Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: eqji+TVCRiObQlzC41VUfB/8ka/BvK2Vt89QKl4Wtsc=
Subject key identifier: 7A:A0:86:04:48:E5:BF:D6:AB:A0:9F:12:68:A2:E5:8D:F7:C3:09:E6
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 01A1C2F93E7CC5BB6003C9087CB2EA80F7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1AE4
Signing time: Tue 10 Nov 2026 01:01:16 +0000
Manifest this update: Tue 10 Nov 2026 01:01:16 +0000
Manifest next update: Wed 11 Nov 2026 01:01:16 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: qL0clMSTobvU3hw8u9UbmSGIilZdK5Ff8x1DOIt+Pgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f9:3e:7c:c5:bb:60:03:c9:08:7c:b2:ea:80:f7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Nov 10 01:01:16 2026 GMT
Not After : Nov 11 01:01:16 2026 GMT
Subject: CN=7aa0860448e5bfd6aba09f1268a2e58df7c309e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:c9:a7:36:96:cc:b1:59:b9:5d:9c:e0:25:
e5:01:7f:55:57:d1:fc:46:8d:38:b9:91:91:06:80:
d9:a9:56:52:d3:c0:2b:0e:3d:ef:57:17:89:f2:35:
53:84:4f:ff:2b:bc:b8:7f:79:31:24:ba:bd:44:68:
1b:04:b9:d6:1e:98:d0:8b:e9:cd:c4:eb:67:f7:17:
74:ae:45:58:f9:76:41:48:07:09:b9:87:76:3b:b2:
74:9f:07:24:0c:ca:44:5e:f6:ea:fa:25:28:e8:b2:
9c:ea:03:1f:a8:49:83:04:6f:b1:cc:ad:fe:90:95:
fd:ad:6e:6e:5f:02:f5:ef:35:2a:cd:8f:c1:1a:c9:
b2:d3:cb:01:5f:22:7c:de:a1:d9:aa:b3:b7:fb:2f:
55:c1:7a:f8:4a:ff:52:5d:23:bb:57:69:9a:cb:fa:
2e:99:24:5a:0d:57:8a:88:10:59:fa:99:4e:66:13:
52:50:28:df:c6:c3:d8:3e:96:1d:e8:10:32:ab:5e:
5f:42:05:fc:43:80:c1:fa:7d:17:f8:5d:af:13:5a:
55:21:5f:78:21:b7:16:a0:ae:b8:ba:bc:f8:af:38:
e9:a4:e5:19:1d:52:02:d9:85:83:bc:91:a7:e9:9c:
b6:a3:4b:a2:66:c7:24:84:af:b9:79:74:0e:1f:66:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:86:04:48:E5:BF:D6:AB:A0:9F:12:68:A2:E5:8D:F7:C3:09:E6
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7b:f2:38:4e:c1:33:40:78:cd:ab:34:db:fa:58:f5:f5:96:
34:9a:23:47:77:39:35:33:fc:ec:3e:23:84:7d:63:41:51:56:
b7:00:c2:1f:28:16:8d:34:2a:70:2c:65:87:c6:b3:c3:29:e0:
81:a7:26:93:5b:9a:a2:c9:94:46:89:c4:ae:3f:bf:1f:71:5b:
ce:5a:31:69:12:58:a1:2a:ac:3b:0b:61:68:df:22:55:2e:f7:
b2:6e:20:73:46:a5:7e:b6:e3:8d:fe:a1:f7:4a:6a:93:db:91:
94:3f:17:4a:ee:62:e9:81:0c:20:65:22:2a:e3:a0:8f:ee:c0:
27:d3:ff:26:0f:cc:09:c0:38:81:ac:8b:76:c0:93:3c:e3:4e:
52:c0:56:28:1d:4f:55:0f:61:36:ba:84:6c:68:5c:19:ff:0c:
3f:d9:82:86:3f:6b:21:8c:52:8c:d1:ac:d1:83:74:0b:3e:b6:
4d:10:6a:71:e1:38:42:1a:37:02:16:f9:7f:1b:24:6a:ed:cf:
c6:0f:ae:ae:31:cb:f4:52:a3:79:92:8e:67:cc:51:e8:0c:78:
04:6a:dd:16:24:3f:71:7c:cb:17:1f:df:f9:96:f6:a7:8e:d8:
1c:85:43:b3:72:2b:17:79:39:9e:cb:fe:ea:ea:fe:fd:51:5d:
3f:5d:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 12:04:18 2026 by rpki-client