Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: +BHzYu0wN7LBc61VMg9yNw/+SMVgPTB+vLavxCtnzv4=
Subject key identifier: D2:6F:C5:BE:F2:95:DC:D7:CF:0A:3B:3E:48:C9:6E:C6:A5:0A:00:27
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 019D273AECA2EF47B29D8BABE4FD99D341D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: YQR-M13FITu11JiiH0aP1_gjSMk.roa (hash: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: sqnYU64fVn6Gg+d7Pvwd0HzAnRewFM1oUMnbhRo3CrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ec:a2:ef:47:b2:9d:8b:ab:e4:fd:99:d3:41:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=d26fc5bef295dcd7cf0a3b3e48c96ec6a50a0027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:3a:90:14:96:3d:08:42:c9:d8:72:3a:e6:
8d:7c:7d:44:5c:c6:3b:7d:7a:6f:66:f2:8a:bc:d8:
ff:ae:a2:60:b1:05:f0:e6:c9:e6:5d:b3:48:97:7b:
50:d6:cc:af:36:1b:fc:64:4a:7f:b1:f9:1b:33:4e:
1e:13:23:d4:65:0a:50:d7:6b:43:41:13:9e:82:fb:
38:3c:9f:03:02:62:8b:c3:b0:fd:1c:59:28:00:fb:
35:05:a1:23:c6:47:d6:b1:5e:b1:19:d9:20:6e:ac:
2d:e4:28:26:d7:b3:73:45:09:a9:7d:aa:d2:c9:b1:
91:a5:81:f4:0a:ca:b4:69:17:3a:06:74:08:6d:5e:
7f:e5:b0:94:fe:ca:68:7f:f3:85:7f:c1:ed:2a:8f:
d3:93:e9:e1:a5:25:1c:f2:b9:5a:18:24:c9:55:8e:
b6:93:af:2b:b4:69:47:45:33:71:60:55:d8:86:e2:
1c:d1:61:b3:cc:c8:ab:b2:79:93:b6:40:ae:22:be:
67:cd:f6:b8:91:cd:4f:bc:bb:2b:e5:f5:fb:ed:2e:
78:65:6b:e1:74:ce:ff:34:f8:81:a1:ea:6f:ad:2a:
3e:b8:b6:a3:f4:41:df:29:4e:ee:27:60:c0:0c:28:
01:4a:ac:14:40:b2:3b:c6:36:6b:61:22:ac:c6:24:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:C5:BE:F2:95:DC:D7:CF:0A:3B:3E:48:C9:6E:C6:A5:0A:00:27
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:30:df:4d:ea:0b:8b:53:5a:b2:c8:11:d1:3c:fc:fa:1c:30:
f5:e6:86:13:f3:3c:6f:64:b4:28:a8:d6:bd:42:81:e0:92:88:
c8:88:4f:4c:b2:12:fa:e8:77:8b:95:bc:3d:ee:0a:1e:d5:86:
b1:5f:7a:8f:82:35:42:54:1a:8f:44:e3:4f:08:de:ce:0a:73:
6a:73:49:0f:7b:03:53:e7:39:48:84:be:59:56:97:fa:5f:5c:
21:8f:e7:a5:15:c4:4f:c1:67:a5:49:d6:24:a2:fb:19:f1:3a:
0e:d7:04:01:c8:1b:aa:7c:7b:26:78:e9:8a:a2:54:8a:1a:36:
a5:14:19:0b:35:7c:46:07:f3:db:5e:17:98:67:75:b9:bd:a8:
a8:b8:43:25:06:b1:67:a5:89:51:f5:c4:7e:ee:33:8a:5c:11:
51:fd:b8:36:01:a0:e6:5c:3d:9e:77:9a:48:cb:1f:12:97:96:
53:17:09:87:90:b1:ef:78:99:62:ca:cc:5b:65:6c:22:1f:e4:
df:21:d8:38:a5:98:e0:a1:91:e4:44:a1:ec:94:eb:28:18:2f:
db:b3:e4:8f:46:82:bc:70:6a:bf:a9:ca:29:79:7c:e7:21:76:
d8:32:ea:f8:cc:59:58:b8:00:95:7e:6a:70:d7:12:d5:bb:4d:
d1:61:73:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOuyi70eynYur5P2Z00HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw
MmFlODIwHhcNMjYwMzI1MjMwMTA2WhcNMjYwMzI2MjMwMTA2WjAzMTEwLwYDVQQD
EyhkMjZmYzViZWYyOTVkY2Q3Y2YwYTNiM2U0OGM5NmVjNmE1MGEwMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0g6kBSWPQhCydhyOuaNfH1EXMY7
fXpvZvKKvNj/rqJgsQXw5snmXbNIl3tQ1syvNhv8ZEp/sfkbM04eEyPUZQpQ12tD
QROegvs4PJ8DAmKLw7D9HFkoAPs1BaEjxkfWsV6xGdkgbqwt5Cgm17NzRQmpfarS
ybGRpYH0Csq0aRc6BnQIbV5/5bCU/spof/OFf8HtKo/Tk+nhpSUc8rlaGCTJVY62
k68rtGlHRTNxYFXYhuIc0WGzzMirsnmTtkCuIr5nzfa4kc1PvLsr5fX77S54ZWvh
dM7/NPiBoepvrSo+uLaj9EHfKU7uJ2DADCgBSqwUQLI7xjZrYSKsxiQcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJvxb7yldzXzwo7PkjJbsalCgAnMB8GA1UdIwQY
MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt
ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5
LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTDfTeoL
i1NassgR0Tz8+hww9eaGE/M8b2S0KKjWvUKB4JKIyIhPTLIS+uh3i5W8Pe4KHtWG
sV96j4I1QlQaj0TjTwjezgpzanNJD3sDU+c5SIS+WVaX+l9cIY/npRXET8FnpUnW
JKL7GfE6DtcEAcgbqnx7JnjpiqJUiho2pRQZCzV8Rgfz214XmGd1ub2oqLhDJQax
Z6WJUfXEfu4zilwRUf24NgGg5lw9nneaSMsfEpeWUxcJh5Cx73iZYsrMW2VsIh/k
3yHYOKWY4KGR5ESh7JTrKBgv27Pkj0aCvHBqv6nKKXl85yF22DLq+MxZWLgAlX5q
cNcS1btN0WFzEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:41 2026 by rpki-client