep 21 05:00:23 2026 GMT
Not After : Sep 22 05:00:23 2026 GMT
Subject: CN=a484845caed5e10d47ca0a7f525abd1ba1866680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:57:47:ae:84:80:8e:8e:e6:81:45:65:e7:
15:43:c4:40:0d:b9:6a:5e:8c:ab:de:a9:2c:a6:e9:
14:8e:c1:a0:75:e1:be:48:14:31:e3:b2:93:be:44:
03:60:86:89:06:26:ef:27:90:eb:a2:e4:f2:ed:e6:
97:1e:52:fa:49:8a:65:57:2d:4a:f1:9c:42:8f:1d:
39:76:27:8e:d2:f5:29:8f:b8:9b:d9:c1:e4:ea:35:
1d:e7:68:97:10:f2:85:84:fe:1d:07:19:bb:2f:3a:
04:6c:ca:00:ee:bd:b0:1a:12:c1:34:17:e3:32:05:
f9:20:e6:ec:11:71:fe:35:e4:f7:8f:4d:d3:2d:28:
84:16:65:8d:71:1c:45:de:6a:37:d2:ad:65:a8:90:
fc:30:44:67:39:fd:20:d8:2f:bd:3e:15:5b:f6:f8:
2a:cd:3f:8c:0f:b2:3d:53:7e:71:69:e1:88:92:09:
a9:8a:ab:13:3d:02:48:2b:b3:8b:22:bb:db:b1:72:
59:a8:68:32:ad:38:1b:cf:cd:07:f4:8d:b8:d6:67:
b9:00:e0:97:0c:ef:38:cc:04:29:3b:26:08:85:1b:
2b:59:50:5a:9b:47:8a:18:7d:08:2f:2a:af:33:ed:
67:ae:5a:fe:a5:5b:d5:58:44:2e:b7:d8:dd:53:92:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:84:5C:AE:D5:E1:0D:47:CA:0A:7F:52:5A:BD:1B:A1:86:66:80
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:da:95:66:af:2c:6b:6f:4a:eb:bd:43:08:1a:79:52:9c:9e:
00:e3:b2:7a:88:20:7d:74:fd:0b:6f:e4:ea:ee:39:88:bc:d2:
8c:fd:80:fd:d1:ed:ac:48:f7:71:19:1b:4d:52:18:27:dc:de:
0e:7f:2d:fa:db:be:b1:09:ad:f8:36:b6:0b:0d:89:be:6b:8c:
88:98:54:21:39:62:19:db:38:84:fa:fd:2d:57:a0:bf:02:96:
2c:7f:7b:d0:76:c7:84:00:51:90:fe:55:b9:e2:78:69:4b:9a:
ac:24:17:70:9d:fe:a4:3b:05:14:89:a7:dd:94:d7:da:4d:87:
6e:28:cf:10:dd:5a:59:d5:42:c0:51:e8:8e:9b:43:92:b7:75:
f9:83:22:07:4a:bf:1f:93:b2:9b:22:f4:5d:ee:d2:7d:6b:38:
1c:77:1b:1f:d1:e9:cf:84:86:ae:35:4a:4e:f3:cf:4b:70:a2:
09:ec:fb:4a:57:bb:81:cf:7e:63:bb:00:31:8c:4f:83:24:53:
fd:80:45:11:48:85:0e:cd:77:84:7f:fd:b4:63:73:fd:da:d8:
86:e1:d5:31:82:da:60:c9:69:91:f1:8c:ae:11:91:9b:6a:4d:
15:61:96:17:03:85:27:0d:f8:5a:21:fc:a1:aa:db:61:1e:0e:
d6:36:91:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:42 2026 by rpki-client