Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: waw2WAklK+6F4xTTw+BkP0aLW+X21kkBjtV7LhjiCTo=
Subject key identifier: 1F:8F:B7:D1:C6:C3:D2:5A:BF:D8:D9:D1:9A:BA:E9:CF:13:DC:42:BE
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 019F9022B47ADA8B4FBB79CDBFD66B08AFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0A4D
Signing time: Thu 23 Jul 2026 18:00:21 +0000
Manifest this update: Thu 23 Jul 2026 18:00:21 +0000
Manifest next update: Fri 24 Jul 2026 18:00:21 +0000
Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: bma/BdlWYb2IPVMKOTUozDQVjZV9fcIOBUuQ0vrP/KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b4:7a:da:8b:4f:bb:79:cd:bf:d6:6b:08:af:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Jul 23 18:00:21 2026 GMT
Not After : Jul 24 18:00:21 2026 GMT
Subject: CN=1f8fb7d1c6c3d25abfd8d9d19abae9cf13dc42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:aa:e0:1a:f9:46:84:d1:70:02:ad:ca:ca:
59:38:2e:27:0f:07:12:86:51:e1:07:47:f5:87:a9:
dc:ef:e6:70:b4:2d:ae:31:c4:26:36:3c:0b:9a:31:
b3:10:71:50:a2:73:cd:44:05:5a:81:48:57:9d:e3:
7e:e5:af:fa:96:af:52:f6:57:ba:08:03:77:08:61:
5e:d3:59:13:53:3e:b3:48:e6:6c:a8:51:df:3c:4c:
de:e7:fc:70:75:37:37:88:23:ef:49:14:26:f2:6b:
0e:1a:22:9e:cd:f5:0f:86:f6:7c:9c:5e:1a:7e:76:
b6:51:17:e2:f5:57:1f:74:9e:29:c2:df:0e:49:d3:
99:07:34:6d:cf:d5:33:38:39:15:dd:20:cb:5d:91:
9d:d1:01:f0:16:ff:2f:ae:d8:f6:a4:5f:a8:2d:39:
b1:e2:b3:79:07:5e:68:a7:fe:a6:98:0b:d9:68:80:
cf:ef:a9:a8:05:9c:85:cc:cf:3e:f6:9b:95:65:80:
36:a8:8c:00:e1:00:b5:72:2b:77:0a:23:40:71:c6:
f4:13:c4:85:68:28:de:17:06:3f:94:e2:96:66:f0:
61:e7:79:f5:bd:0c:f7:3c:18:3f:7e:0c:9e:48:05:
f1:02:3d:37:3a:43:6a:6d:27:7c:d5:8b:d1:f3:88:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:B7:D1:C6:C3:D2:5A:BF:D8:D9:D1:9A:BA:E9:CF:13:DC:42:BE
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f3:c7:b7:e4:8d:8e:8c:7b:66:da:f2:c8:62:76:24:78:54:
05:14:9f:12:5e:0f:a9:14:1c:08:1c:22:48:2e:df:b4:2a:d3:
70:fa:4c:8a:ed:c3:06:87:02:6c:a8:0f:27:57:83:fe:43:22:
57:a7:7f:02:3e:03:9e:f5:88:7e:39:8e:36:81:70:c5:13:a5:
34:01:fe:19:02:44:41:7c:4a:ac:73:9a:70:58:00:ee:c3:8b:
18:77:3b:1a:99:05:38:3a:d3:d1:30:5d:8c:9e:1f:fd:b7:36:
e4:73:55:62:c7:b6:04:ca:f4:b0:9a:34:0b:05:85:75:61:df:
01:1e:42:5b:92:e7:f2:2f:89:7d:32:d9:1d:a9:1c:ba:15:62:
b4:6a:bb:02:56:8f:8a:46:53:a9:df:70:70:5d:28:bf:5a:6e:
51:b2:61:28:5b:03:10:bc:72:6f:e2:d6:cb:3e:ce:9e:82:12:
2e:ce:9a:f0:c4:06:bb:18:02:3b:df:1a:e8:ed:4f:e9:4a:96:
ee:6c:4e:16:2e:49:3a:41:1e:93:9e:c8:4c:f9:4d:96:0b:4c:
eb:60:cc:6e:ba:a3:5f:b0:9c:70:80:b8:db:3c:a4:e8:a2:da:
3f:a3:97:a5:ed:a1:08:d6:c8:6b:f5:86:7f:b6:28:8a:d3:50:
7b:0e:af:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:21 2026 by rpki-client