Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier: TbWnM0EoXzAH4wv3A2b3GLKS71QRm3TsTexghHb21KY=
Subject key identifier: 7E:B4:B0:A9:9B:65:B4:08:2B:00:F2:9A:2B:E7:16:BB:08:D8:50:C0
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial: 019D27DF965789005E0D53CC9019CCF9FCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number: 1386
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: UmV2CdWBvSbF4cc7gW74J6gpIqSOPLkOLxVVr60pZe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:96:57:89:00:5e:0d:53:cc:90:19:cc:f9:fc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=7eb4b0a99b65b4082b00f29a2be716bb08d850c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:37:b3:4c:6e:29:60:2b:c1:ea:d6:23:c3:
37:24:52:55:c4:e7:b3:11:9d:e9:6f:f8:e7:60:f3:
95:b4:71:41:99:dd:d4:41:24:8e:20:c2:ac:ca:65:
2b:7b:4a:ea:03:a1:d8:cb:e8:19:00:f9:54:a4:6e:
c6:d4:0a:ac:8f:9c:2d:ce:c6:ad:e6:b7:01:6e:86:
8b:c1:69:2b:1e:10:1f:9c:33:66:bd:b9:78:ea:22:
76:87:fd:f7:2e:58:48:86:1f:a9:96:b2:97:7e:31:
85:4d:9f:01:4b:77:3d:58:df:d6:59:4d:9f:b3:a4:
be:66:18:5f:11:8e:41:7e:2f:f5:c1:aa:84:b3:bb:
ee:f5:af:9f:95:be:92:a2:f3:8f:17:f9:8d:03:58:
80:ba:0b:9e:9b:78:66:9b:0d:5d:79:77:eb:24:d3:
1e:59:1c:97:6d:e4:5b:60:17:a4:5b:c7:0e:f0:cf:
30:e1:31:5d:52:cd:ff:1a:3c:46:b4:a5:5e:0b:d4:
db:d2:95:26:49:c9:d0:ff:76:10:90:04:a6:3e:b5:
a5:a7:38:74:21:55:4f:ac:42:80:9c:4b:e3:a3:a7:
9f:ab:92:17:1f:28:d6:ea:39:6f:ad:73:24:6a:1e:
d5:f7:bb:10:a2:3a:2e:c6:f7:c7:96:ca:10:9b:e4:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:B0:A9:9B:65:B4:08:2B:00:F2:9A:2B:E7:16:BB:08:D8:50:C0
X509v3 Authority Key Identifier:
keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:68:05:32:20:05:15:48:d6:d3:5e:f1:63:fd:d2:e5:be:
c1:9b:ab:02:e5:82:ca:f0:6f:d8:bc:fb:fa:c8:59:fb:17:d2:
3a:fc:52:85:8b:18:d4:65:d3:90:0e:16:74:8f:bc:a2:b6:bb:
a3:ac:eb:93:a1:56:31:86:3e:16:67:95:6f:1b:e9:08:96:3f:
77:10:0a:4c:7a:b7:d2:3e:ab:e9:f7:14:7d:3c:4e:9a:a6:01:
7e:bc:bd:ec:c1:18:05:69:45:7a:4b:8e:74:17:cd:94:9c:53:
3c:74:42:ba:2e:b2:ca:8e:f0:6a:b0:db:b7:40:fa:ae:27:5b:
cb:cf:f9:ee:e4:31:4b:f0:41:31:e0:85:30:a3:fc:85:19:0a:
7f:a4:69:66:ac:53:70:ef:1b:18:15:a3:57:54:aa:ce:7f:92:
1f:83:02:06:fb:85:6d:65:4c:b2:ef:98:73:6c:f5:f6:08:3a:
7d:40:d7:b2:0d:88:e0:ea:67:b5:d1:d5:ec:34:de:72:57:c2:
92:55:bd:ab:70:c9:71:10:f2:6e:6e:e2:48:3d:4a:ec:3c:7b:
21:90:5a:a7:84:c0:94:c1:96:9e:9f:95:db:bf:69:1f:67:0d:
5a:b0:f2:cd:36:f0:38:23:34:f2:c8:23:fb:a9:06:91:75:86:
f7:9c:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:24 2026 by rpki-client