Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: 1LslJXyBqouy12edPeBG+DP+JJg6JcLOT3jf/Wm1ASA=
Subject key identifier: 52:BC:D7:61:30:10:01:0E:EB:85:CB:9A:B7:AE:48:56:C7:AB:50:4D
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019D28F2F81570098F14367645405EE23AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0956
Signing time: Thu 26 Mar 2026 07:01:44 +0000
Manifest this update: Thu 26 Mar 2026 07:01:44 +0000
Manifest next update: Fri 27 Mar 2026 07:01:44 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: KYitW9HEjI6GoYJ6/5xUuzCSUrefr6A4V0uaXC2/9So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f8:15:70:09:8f:14:36:76:45:40:5e:e2:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Mar 26 07:01:44 2026 GMT
Not After : Mar 27 07:01:44 2026 GMT
Subject: CN=52bcd7613010010eeb85cb9ab7ae4856c7ab504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:f9:d2:a5:29:ef:3e:da:93:73:ad:19:74:
7c:64:89:ed:d1:70:33:6f:95:7c:c6:d5:fc:e6:e9:
fc:07:fe:fb:8f:7c:19:37:9e:5d:79:13:e5:bf:e7:
7c:33:7a:e0:e1:53:fd:cf:92:8e:db:07:34:f9:c8:
fa:1e:a5:07:b5:c3:92:6e:2c:07:6f:61:c5:61:f7:
bd:98:c8:8e:bb:dd:27:65:87:ed:90:da:d4:52:68:
02:43:9c:d4:ed:2c:c6:31:8a:f7:d6:cb:3a:45:78:
80:14:a3:ae:7e:e9:b1:d2:e8:05:07:f1:e6:62:2f:
ca:c4:ed:4e:85:16:ff:86:23:df:1a:2c:a3:84:dd:
95:74:66:e6:a4:8a:c8:c9:cc:15:2b:9d:69:6b:8b:
e0:d7:cd:72:6d:84:08:5b:f0:28:51:88:8a:06:21:
30:7b:68:2b:2d:33:13:8f:d2:3d:f5:d3:8d:1b:58:
61:bf:00:5a:a9:30:7f:90:e6:77:e7:32:53:71:99:
c6:ec:10:2d:f6:56:90:05:37:b9:0a:37:79:ba:c5:
24:97:22:77:97:d4:09:0f:d6:9f:db:17:a7:ef:31:
91:72:e8:75:a0:50:a5:51:d2:ff:b1:19:d3:91:a7:
fb:76:a8:a4:08:07:f4:2f:c1:92:a6:f8:df:8e:45:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:D7:61:30:10:01:0E:EB:85:CB:9A:B7:AE:48:56:C7:AB:50:4D
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:e5:31:7e:6a:ab:9e:51:ef:1b:d4:f8:77:c1:5f:e7:e3:
32:60:2a:91:0f:44:20:92:01:34:07:e7:b5:f1:51:08:8b:eb:
b6:f2:bf:3a:51:78:4f:4b:e9:29:d7:0b:26:c5:91:2b:df:da:
60:f6:c6:a7:03:6f:f3:7d:79:9e:ba:e8:1a:df:5c:a2:08:23:
42:c7:e7:f8:af:2e:9e:af:1e:be:ae:a9:9f:7a:f7:71:7a:f1:
b0:9a:47:da:38:d1:c2:5f:bb:b5:57:28:fe:ab:4d:16:ee:7f:
02:63:4c:5c:31:6b:b1:ae:58:d9:1a:86:24:cb:56:dd:b2:21:
a8:ec:e1:75:ea:3d:4d:61:34:97:2b:fa:f7:9d:d2:93:de:62:
c5:84:c9:83:4a:4d:26:15:a1:7b:ca:a5:cf:53:18:ff:8e:c0:
79:ba:1e:62:f6:88:10:ba:05:f5:95:87:54:8d:05:6a:87:1c:
32:09:d9:d1:fc:49:ae:cd:f7:b3:3e:3d:66:7e:88:bb:ae:35:
81:fe:03:91:df:e5:72:ce:d1:10:9b:b4:03:94:c8:d8:aa:0e:
a7:9c:c1:d7:2f:b0:b9:ed:45:ef:82:37:36:b8:f5:4c:fb:3a:
9d:db:e5:30:ec:8b:72:98:90:c4:23:d8:3f:b0:7e:91:46:5e:
1d:67:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:29 2026 by rpki-client