Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: DsOSxutrJm3h31VoUVDlX34uWwMNkxoynFtYNHrXTOA=
Subject key identifier: AE:4B:C4:C7:4C:55:B7:4D:25:F3:A6:34:E8:56:24:AD:BF:11:06:CE
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019E2023416DE4D5385265DC62961E5D7BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 09D6
Signing time: Wed 13 May 2026 07:00:41 +0000
Manifest this update: Wed 13 May 2026 07:00:41 +0000
Manifest next update: Thu 14 May 2026 07:00:41 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: +SVwP7xiF1dsebHVDhAaCSU6+DRdf8tEK++lkU9PCKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:41:6d:e4:d5:38:52:65:dc:62:96:1e:5d:7b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: May 13 07:00:41 2026 GMT
Not After : May 14 07:00:41 2026 GMT
Subject: CN=ae4bc4c74c55b74d25f3a634e85624adbf1106ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:83:b1:78:37:aa:14:d8:8c:f3:67:73:22:
40:a8:df:1c:6b:95:5d:49:bd:57:09:9a:5a:e8:aa:
a8:d5:c2:2f:fa:af:43:d1:30:83:80:9d:14:88:50:
46:ff:08:7e:3f:de:ec:08:c3:9b:2a:c2:e9:3a:f6:
77:12:96:2d:8e:c0:d0:94:5f:5f:b9:51:a8:cf:4d:
15:6f:89:68:3a:d1:70:81:76:ec:6c:71:96:1e:37:
9a:35:ad:a6:4b:85:31:58:eb:0d:3c:ff:ae:48:33:
b1:1d:0f:7d:9a:03:10:31:cd:6a:4b:8b:04:d4:25:
86:0a:4f:19:26:48:c5:ad:65:b6:d2:05:98:4d:03:
1c:9b:0c:d1:92:89:43:08:fc:ea:14:f2:b7:05:4f:
e3:78:96:05:f6:fd:69:b8:14:4b:05:85:7d:9e:14:
b2:9e:2d:80:60:65:8a:16:bf:5c:13:c8:cc:fc:57:
2c:a6:8b:54:3f:09:39:06:00:b4:38:55:6c:30:43:
c3:4a:a7:1a:92:54:b4:37:fc:62:d4:f5:77:23:04:
9e:2e:a4:34:30:a8:e8:ac:3b:98:09:cf:de:1f:de:
e6:76:18:ce:96:b3:a6:e3:39:41:25:82:bc:6c:24:
07:6e:d4:13:28:19:f0:6a:af:53:d7:5f:35:32:73:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4B:C4:C7:4C:55:B7:4D:25:F3:A6:34:E8:56:24:AD:BF:11:06:CE
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:45:4c:04:ef:02:0b:87:12:72:98:bf:33:c1:9c:52:d0:32:
cb:2f:f4:8c:29:4b:e0:47:fa:90:9b:56:c2:70:62:b3:a1:07:
11:a2:3c:2d:ac:6e:13:6a:74:77:2e:4c:99:90:ab:a2:e4:3b:
14:a0:78:8b:1b:5d:18:d7:2e:0b:5f:56:70:4a:94:e0:b4:a8:
27:bf:84:48:4e:33:5e:60:7d:dc:6a:5d:54:fb:53:b7:b0:df:
42:ce:89:45:fc:cc:30:c9:47:2d:9a:70:36:fd:6d:88:8e:fd:
4b:89:f4:fe:ee:9a:cb:ed:d6:36:c5:17:a8:c6:e5:6e:49:d1:
70:42:f2:12:b2:b8:24:ac:0c:cc:78:46:00:e9:9c:04:32:52:
e2:d1:69:16:51:8b:a3:8f:81:0a:42:0d:2d:05:11:60:77:e5:
0c:b2:11:00:8b:ff:a0:a5:1e:0c:08:2e:32:50:01:6f:46:86:
8e:0f:e1:62:51:50:96:6f:97:31:32:10:89:d6:ca:ec:86:ee:
00:f1:99:41:ce:b2:12:c1:bf:ae:94:3c:cf:4b:e6:ef:e2:53:
41:49:70:c3:b7:5d:ec:72:5b:33:ab:3f:fa:d4:61:41:8b:9a:
ef:73:3b:79:f5:d8:63:d0:30:45:aa:5c:af:64:9e:27:d2:64:
eb:fa:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:48:13 2026 by rpki-client