Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: laAGhgXL0zKpSqQ8cA8yUXnKj0rGot9tifghxzekCV4=
Subject key identifier: F5:C7:6D:B8:3D:F8:87:EC:D5:A6:C6:75:56:24:24:E4:1D:F2:04:47
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019FAA196F63E21014823E7D633838CF72F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 19:00:21 +0000
Manifest this update: Tue 28 Jul 2026 19:00:21 +0000
Manifest next update: Wed 29 Jul 2026 19:00:21 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: gHUD1+gFolxFDIiM1n4URjGnr2zYJp7VAi2nGItqGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:6f:63:e2:10:14:82:3e:7d:63:38:38:cf:72:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Jul 28 19:00:21 2026 GMT
Not After : Jul 29 19:00:21 2026 GMT
Subject: CN=f5c76db83df887ecd5a6c675562424e41df20447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:b1:79:dc:c9:3c:97:71:98:a6:b5:56:ab:
c6:70:bd:60:15:22:a7:53:4f:93:36:6e:f3:07:4d:
7d:f4:1b:8a:2b:a8:3a:88:70:3c:07:cf:75:21:18:
d2:a1:99:e0:e6:df:ab:5d:99:49:e6:7c:33:9a:7e:
97:ef:2a:8f:f1:70:e6:dc:4f:4d:c3:94:4e:bb:4a:
eb:35:a6:fe:f8:8b:da:22:26:50:97:5f:7f:4b:92:
1e:42:78:84:05:d7:7f:5e:f5:df:20:96:a1:0e:3a:
b6:61:d3:33:94:0d:e9:72:a0:b6:4e:7f:59:14:38:
3e:23:87:02:da:70:d2:20:6a:92:51:ff:cf:9e:e9:
56:60:1c:79:0f:35:d8:35:00:b6:25:a6:52:1f:c8:
46:4d:fb:66:3b:fb:eb:87:6d:9e:f1:2f:d2:c8:ca:
ad:2a:d9:05:24:58:c5:6a:8a:17:92:6b:4e:18:16:
c2:05:1e:29:d4:d7:6b:8b:4b:46:27:98:cf:21:26:
5e:74:fe:48:e0:b8:16:b3:96:31:c6:0b:4b:72:3e:
a8:02:75:9a:f5:5f:bf:fa:ec:07:e7:07:b0:62:ae:
a6:97:61:34:03:c5:fc:91:5e:60:53:3e:4d:f0:f7:
ff:d1:ce:7c:08:6b:5d:50:be:e4:68:e3:44:1f:23:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C7:6D:B8:3D:F8:87:EC:D5:A6:C6:75:56:24:24:E4:1D:F2:04:47
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:97:16:62:8a:f4:e4:da:71:58:70:b3:a1:7a:27:a9:ce:
44:fc:46:b0:b8:9a:3a:9c:7d:15:de:e1:45:9b:6d:cd:6d:04:
76:9b:f1:5c:c6:6f:be:25:40:a0:dc:f9:f2:a8:cd:98:28:aa:
85:44:38:09:ed:a6:42:7f:b9:4c:f3:44:ea:ac:70:2c:60:05:
2c:f6:80:a8:e2:11:67:e9:3e:69:fa:7f:5b:87:e9:c4:57:e5:
17:f7:ec:57:e0:98:e2:b2:33:fa:a0:67:4a:35:c0:c4:91:b2:
13:67:79:a8:1e:fd:ed:55:57:2a:b6:3a:4a:d9:38:23:5d:2a:
d4:ca:c1:00:54:7d:96:bd:43:6c:76:3b:bc:05:38:51:90:49:
4f:c9:7a:35:cb:6b:b9:ad:9a:15:ac:dd:3d:24:9f:31:aa:ac:
f0:e5:7e:d2:ef:5b:5f:53:e0:59:3b:a7:e2:4c:16:bb:4a:e2:
e9:f6:1d:03:2a:c1:02:83:f6:56:bb:b1:69:05:f8:79:3a:8f:
1c:30:b8:cd:4f:a5:4b:1c:a8:a3:d3:bf:93:e0:53:66:37:94:
94:67:5d:6b:1f:9b:32:f6:09:f5:58:5e:43:32:13:ef:61:43:
ff:8e:82:32:17:43:47:a4:10:9f:a0:db:1a:7d:24:67:c5:ec:
4e:7e:60:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGW9j4hAUgj59Yzg4z3L2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzdiYjkzMjRmYzc1MGE1M2UwNTU4NDhlZjA2OTAzNDE2
YzNlMDgwHhcNMjYwNzI4MTkwMDIxWhcNMjYwNzI5MTkwMDIxWjAzMTEwLwYDVQQD
EyhmNWM3NmRiODNkZjg4N2VjZDVhNmM2NzU1NjI0MjRlNDFkZjIwNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCWxedzJPJdxmKa1VqvGcL1gFSKn
U0+TNm7zB0199BuKK6g6iHA8B891IRjSoZng5t+rXZlJ5nwzmn6X7yqP8XDm3E9N
w5ROu0rrNab++IvaIiZQl19/S5IeQniEBdd/XvXfIJahDjq2YdMzlA3pcqC2Tn9Z
FDg+I4cC2nDSIGqSUf/PnulWYBx5DzXYNQC2JaZSH8hGTftmO/vrh22e8S/SyMqt
KtkFJFjFaooXkmtOGBbCBR4p1Ndri0tGJ5jPISZedP5I4LgWs5YxxgtLcj6oAnWa
9V+/+uwH5wewYq6ml2E0A8X8kV5gUz5N8Pf/0c58CGtdUL7kaONEHyOStwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXHbbg9+Ifs1abGdVYkJOQd8gRHMB8GA1UdIwQY
MBaAFAV3u5Mk/HUKU+BVhI7waQNBbD4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmIt
MjdmZWY2ODVjYmIyLzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmItMjdmZWY2ODVjYmIy
LzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXqXFmKK
9OTacVhws6F6J6nORPxGsLiaOpx9Fd7hRZttzW0EdpvxXMZvviVAoNz58qjNmCiq
hUQ4Ce2mQn+5TPNE6qxwLGAFLPaAqOIRZ+k+afp/W4fpxFflF/fsV+CY4rIz+qBn
SjXAxJGyE2d5qB797VVXKrY6Stk4I10q1MrBAFR9lr1DbHY7vAU4UZBJT8l6Nctr
ua2aFazdPSSfMaqs8OV+0u9bX1PgWTun4kwWu0ri6fYdAyrBAoP2VruxaQX4eTqP
HDC4zU+lSxyoo9O/k+BTZjeUlGddax+bMvYJ9VheQzIT72FD/46CMhdDR6QQn6Db
Gn0kZ8XsTn5gdQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:48 2026 by rpki-client