Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: f8oEyLR5gpx3A69Mc2kngqFolGcuckGlpPu9p8XNYqs=
Subject key identifier: 35:2E:96:F7:52:7B:4A:7B:43:D8:0B:92:57:4C:3B:B3:B0:DA:25:85
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019D98F45716A34485D8F3A9757158F00DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 18BC
Signing time: Fri 17 Apr 2026 01:00:42 +0000
Manifest this update: Fri 17 Apr 2026 01:00:42 +0000
Manifest next update: Sat 18 Apr 2026 01:00:42 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: GnlDKDlGjkVfq/gYEWagR31vtqD8f6E67DQL/VvyStE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:57:16:a3:44:85:d8:f3:a9:75:71:58:f0:0d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Apr 17 01:00:42 2026 GMT
Not After : Apr 18 01:00:42 2026 GMT
Subject: CN=352e96f7527b4a7b43d80b92574c3bb3b0da2585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:03:d4:23:07:ca:1f:c6:fc:07:e1:94:39:
8c:e1:43:14:b5:ac:56:73:59:28:01:a7:83:e5:0e:
47:48:dc:e7:3d:62:c6:c8:71:5b:bd:95:a6:61:41:
0d:a4:fe:73:62:84:39:50:8a:8a:1d:d8:38:b6:77:
7e:43:6e:ac:83:dd:04:06:c9:23:44:43:76:60:ad:
1b:ba:37:ed:46:c1:6b:98:34:ce:a9:d7:6d:33:03:
b3:86:c7:e6:92:40:59:d4:d7:50:31:83:eb:3a:58:
f2:2d:d6:a5:bb:8f:3e:9b:89:35:80:e9:b4:aa:b4:
9d:c6:24:a7:e2:2d:d3:dd:2e:19:0c:66:b4:e8:c9:
5f:0b:7b:5d:1b:d7:a8:e4:90:af:52:6b:db:be:47:
32:7c:74:53:42:43:a0:35:51:0d:d0:8f:5b:14:17:
0a:ab:68:07:22:c9:49:7a:ce:66:18:79:9d:26:d7:
f3:ea:7b:27:f2:30:f0:23:cd:a8:4c:c4:5d:08:5e:
a8:1d:09:5e:61:93:5a:28:7a:96:3b:7a:d3:94:1f:
62:52:c6:06:09:8f:5d:2f:66:bf:6b:d0:83:84:46:
5c:1d:53:64:ed:c5:f2:10:64:39:03:75:cd:84:ea:
5e:28:9c:1c:cd:73:87:25:af:1e:ae:27:c0:37:41:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:96:F7:52:7B:4A:7B:43:D8:0B:92:57:4C:3B:B3:B0:DA:25:85
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3f:7c:e8:20:4f:86:ce:43:1c:db:c7:89:71:5b:12:8e:a8:
b0:5d:be:34:56:d3:ba:61:ac:6e:22:f0:d2:a6:51:1b:0e:70:
e5:8a:3a:0f:19:5e:3b:da:6c:67:42:d2:ee:1e:82:97:17:0d:
2a:16:0f:6a:12:bf:f5:dd:45:11:48:74:3e:d9:e1:d4:c6:ed:
a3:fd:ca:54:40:26:67:3a:3d:c6:04:6b:fb:a4:cb:9b:9e:1a:
f7:c3:6c:f2:b2:d0:83:dd:1e:7b:94:e9:34:0e:fe:65:08:97:
29:49:5e:7a:83:d8:b2:90:b8:11:fd:d9:4e:20:91:9b:8b:de:
27:58:21:89:72:a6:e8:e5:3e:16:6d:f2:a0:6f:a3:77:5e:5c:
c7:6e:30:f3:d2:c6:12:bf:2e:b6:38:f0:56:25:c2:bd:9f:17:
58:9e:73:43:ac:1f:a7:fd:31:f7:c8:ea:1a:b9:4c:6c:27:1c:
53:39:f2:ce:ef:09:13:6a:d8:79:7d:1b:f3:1d:90:e4:52:82:
35:22:ce:c2:85:59:47:c6:ef:40:35:7f:07:6f:cd:b5:41:08:
50:77:b2:52:25:70:6a:8e:9c:66:33:fe:19:2c:d5:e6:6a:80:
b6:2f:e4:f2:bd:b0:70:58:c1:04:02:3c:0c:a7:ff:ed:78:b3:
63:6d:76:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9FcWo0SF2POpdXFY8A2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzdiYjkzMjRmYzc1MGE1M2UwNTU4NDhlZjA2OTAzNDE2
YzNlMDgwHhcNMjYwNDE3MDEwMDQyWhcNMjYwNDE4MDEwMDQyWjAzMTEwLwYDVQQD
EygzNTJlOTZmNzUyN2I0YTdiNDNkODBiOTI1NzRjM2JiM2IwZGEyNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGAD1CMHyh/G/AfhlDmM4UMUtaxW
c1koAaeD5Q5HSNznPWLGyHFbvZWmYUENpP5zYoQ5UIqKHdg4tnd+Q26sg90EBskj
REN2YK0bujftRsFrmDTOqddtMwOzhsfmkkBZ1NdQMYPrOljyLdalu48+m4k1gOm0
qrSdxiSn4i3T3S4ZDGa06MlfC3tdG9eo5JCvUmvbvkcyfHRTQkOgNVEN0I9bFBcK
q2gHIslJes5mGHmdJtfz6nsn8jDwI82oTMRdCF6oHQleYZNaKHqWO3rTlB9iUsYG
CY9dL2a/a9CDhEZcHVNk7cXyEGQ5A3XNhOpeKJwczXOHJa8erifAN0GtawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUulvdSe0p7Q9gLkldMO7Ow2iWFMB8GA1UdIwQY
MBaAFAV3u5Mk/HUKU+BVhI7waQNBbD4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmIt
MjdmZWY2ODVjYmIyLzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmItMjdmZWY2ODVjYmIy
LzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj986CBP
hs5DHNvHiXFbEo6osF2+NFbTumGsbiLw0qZRGw5w5Yo6DxleO9psZ0LS7h6ClxcN
KhYPahK/9d1FEUh0Ptnh1Mbto/3KVEAmZzo9xgRr+6TLm54a98Ns8rLQg90ee5Tp
NA7+ZQiXKUleeoPYspC4Ef3ZTiCRm4veJ1ghiXKm6OU+Fm3yoG+jd15cx24w89LG
Er8utjjwViXCvZ8XWJ5zQ6wfp/0x98jqGrlMbCccUznyzu8JE2rYeX0b8x2Q5FKC
NSLOwoVZR8bvQDV/B2/NtUEIUHeyUiVwao6cZjP+GSzV5mqAti/k8r2wcFjBBAI8
DKf/7XizY212zQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:13 2026 by rpki-client