Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: DOqFzQsbmEdJQNdA0uiQIWaH2p7nKZ6fAxX1rNk3swI=
Subject key identifier: A8:3D:11:F7:00:4C:0B:36:20:D0:D3:6F:FF:73:34:F8:2E:85:ED:B5
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 01A0CAEBBDCC4367DBBF091053D3BA80E195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0AF0
Signing time: Tue 22 Sep 2026 21:00:42 +0000
Manifest this update: Tue 22 Sep 2026 21:00:42 +0000
Manifest next update: Wed 23 Sep 2026 21:00:42 +0000
Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: b4Xbbn4IadMdv33VnkLjfJGa5rRmoQioSobpxiNm3NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:bd:cc:43:67:db:bf:09:10:53:d3:ba:80:e1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Sep 22 21:00:42 2026 GMT
Not After : Sep 23 21:00:42 2026 GMT
Subject: CN=a83d11f7004c0b3620d0d36fff7334f82e85edb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:10:83:2a:7e:6b:46:66:5b:dc:28:94:0d:
c9:33:8c:f8:16:44:41:98:ab:25:3a:63:a5:c8:5b:
53:1f:38:c3:ef:36:c5:26:9f:9a:25:1a:52:9d:72:
9c:3a:a4:8d:d6:7a:72:f2:b1:13:6a:7d:04:63:d2:
c6:26:b8:09:24:b1:47:8d:3e:44:c4:99:03:fe:46:
ed:97:8d:4a:da:ec:2b:fe:fa:2b:fa:58:d6:bf:e4:
52:2a:c8:f0:ac:c9:2b:60:31:9c:33:d3:d9:e5:ed:
1c:0c:b2:3a:1a:05:b5:03:14:52:c8:aa:2b:7e:1c:
a7:c0:88:4d:58:f3:ff:c6:aa:43:cd:bc:36:af:13:
8f:31:20:0b:fd:f3:a0:1a:86:47:d7:98:4e:57:34:
cc:05:45:61:8d:47:99:fb:df:50:a0:1b:b8:df:5c:
db:c8:19:43:05:01:3a:3e:80:23:ad:ae:5f:64:d7:
5c:c1:ee:d9:2d:7c:6a:d4:20:9e:71:4d:a5:a0:96:
8c:b1:15:f0:49:de:0d:3b:f8:f6:3c:c9:07:86:93:
41:2f:09:3b:35:6e:f3:56:f7:79:22:99:d5:58:0e:
b7:d7:95:a3:6f:9b:d2:59:a3:38:7c:ac:91:04:b7:
17:dd:dd:7e:a3:d4:c4:bd:ad:62:db:cb:e9:bb:b8:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3D:11:F7:00:4C:0B:36:20:D0:D3:6F:FF:73:34:F8:2E:85:ED:B5
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8c:ae:3d:df:67:10:90:9a:e7:c2:58:c1:53:8d:90:51:d6:
a9:f3:16:e7:58:68:84:6d:c4:a5:e7:ed:e2:3b:5e:1f:04:55:
0b:b2:7f:bd:97:9c:ba:41:5a:ac:d5:60:4a:2d:a8:09:cf:3a:
49:3b:97:cc:a1:af:56:35:d3:a0:30:8d:7a:45:68:5d:17:78:
d3:76:56:91:bc:91:22:70:f8:7d:6b:e1:06:d7:e2:db:fc:a6:
98:bd:26:98:03:17:14:06:1b:b2:4a:84:0f:54:38:1f:70:8c:
5f:86:fe:8f:15:8b:40:6f:e4:b4:5e:04:9f:7c:02:ee:69:b4:
69:b4:ea:a8:67:71:27:8b:05:c9:72:07:0c:61:03:2e:93:c5:
b2:55:1d:bb:b7:0d:90:ea:ac:81:e5:1c:63:10:a0:a0:dc:28:
51:d7:42:d7:b6:d2:7c:a5:22:51:b2:5e:19:f8:82:cd:d1:ec:
2a:c5:cf:31:3b:d3:b8:17:99:b2:18:80:c1:2c:5e:7a:33:ed:
98:26:0a:b4:51:6a:d9:bd:f0:c5:33:ca:0b:4c:1e:7f:ee:82:
f5:63:2d:80:6f:91:ae:e8:79:fe:3e:4b:cf:a5:06:fe:df:51:
a6:14:57:ef:40:8f:6e:11:d7:db:a6:17:46:33:7e:16:dc:9d:
db:63:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:48:22 2026 by rpki-client