Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: KIj8DbGlfyqyc6/bHHf1kor87NUJ9LOIf0A8Mzy2iCo=
Subject key identifier: 9E:D4:3B:7B:E5:4E:2B:E7:B8:B1:7F:AC:DD:CB:6B:BF:47:41:1E:C8
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019EBE7EB666CF1DD49901224E09F5E34C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1954
Signing time: Sat 13 Jun 2026 01:00:35 +0000
Manifest this update: Sat 13 Jun 2026 01:00:35 +0000
Manifest next update: Sun 14 Jun 2026 01:00:35 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: AyEJhQVonqUOvkJ1LR7ssaUm1x+sur6G6GdSMCCy+Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:b6:66:cf:1d:d4:99:01:22:4e:09:f5:e3:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Jun 13 01:00:35 2026 GMT
Not After : Jun 14 01:00:35 2026 GMT
Subject: CN=9ed43b7be54e2be7b8b17facddcb6bbf47411ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:93:c2:6e:cf:08:e7:53:02:68:b8:e5:ca:
4f:fd:39:e8:e2:66:bc:db:28:8f:35:7b:d6:80:cd:
d7:b7:e9:67:82:45:15:cc:e0:fd:85:2a:a2:18:d0:
7c:7d:a2:35:16:4b:ce:d2:35:02:4e:f1:f9:e6:89:
cf:ed:a8:6a:3b:f0:7d:a7:b9:09:87:a7:4c:11:6e:
0e:66:e5:77:47:4f:0a:3a:5e:b0:cd:7e:94:61:b8:
a8:7a:ab:3c:d3:e9:21:48:fa:13:6b:d8:2e:7d:8d:
93:1a:5f:c4:21:4f:c0:a5:21:f4:75:f3:58:bd:56:
25:5d:f1:79:f6:38:b1:f6:94:67:b1:05:4b:64:84:
84:89:94:5a:75:04:35:6e:c7:b4:31:83:14:e6:d1:
b7:bf:cb:dd:c5:09:e2:99:b2:90:a5:c8:2d:9a:b0:
16:16:d3:a4:9f:83:e5:85:77:d2:a0:3e:1a:bb:c8:
1d:07:a1:a3:46:22:71:4c:5e:b1:cb:29:93:54:e5:
db:55:b5:c4:07:ef:fc:a8:56:43:24:a2:1e:18:a2:
bc:35:ba:40:77:d8:3b:4b:36:13:29:8a:2d:4d:ea:
d0:94:aa:67:96:63:6b:b5:85:10:3a:f4:b7:31:77:
5f:08:df:8d:51:fe:15:85:3f:e0:bf:8a:56:b9:c6:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:3B:7B:E5:4E:2B:E7:B8:B1:7F:AC:DD:CB:6B:BF:47:41:1E:C8
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4b:bb:ca:68:ea:77:bd:4d:0d:ac:29:aa:d9:46:c9:4d:f4:
20:84:dc:81:d5:54:0d:23:d8:03:83:c5:ff:c3:cb:6e:20:05:
34:ab:5a:a2:2a:3a:d4:91:1c:3d:58:11:88:4e:66:68:23:66:
36:2c:4c:ad:ab:f5:0d:3f:c2:b4:36:85:1c:39:bc:1b:f5:ac:
d8:62:40:34:e5:e1:31:16:ff:74:ed:a9:9d:4a:df:ae:7c:45:
34:5c:54:22:8d:4e:c1:78:aa:2b:82:23:d3:b1:e5:98:e2:44:
b8:c5:aa:ee:39:67:c2:90:71:0f:c3:80:e2:46:b2:22:e9:74:
14:02:ec:8d:c7:07:a7:a5:41:63:f7:72:77:29:24:9e:77:4d:
db:19:54:89:10:1b:76:0d:5a:b3:ab:b7:f5:7c:32:b5:f8:00:
12:dc:b5:e6:ce:9c:75:b8:26:34:75:19:b2:dd:7d:86:de:1d:
02:ee:b6:70:30:b2:8f:64:0f:76:f3:b3:b2:fb:aa:81:22:47:
7f:f8:32:56:06:be:ab:4f:57:2e:88:70:ce:ff:7c:3e:7e:19:
5a:c0:44:7d:8f:ca:e7:10:4b:b1:ff:93:c8:a4:eb:ec:59:7a:
4d:5a:dd:67:8e:da:7a:eb:24:cc:28:8e:a2:38:de:6e:4b:45:
0e:3e:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:39 2026 by rpki-client