Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: U2MZxEfJFMuHjM63E6Ii+daaGDsfUNpvqg9x2b7cJaU=
Subject key identifier: AD:C0:AC:5A:CD:C1:DF:10:3C:97:F7:0C:78:7D:B3:5E:9B:E9:3F:9A
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 019CABD9C4E65DF77EE64EED8BC4E2CFEC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 1419
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: 7rJeTPGzVUerRi4pZuKdyZPbftQ/kT/Vr8crD3MScu8=)
2: gQ9G1wyw8P68T-YoeRrNExRIJ54.roa (hash: U225Ret2JuGydyVsYjJv8x78fpJD2cYEwUxTjEVRMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c4:e6:5d:f7:7e:e6:4e:ed:8b:c4:e2:cf:ec:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=adc0ac5acdc1df103c97f70c787db35e9be93f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:60:6b:a6:cd:90:da:a8:8d:ff:23:65:0d:
8e:bd:04:fd:ae:fd:e2:0c:2d:bf:c9:92:62:b6:68:
92:d6:71:ce:13:ee:41:8a:f4:18:44:d8:31:75:57:
52:4b:6b:d8:3b:f2:2a:5f:f9:02:5e:03:0f:07:85:
f7:61:04:2f:44:76:ae:6a:df:65:fc:f0:97:b6:e8:
83:e8:99:49:c9:9d:7d:29:38:1e:a8:c5:28:0a:c6:
c8:ce:0c:c5:be:39:67:98:ef:93:08:bb:6f:19:13:
53:3d:b0:6d:bf:43:c3:cc:c1:b1:f1:bd:00:e8:13:
0e:4e:08:f9:78:b5:54:c0:89:5f:e5:3e:68:c7:bb:
4c:5e:e9:a9:3b:ac:8a:2d:15:f9:28:5c:be:71:8a:
eb:2b:b3:dc:d5:2e:6a:df:84:e9:f0:4a:4c:91:0e:
74:e6:02:15:b3:37:22:55:fd:d4:bb:64:4c:9a:be:
6a:c6:70:d2:4a:c5:23:48:de:40:9b:eb:c1:ac:35:
64:22:6c:c7:4a:56:5e:05:64:8f:21:bd:cc:aa:39:
89:c3:ed:6c:13:97:50:7e:91:bb:be:f1:12:cc:f0:
b9:28:23:b2:b0:9d:0f:fc:61:b1:66:16:1e:60:53:
ef:1f:e0:f3:3c:63:70:d7:a3:bc:73:e0:ec:55:f0:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:AC:5A:CD:C1:DF:10:3C:97:F7:0C:78:7D:B3:5E:9B:E9:3F:9A
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e6:8c:45:96:08:85:15:ed:62:b7:87:ba:c1:5a:b7:8c:46:
79:e7:4e:0b:52:7c:36:ef:c0:68:38:0b:da:5f:fb:bc:a9:c3:
fe:f3:64:8d:db:f1:af:46:b9:76:aa:f4:2c:5d:70:58:5a:4b:
23:62:9f:68:d7:ed:5f:6e:db:12:b0:ed:91:aa:8e:9a:b0:72:
03:84:5f:c9:d6:2c:fa:c2:1b:92:57:cc:3b:cf:68:15:a5:51:
64:79:be:dc:2e:27:e9:23:f5:89:45:6f:69:a7:56:24:72:43:
f1:33:44:83:bf:a9:c6:4b:b5:0f:3b:11:84:2b:81:74:48:e9:
53:11:ba:4a:17:c7:fa:af:fd:79:97:94:12:9b:11:ab:0e:f6:
61:27:08:50:8f:92:55:90:9f:61:f6:0b:61:d4:74:d4:da:90:
80:a0:f9:e4:e6:21:7a:7b:ab:59:31:29:50:63:26:7c:cf:9a:
06:ba:24:41:a4:6e:1a:c6:92:19:c7:60:fa:48:43:f7:15:11:
7d:68:f4:ab:0a:7d:c7:2f:93:6f:3b:0c:26:1f:86:7c:be:3b:
db:16:51:ea:c2:f6:45:07:f3:cf:c7:65:5d:dd:53:ad:cb:48:
f8:28:a4:d7:e2:ec:32:ac:27:72:de:69:fa:5e:e2:8c:fa:c9:
f6:9a:9f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cTmXfd+5k7ti8Tiz+xFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4
OTZhMDAwHhcNMjYwMzAyMDAwMTQxWhcNMjYwMzAzMDAwMTQxWjAzMTEwLwYDVQQD
EyhhZGMwYWM1YWNkYzFkZjEwM2M5N2Y3MGM3ODdkYjM1ZTliZTkzZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHRga6bNkNqojf8jZQ2OvQT9rv3i
DC2/yZJitmiS1nHOE+5BivQYRNgxdVdSS2vYO/IqX/kCXgMPB4X3YQQvRHauat9l
/PCXtuiD6JlJyZ19KTgeqMUoCsbIzgzFvjlnmO+TCLtvGRNTPbBtv0PDzMGx8b0A
6BMOTgj5eLVUwIlf5T5ox7tMXumpO6yKLRX5KFy+cYrrK7Pc1S5q34Tp8EpMkQ50
5gIVszciVf3Uu2RMmr5qxnDSSsUjSN5Am+vBrDVkImzHSlZeBWSPIb3MqjmJw+1s
E5dQfpG7vvESzPC5KCOysJ0P/GGxZhYeYFPvH+DzPGNw16O8c+DsVfB68QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3ArFrNwd8QPJf3DHh9s16b6T+aMB8GA1UdIwQY
MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt
NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3
LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+aMRZYI
hRXtYreHusFat4xGeedOC1J8Nu/AaDgL2l/7vKnD/vNkjdvxr0a5dqr0LF1wWFpL
I2KfaNftX27bErDtkaqOmrByA4RfydYs+sIbklfMO89oFaVRZHm+3C4n6SP1iUVv
aadWJHJD8TNEg7+pxku1DzsRhCuBdEjpUxG6ShfH+q/9eZeUEpsRqw72YScIUI+S
VZCfYfYLYdR01NqQgKD55OYhenurWTEpUGMmfM+aBrokQaRuGsaSGcdg+khD9xUR
fWj0qwp9xy+TbzsMJh+GfL472xZR6sL2RQfzz8dlXd1TrctI+Cik1+LsMqwnct5p
+l7ijPrJ9pqfdg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:02 2026 by rpki-client