
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: VanxABJr0kGCAzc1oPOLS/ZvrpVbpLaVu7gjf3RJvyM=
Subject key identifier: 7B:87:3A:29:FB:C2:48:F0:71:2C:15:F0:A6:33:02:B0:64:AC:11:3C
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 01A0E8C08A8A62C237F97EE8F5D7FBBEB4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0B47
Signing time: Mon 28 Sep 2026 16:02:07 +0000
Manifest this update: Mon 28 Sep 2026 16:02:07 +0000
Manifest next update: Tue 29 Sep 2026 16:02:07 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: CGTKkas647/4MiUqwhmmjpWgvSckQ5TqJ3NZGyvtkUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:8a:8a:62:c2:37:f9:7e:e8:f5:d7:fb:be:b4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Sep 28 16:02:07 2026 GMT
Not After : Sep 29 16:02:07 2026 GMT
Subject: CN=7b873a29fbc248f0712c15f0a63302b064ac113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:e1:61:e6:68:29:15:86:43:01:b3:41:5d:
e2:7d:48:70:90:47:7b:b0:1b:39:53:57:d8:f9:a8:
70:95:00:b9:8a:89:a8:0d:a8:26:e3:77:23:0b:a3:
a8:51:77:8f:eb:7e:ad:7f:3c:71:2f:a3:0c:e4:95:
a9:c8:9b:2e:03:a3:da:f2:47:27:97:8b:1f:d5:b7:
c4:96:75:44:11:8b:1c:84:f3:aa:e0:4b:bd:a3:a3:
a6:18:5a:ef:0e:5d:ca:55:7a:e1:90:d6:04:ae:f2:
47:24:5c:03:46:d2:e0:a6:a3:6d:39:c0:9c:49:54:
83:b1:4e:01:f7:63:a1:72:00:9a:72:68:d4:d7:9d:
a0:97:4c:45:c9:df:fc:e6:9b:64:f0:d6:a7:32:34:
ea:71:ca:c7:5d:90:10:bc:9e:92:86:24:da:c7:b2:
9b:9d:7e:99:26:c8:9f:4d:73:9e:6b:fd:c9:25:d8:
38:0c:88:c3:06:ee:1c:27:21:10:1f:7f:3a:c2:80:
73:e9:f6:bb:71:87:8d:ce:09:41:1d:41:c1:25:74:
61:34:36:20:cf:fd:f0:9d:96:4b:b5:ed:b2:fc:c4:
bd:40:8a:22:3f:e0:8d:65:81:16:be:61:7b:d7:fa:
97:25:dd:6c:25:f9:ed:ae:bc:0b:ce:0f:de:95:36:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:3A:29:FB:C2:48:F0:71:2C:15:F0:A6:33:02:B0:64:AC:11:3C
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:6f:53:ed:16:ec:b3:c9:86:50:7a:14:72:e5:53:dc:f7:
c2:f3:7d:26:d5:8d:f8:56:78:b3:5b:5e:7d:fc:f0:a0:c7:72:
d2:c0:1a:71:3d:fc:5a:b1:52:a8:78:3e:bb:2e:e5:c8:5a:b8:
68:63:ff:a2:d1:2e:a0:5f:46:a5:1d:d5:0f:17:fa:ec:e2:b0:
dc:fd:cb:ad:70:9a:67:30:28:a2:b3:ef:c7:ad:b3:d4:82:5a:
a5:db:22:65:9b:9a:5c:92:67:40:a0:c3:e9:4c:28:ae:38:0b:
43:56:16:52:e6:41:ea:ef:a1:69:79:ae:36:9e:c7:df:80:d7:
14:f5:65:69:88:21:27:4a:c5:57:72:ff:46:0c:7a:af:7f:2b:
fd:f2:6d:38:86:03:73:be:7b:4c:d0:3e:61:38:f9:43:a2:28:
1e:cf:49:41:e2:76:59:6f:d5:7b:ad:41:4b:d6:c4:3c:10:7f:
59:7b:cc:fd:d6:3b:39:50:0a:58:11:1a:32:98:79:94:7d:b4:
22:59:5d:e5:6b:81:49:3f:5c:28:aa:0b:aa:8d:5a:1b:5c:b8:
3b:d7:d8:54:13:15:7c:a7:de:4e:df:2e:8b:5a:b1:00:f1:3b:
7f:7e:6f:09:ea:48:10:f4:d6:ae:76:40:b3:6c:7c:20:c3:ad:
7c:78:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:34:28 2026 by rpki-client