Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: dLpFWozEbsQEpL1wUfGPwHzfsvRxzOA/OxUw1HUv+DM=
Subject key identifier: F2:A3:CF:32:78:D9:9D:26:DA:A7:15:D7:AA:3E:9B:63:44:E9:0D:26
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 01A1016D717E7E49BE033026FC402DD86CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 11:01:51 +0000
Manifest this update: Sat 03 Oct 2026 11:01:51 +0000
Manifest next update: Sun 04 Oct 2026 11:01:51 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: FT2EfUhBaQ+GGl0LOSk3hIol4b33MCp5U4JSghgOJns=)
2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6d:71:7e:7e:49:be:03:30:26:fc:40:2d:d8:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Oct 3 11:01:51 2026 GMT
Not After : Oct 4 11:01:51 2026 GMT
Subject: CN=f2a3cf3278d99d26daa715d7aa3e9b6344e90d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:68:8a:97:94:13:fb:e0:f2:a1:13:63:31:
e2:b6:ca:e5:61:86:bd:67:e1:86:f5:19:63:e7:d9:
cb:9f:d9:a4:09:31:98:37:ef:37:1c:bb:b4:da:1b:
f3:6e:e9:75:45:86:2b:d0:22:3a:3a:ae:d7:3e:64:
7f:99:54:fa:1d:e8:54:80:eb:48:e2:c9:3e:06:82:
32:e4:66:b9:66:4a:85:c8:87:0e:3d:28:58:b0:f6:
f1:19:4e:90:9f:6c:bf:02:69:81:88:df:ef:02:b6:
b0:52:0c:e3:b4:50:3b:3e:12:e3:10:0d:7c:30:ce:
5c:f8:96:11:53:a1:32:49:13:34:df:b6:b9:06:5c:
73:e5:7a:c3:2f:94:df:67:c7:d1:5c:30:b8:13:9a:
c8:f1:17:52:95:5b:d5:5d:7f:19:5e:71:ac:aa:b8:
e3:72:e5:e6:a9:b7:1c:61:8f:50:c4:b5:f1:95:61:
98:2b:11:c2:0d:2f:84:36:f7:24:76:68:bb:b4:08:
4a:6e:26:a6:a7:0c:6c:36:2a:61:ba:ed:5d:8e:20:
ba:39:32:5c:b1:a8:9f:50:f8:ed:ac:5e:7a:bb:7e:
b7:99:5f:3e:68:a9:03:c8:e1:e0:b2:a5:38:c6:8a:
93:63:fb:b0:96:2f:a8:f4:78:e9:b7:46:71:52:3c:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:CF:32:78:D9:9D:26:DA:A7:15:D7:AA:3E:9B:63:44:E9:0D:26
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3c:cf:f2:01:5f:cc:41:f6:fd:6e:1c:bd:f5:e5:f3:8b:87:
29:b6:da:42:db:66:de:3a:03:55:5f:c7:99:36:83:b9:2c:01:
db:7b:ec:aa:76:59:2a:d2:ff:66:8f:cd:21:ed:fe:a8:32:72:
c7:02:7a:63:e0:58:37:9a:23:49:aa:c0:a4:bd:b0:bf:16:45:
6b:5a:df:13:6c:cd:0b:51:93:09:77:e2:e4:88:1b:66:7f:63:
fb:1d:c0:4e:b8:13:1f:64:a8:b9:ff:be:5c:29:57:dc:a9:04:
db:bd:a9:42:fd:1d:77:c5:4e:f5:8f:47:d0:71:87:ca:3a:96:
95:f2:38:32:b7:5e:c9:b4:f6:a4:bb:86:61:d5:8c:b4:9c:96:
53:d6:40:be:f3:08:81:b6:a8:91:f1:ee:bb:38:10:4f:80:b1:
4e:c8:80:a1:43:21:f0:6a:9f:7c:60:89:1c:3d:a8:7e:fb:a7:
fb:23:72:54:9f:f8:0b:53:c7:fe:77:93:f2:c1:c9:bd:55:c4:
9a:cc:9f:f4:bc:92:3f:17:11:5d:26:af:97:bf:28:15:33:db:
7f:9b:0a:c2:97:a7:97:60:b8:e9:05:92:5b:e9:26:e9:db:67:
08:17:81:b3:81:2b:85:e7:4a:53:b1:08:a8:5f:e9:56:ab:1c:
ca:de:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:43:41 2026 by rpki-client