Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
File: BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft (raw, json)
Hash identifier: XN+gSIDhddeDEhi2PAy4xhWXzw3P+MvSJBOVxH6ZFVQ=
Subject key identifier: 78:B9:2A:A3:AC:95:23:B4:AE:93:F1:47:0F:46:55:CE:A0:43:F1:22
Authority key identifier: 05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4
Certificate issuer: /CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
Certificate serial: 019F916C377C0097A5BF8FC1E7CE48874141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:16 +0000
Manifest this update: Fri 24 Jul 2026 00:00:16 +0000
Manifest next update: Sat 25 Jul 2026 00:00:16 +0000
Files and hashes: 1: 6yHxEFCX8SGDDuqJtxkLqvDHhAM.roa (hash: FJdjgo8aJL+d/N15X0/urga/udLTA1icT6feDIkUrRY=)
2: BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl (hash: a1LdOCW9ldEQT7HP8TCDNZ1XnxGZo11t2S7fyAavfpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:37:7c:00:97:a5:bf:8f:c1:e7:ce:48:87:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
Validity
Not Before: Jul 24 00:00:16 2026 GMT
Not After : Jul 25 00:00:16 2026 GMT
Subject: CN=78b92aa3ac9523b4ae93f1470f4655cea043f122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:71:24:e8:6b:63:7a:7e:fd:3a:85:32:32:cd:
81:a0:f2:be:c5:da:87:b2:61:91:fe:0b:e7:a1:03:
bd:f2:8d:de:43:64:52:66:4c:bf:c7:86:fb:f2:33:
8e:25:0e:85:c4:bd:55:8f:7c:c9:85:0e:a8:46:e7:
3e:a0:c3:09:e8:34:53:1f:2c:19:7b:2d:3f:65:e1:
6f:e4:4c:6c:c7:cf:e0:27:e7:97:a8:9f:e2:ea:ce:
da:97:be:90:73:27:75:82:11:46:a1:13:d2:0d:f7:
99:fa:31:62:3f:ed:f6:4b:03:b5:ac:a4:50:10:4c:
e8:66:7c:7f:f3:3b:e0:66:17:59:ed:17:ad:82:d0:
52:af:30:2b:85:ac:0f:c5:70:45:f1:f3:2b:cb:0a:
14:77:ca:59:3e:b3:1f:34:79:6f:4d:5f:a1:ff:17:
14:05:41:25:04:bf:04:93:aa:4d:8d:be:01:1c:9e:
32:2e:27:34:da:4d:94:ed:79:ef:2b:1f:8b:37:99:
8f:19:03:f4:5d:55:1e:3d:f5:e4:3b:bd:17:99:e4:
8f:40:2b:ef:7c:e7:7f:44:db:db:1f:ea:34:ba:e7:
2d:83:f2:26:49:eb:fd:c5:d5:b2:fc:da:c2:9a:44:
34:0c:c2:51:25:24:0c:fd:38:de:8e:fc:14:0b:b4:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:2A:A3:AC:95:23:B4:AE:93:F1:47:0F:46:55:CE:A0:43:F1:22
X509v3 Authority Key Identifier:
keyid:05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:40:89:17:7e:72:a0:cb:18:f8:36:65:24:0e:f4:95:a0:
77:d4:9d:07:b8:1b:00:9e:fd:46:cd:48:65:cc:04:e2:01:b8:
a1:48:17:43:96:ee:96:65:83:6b:06:8c:d4:14:1b:49:44:56:
a4:17:e3:a3:7d:f4:15:b1:38:5a:18:27:be:9f:78:7b:46:4d:
04:8d:da:33:60:05:af:5c:9d:fe:c6:86:2c:3b:48:98:7d:ce:
89:a1:ef:00:dd:12:75:2c:f4:ef:57:2e:7b:05:d2:dc:ad:76:
f7:b6:d4:b1:c7:6a:67:d9:68:7b:05:76:f0:60:e5:4d:f7:40:
26:45:00:49:e2:e7:dc:cb:1e:25:68:ed:c6:5f:f6:a2:c6:bc:
3e:51:f3:56:27:2e:11:74:ca:03:3b:5b:c4:27:22:69:df:e3:
f8:39:20:ad:f5:de:59:27:16:ad:17:9c:d4:ad:7e:05:95:38:
47:58:50:92:6b:4e:36:84:23:11:29:30:36:c2:a2:16:2c:44:
ae:21:5c:0d:c9:1a:a3:b9:48:5c:1a:03:2c:56:59:cb:d7:30:
bb:5e:03:ba:49:e9:a0:de:32:7b:23:0a:1d:82:19:c8:8b:46:
d9:1a:52:cd:e0:45:ad:79:f8:3c:06:c4:ad:1b:6a:72:d1:3a:
7a:56:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:39 2026 by rpki-client