Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: OM0Hy99aHQlx5PwBgvUITAYsTMoyc0ruDGjNpsP7e2U=
Subject key identifier: 0C:EB:49:52:45:96:78:0B:D5:A3:83:E5:24:CB:1F:8B:A6:EA:46:AE
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019CAB6B7AA9C36B8944E7BE724CDB3C71A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: b7P1KFNicmGOoA31ouAnffrflffawloyDwgbL/iZTBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7a:a9:c3:6b:89:44:e7:be:72:4c:db:3c:71:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=0ceb49524596780bd5a383e524cb1f8ba6ea46ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:d3:02:03:ca:32:6e:b5:04:51:77:4c:a6:
51:38:ea:5a:fc:9d:72:5c:85:97:a4:d9:0c:21:9b:
5c:1d:12:dc:cc:c6:5f:26:be:ea:a3:ae:c5:06:d3:
1c:09:1b:d7:c5:0d:0c:27:6b:89:e8:4b:c3:fc:6c:
fb:78:e9:75:73:b1:c6:06:24:35:93:8e:57:81:95:
c1:c0:d2:37:59:52:eb:ff:33:11:4e:52:d5:97:fc:
c3:58:af:d5:40:77:07:9f:4a:29:69:bb:21:c3:10:
b2:ff:8e:59:2f:2d:8a:20:7b:c8:dc:2a:b0:32:73:
ca:d7:1a:cc:0f:51:18:8b:63:2e:6d:e1:17:ff:11:
b2:a8:9b:61:a2:73:8d:9e:30:29:1b:40:1d:b4:7a:
1e:ea:96:1f:57:6b:a9:14:05:6e:f3:19:29:8f:7c:
88:64:b3:2a:b6:3a:be:18:38:9a:3c:c5:33:96:b3:
69:52:65:a0:6e:d1:e4:2d:86:59:c2:f6:bd:92:e4:
94:bc:74:2c:8a:72:0c:82:46:f9:ec:b1:f8:25:69:
5a:da:c8:a2:0e:de:a7:68:e6:f4:cc:9b:5b:09:3f:
33:82:c8:f3:de:27:f9:6c:e0:8e:40:7b:89:ca:d3:
20:07:97:c1:60:63:32:4a:42:3f:a5:45:ad:6f:b9:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:49:52:45:96:78:0B:D5:A3:83:E5:24:CB:1F:8B:A6:EA:46:AE
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:49:74:23:67:b4:9e:b4:ff:c8:ee:73:6e:20:82:b1:fb:10:
20:bd:8e:a9:c1:0c:bb:11:fd:04:c3:0f:b7:80:37:6d:66:59:
fd:6e:64:c1:10:ad:49:36:01:6b:df:0e:ad:53:84:ce:4a:22:
b2:ce:38:51:a4:c4:80:4c:95:6b:44:59:ed:82:96:7c:67:66:
df:1a:cd:93:83:d5:5f:df:c1:00:be:cf:69:7d:a9:15:b7:ae:
25:ee:63:57:b8:7e:46:67:0a:49:12:8d:17:bf:f3:26:27:90:
89:dd:60:25:17:89:f7:59:96:7a:9f:30:00:ac:80:13:39:d6:
17:76:14:0e:ea:2d:3a:57:b7:b8:bf:38:44:12:a3:02:24:c6:
16:ee:a1:23:55:5e:cb:11:d3:2b:13:79:e5:05:a3:4b:ed:30:
d5:c7:69:6d:76:36:1a:91:93:08:93:52:96:7c:6e:6f:10:c1:
78:d4:40:19:7f:9b:7c:26:6c:84:12:94:2b:e7:29:e0:56:71:
2b:82:33:2c:71:fb:ea:ba:66:12:47:f5:ee:cd:1b:5d:04:05:
f1:97:d5:1c:6a:f3:96:64:90:3d:11:01:3f:c9:72:ba:99:7c:
a1:85:28:c0:c2:9d:e8:04:63:47:6b:a2:00:59:6f:77:53:5f:
4f:95:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:01 2026 by rpki-client