Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: yALZp42WrU+6f+DjyW3VSKppxt3fqDUJuxi2Ri4Lk0A=
Subject key identifier: 4D:22:E4:2A:22:2C:D9:87:E3:16:3E:9E:71:73:48:4F:70:66:C1:63
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 019D29970532940D1ED4A92C032D7317D0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 075E
Signing time: Thu 26 Mar 2026 10:00:56 +0000
Manifest this update: Thu 26 Mar 2026 10:00:56 +0000
Manifest next update: Fri 27 Mar 2026 10:00:56 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: OYv1V//HJX9ouqWU1iO4fxwKeht9pgkEBSu+7NCNSV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:05:32:94:0d:1e:d4:a9:2c:03:2d:73:17:d0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Mar 26 10:00:56 2026 GMT
Not After : Mar 27 10:00:56 2026 GMT
Subject: CN=4d22e42a222cd987e3163e9e7173484f7066c163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:79:f6:65:f6:86:39:a4:c3:7e:ee:bb:f6:
62:58:a3:a0:20:dd:1d:d9:80:a2:63:ed:bb:aa:f9:
6a:d5:8f:78:0a:bc:c4:3d:f2:0b:18:54:64:ed:dd:
74:4e:e8:c5:d1:12:f0:d5:d4:fc:53:21:2e:ee:0e:
92:b7:37:47:23:32:f7:f6:7f:6f:04:3b:0d:85:50:
03:1f:e0:15:48:ae:c0:67:63:87:9f:02:7c:29:19:
92:28:b7:9d:6e:83:d6:68:76:5c:34:70:7a:76:d0:
2c:bf:c7:f4:9a:74:31:c5:94:07:51:9c:a4:40:01:
84:fb:4d:d3:23:ff:f2:55:8f:b7:33:58:19:cc:7e:
8a:8a:19:37:86:9f:16:3b:4a:3a:5b:28:bf:f4:50:
e8:3c:41:16:6f:40:4c:ea:7a:46:24:53:ae:19:3c:
da:04:5e:e7:b2:3d:48:19:21:ce:34:bd:ca:0c:40:
98:8b:e3:3e:d8:d7:e7:6c:e9:78:77:a3:96:3c:dc:
0a:fe:52:f9:2f:5e:3c:e8:9f:62:9d:5c:ad:17:a6:
bb:33:ba:44:e7:d4:a2:67:ed:77:d6:c1:90:40:82:
07:fc:d0:0f:33:4f:69:f2:ea:3d:2c:9d:3f:88:ed:
09:4d:91:0e:93:f1:5b:a0:02:6e:b7:55:25:22:d2:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:E4:2A:22:2C:D9:87:E3:16:3E:9E:71:73:48:4F:70:66:C1:63
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:f7:56:37:30:12:fb:e0:3d:cf:88:c1:41:21:47:46:64:
37:9b:53:9f:ba:be:83:e7:0c:64:d1:50:2e:a3:e6:c3:4a:d2:
15:c1:51:d2:cb:db:8a:0c:ac:23:e2:c2:b8:e8:a5:6c:6c:ae:
77:d4:50:77:75:dd:75:7c:d7:e3:cc:87:54:4f:86:e5:f3:21:
3a:ef:7b:b4:b3:98:59:8a:08:9a:15:20:69:84:8c:db:fa:ca:
70:3d:31:41:87:2a:3a:1c:48:d2:98:fc:56:e4:1e:e5:3a:1f:
fa:62:59:af:4c:17:36:d1:54:bc:01:2f:9f:3b:3f:47:ca:9b:
06:e4:53:a3:54:fb:1f:2c:af:2f:4c:b1:7b:40:8e:8f:6f:d4:
72:4f:5f:05:fe:d8:94:14:9d:6f:31:61:89:59:32:28:e5:5f:
71:87:d9:9e:04:26:03:12:c1:82:db:fd:52:a2:02:4a:96:df:
49:66:24:97:3b:d0:6e:32:4b:ad:93:81:da:1f:bc:aa:0e:40:
19:c5:53:c9:9a:2c:2c:c5:c7:b8:11:84:3b:cd:e8:af:b0:9c:
6d:76:88:63:87:ef:1c:1a:26:61:5a:3f:04:0b:a2:81:1e:db:
aa:e8:57:dd:ee:7c:a0:e7:69:50:49:df:ed:7c:96:13:f4:0f:
bd:f3:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:44 2026 by rpki-client