Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: IMcgYXS007Bs8o751ArZCgvBZJqyzobMkHgsYMMQYZs=
Subject key identifier: B8:19:C4:A0:03:F9:CF:63:81:8B:D6:E9:A0:17:B6:E9:F9:07:1A:5C
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019F92112735D32990B8D5B5AF7703C0EB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 08F8
Signing time: Fri 24 Jul 2026 03:00:25 +0000
Manifest this update: Fri 24 Jul 2026 03:00:25 +0000
Manifest next update: Sat 25 Jul 2026 03:00:25 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: bS21Xk+tgXlnXwy2ZmPFkTiCl4smcV20rnhp83AcmGQ=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:27:35:d3:29:90:b8:d5:b5:af:77:03:c0:eb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jul 24 03:00:25 2026 GMT
Not After : Jul 25 03:00:25 2026 GMT
Subject: CN=b819c4a003f9cf63818bd6e9a017b6e9f9071a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:90:3b:af:bf:a3:1d:5e:82:74:1f:be:bf:
89:ea:66:31:8a:08:31:0d:2f:6e:f9:86:99:7f:d2:
5d:9c:14:53:17:4f:82:5f:7a:23:c0:ea:4d:b4:f8:
cc:51:10:b2:ba:9f:64:cd:7c:0b:88:e3:38:29:5a:
31:b0:b0:26:b1:34:44:06:c4:da:01:ef:01:e2:a6:
36:96:9f:ea:05:d3:7b:83:c0:ba:f1:a4:97:87:b1:
c4:8b:14:5f:31:4c:b7:1c:53:4a:00:c4:99:c4:a0:
8e:7b:7e:d8:82:92:45:6e:15:98:15:09:5a:f2:48:
92:81:fb:76:b9:de:8a:50:04:37:08:f1:46:be:00:
c6:89:62:1e:b9:4e:b4:0b:4f:32:e3:e1:db:01:a8:
88:7f:57:fd:f0:5d:8a:f4:49:2d:b9:1b:59:2e:8b:
69:01:f9:b3:3b:c3:c8:3c:4b:0f:74:34:ad:de:cb:
df:d2:5c:bd:3b:f2:3a:37:1b:1f:cb:7e:f5:47:e4:
03:42:d5:f7:c9:ad:bb:e7:70:9f:54:51:ff:44:43:
92:29:ab:cb:10:75:80:2a:de:44:b6:dd:c3:b7:5e:
89:74:27:9f:25:e0:a6:3f:2c:fd:eb:00:1b:28:31:
b6:b3:fb:54:b3:90:9b:6a:20:b2:77:60:1f:97:5b:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:19:C4:A0:03:F9:CF:63:81:8B:D6:E9:A0:17:B6:E9:F9:07:1A:5C
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:23:8d:98:6f:04:e4:b0:ae:1a:1d:aa:bd:08:33:cd:0d:94:
82:5b:2a:80:1f:f0:f6:9f:6c:c4:89:3e:1e:fd:d7:65:22:1d:
78:9e:66:18:df:80:ff:5d:e9:ce:d3:d0:b5:8f:d1:18:e3:a0:
a4:92:77:fb:97:d2:8e:8f:f9:37:da:91:72:be:67:6b:ad:82:
5e:d1:98:5b:57:6b:fd:e7:48:1b:9c:cf:80:c3:07:0a:b7:86:
2a:66:5e:69:fa:27:5f:80:87:ad:b2:ff:6f:75:c7:f1:05:55:
a5:61:97:49:eb:c1:35:0d:ec:73:0b:b1:44:a9:91:29:88:bf:
63:ae:70:c4:8b:33:f6:1d:cf:a3:09:d0:4b:f8:ed:4a:01:00:
a0:4f:31:e6:dc:b4:36:c0:8b:c0:90:fd:29:f1:e1:87:72:d3:
6f:41:85:88:86:8a:20:f1:fd:cb:62:a4:55:ec:58:1c:be:93:
18:c8:a8:74:39:8e:ba:c1:8a:1d:57:a0:74:71:b2:46:2c:b8:
48:cb:61:19:5c:b6:a0:e6:1d:ff:c6:da:7e:54:5b:68:d4:7c:
47:1d:69:8c:55:40:cd:b8:e6:6b:b4:4d:3e:ef:4e:3e:79:8d:
62:51:29:a5:d3:75:c1:f2:15:e9:9e:89:4f:4b:da:7b:9e:be:
14:df:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:34 2026 by rpki-client