Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: e0YY4axBrk7gGQx99rQy5ujbFTmXySPRw2hQoAwFxW4=
Subject key identifier: 80:62:7B:DD:12:DD:2B:24:1D:ED:CC:87:3E:AB:83:46:37:4B:51:8C
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01A0D0B68EA6A97139A14BBB6A9AA79E01B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 099D
Signing time: Thu 24 Sep 2026 00:00:19 +0000
Manifest this update: Thu 24 Sep 2026 00:00:19 +0000
Manifest next update: Fri 25 Sep 2026 00:00:19 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: ngZAy5UvB4ofoNexraDrbKh2fiSWZkRTachG3ILNPNA=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:8e:a6:a9:71:39:a1:4b:bb:6a:9a:a7:9e:01:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Sep 24 00:00:19 2026 GMT
Not After : Sep 25 00:00:19 2026 GMT
Subject: CN=80627bdd12dd2b241dedcc873eab8346374b518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:c6:e1:15:29:2c:59:6e:50:6d:79:26:e7:
61:e1:40:f2:16:93:bf:00:3e:0f:69:3a:a3:49:22:
34:9a:3f:28:69:39:25:97:3b:e3:89:6a:f5:ee:71:
87:24:20:47:05:f0:2c:e1:3a:a7:f9:0d:99:8a:33:
d7:30:68:13:b7:44:1b:6b:54:2b:85:4b:19:09:4b:
0d:77:21:22:c3:dd:73:39:6c:f7:c4:22:96:8d:4c:
8d:47:2d:0c:e0:1f:86:c9:17:3b:1a:6b:f9:6f:41:
40:81:66:9e:c0:a0:f4:63:7c:5b:2f:f9:e9:4b:57:
4f:38:36:eb:15:29:91:9a:e9:27:a0:17:e2:52:4f:
7d:c5:99:90:ac:84:2d:3d:55:d3:b6:97:69:50:a1:
49:1c:72:f6:e1:11:4e:7e:84:69:71:3a:6d:e0:7c:
05:59:ba:fc:88:04:08:4a:e8:3a:43:d7:9c:b5:98:
2e:c0:87:5a:03:c2:25:3e:3b:1d:89:a0:9d:40:e5:
76:2d:b4:f0:ce:91:92:cc:ff:03:5e:88:f4:8f:eb:
3d:8a:e8:0c:9e:c7:c8:9b:7b:87:00:68:9c:75:97:
48:9a:ab:e4:b5:9d:7b:0b:1c:7f:16:f3:b0:57:81:
89:f7:59:32:35:f8:e9:e4:68:9c:76:67:76:37:20:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:7B:DD:12:DD:2B:24:1D:ED:CC:87:3E:AB:83:46:37:4B:51:8C
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:17:34:c0:10:b2:4a:e7:57:4f:6a:b8:73:03:2f:14:69:a8:
47:62:66:47:9c:2c:78:8b:04:67:8b:54:ef:e5:04:d9:37:20:
98:2b:93:cf:4e:c5:a3:a3:3f:43:b8:51:7a:77:27:28:86:07:
9e:7e:04:93:29:c0:5b:b1:5d:5b:c4:8a:ec:ab:6f:0c:4c:82:
41:40:58:d3:1e:73:16:6e:4a:d3:91:d8:9a:a4:29:70:e0:66:
29:c8:a0:71:91:3c:df:d6:a4:4b:9b:6a:fe:6d:9c:5a:d7:b8:
ec:95:ec:87:af:df:28:a5:fe:50:4a:a2:ae:ec:3d:b8:22:31:
91:bb:2f:cf:de:0f:68:47:fa:b8:6f:f7:58:00:dd:f0:79:fb:
90:23:51:a2:80:7f:d9:fd:42:41:01:a9:c0:4d:81:dd:a1:5a:
32:86:b0:63:c2:c5:a0:1d:bd:a5:de:53:0b:7e:17:37:56:5d:
d1:3e:4b:88:32:9e:ce:c4:4c:9b:88:7b:90:42:d9:30:7c:e9:
aa:05:a0:e4:72:17:a6:ef:12:ce:8e:f3:4b:2c:3d:f4:a4:51:
6a:52:ef:de:a0:e7:9e:10:26:09:62:55:ad:47:ea:58:33:31:
6a:21:b6:f5:16:a1:42:67:1b:9e:0d:f7:88:45:f1:32:26:a8:
79:d2:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:51 2026 by rpki-client