Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: 8EZ9NoKnn4168zJtBaycVO10odtrRNkVGBa47Ssvlcc=
Subject key identifier: 23:77:3D:2E:F0:59:36:F9:64:D0:38:A8:CD:F0:30:8D:09:F5:70:52
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 019D2C2A14C07C278DE58A58A73195D6E485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 14D4
Signing time: Thu 26 Mar 2026 22:00:48 +0000
Manifest this update: Thu 26 Mar 2026 22:00:48 +0000
Manifest next update: Fri 27 Mar 2026 22:00:48 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: OlnZkd5S/mYryrf97vd7NoBV5bxoGhQ1xjjbizo9gqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:14:c0:7c:27:8d:e5:8a:58:a7:31:95:d6:e4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Mar 26 22:00:48 2026 GMT
Not After : Mar 27 22:00:48 2026 GMT
Subject: CN=23773d2ef05936f964d038a8cdf0308d09f57052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:29:b9:83:c4:a0:45:af:34:d8:15:94:1c:
01:83:55:82:d4:86:1d:4e:05:be:a8:dc:ed:eb:d4:
4a:f9:cb:21:a3:a2:97:10:b9:a4:f1:89:2f:56:c7:
af:71:ec:22:12:69:3d:16:4b:62:de:a0:d4:59:17:
e7:79:15:3d:31:d6:b5:ac:f7:d3:0e:4b:a6:b4:62:
bd:76:d1:db:12:f5:f9:8d:6d:e4:fe:e6:09:02:44:
d0:8b:68:b6:dd:26:e0:6e:8c:11:ab:8a:95:3d:a3:
82:dc:9f:31:e4:4f:e1:7e:95:49:43:e0:7f:70:ab:
52:c2:49:c3:be:19:0b:e3:2b:e4:ed:5a:73:ae:4d:
b6:c7:ff:3e:1a:7e:01:1f:04:a7:96:df:52:a4:20:
f7:8c:1c:60:b7:d3:72:55:30:14:c1:28:90:fe:0d:
4d:02:d5:ee:10:38:19:fb:1d:0e:ec:f6:1e:c1:90:
3c:6b:21:54:c7:97:6f:ce:5d:b5:72:12:17:ed:f4:
5c:dc:eb:9c:f3:36:69:9f:ce:5f:8b:a5:95:28:18:
0b:53:94:11:a3:02:14:21:0a:ca:f4:45:4d:59:c2:
ee:b3:5d:1d:9f:e5:38:59:56:49:39:33:8c:0f:e3:
7c:0d:6f:84:22:e3:ef:bb:66:f6:82:dc:48:96:c0:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:3D:2E:F0:59:36:F9:64:D0:38:A8:CD:F0:30:8D:09:F5:70:52
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:64:ca:da:0d:6e:b1:01:be:16:39:41:fc:4d:52:e0:15:2f:
51:19:2d:54:5b:7c:56:89:3a:0f:78:05:c5:1f:c1:b3:3d:c8:
bb:f3:14:13:9a:74:18:ce:73:1c:41:fd:d3:4e:ab:b1:8f:f6:
f6:8c:64:7d:2b:da:1d:ac:34:53:45:96:c9:ec:eb:6c:e8:f2:
c1:ea:86:93:e7:51:76:b7:64:82:5a:2f:96:e1:38:99:b9:25:
e5:df:0b:bb:93:32:71:06:b4:78:82:38:ed:a2:b7:22:bf:d6:
97:54:eb:94:5c:62:76:7b:2d:9e:ee:43:81:c7:21:96:f0:00:
44:ab:da:9b:78:00:ab:0c:45:e1:23:ae:68:93:c2:66:eb:b5:
41:b7:5f:4a:49:90:ac:66:31:be:bf:03:ca:bb:2d:3b:60:7f:
e6:22:ad:76:65:3b:38:7f:6e:1a:7b:c0:97:a2:bb:da:1f:12:
20:0f:0b:9d:31:63:ce:49:d8:4e:b7:68:53:04:76:58:1c:08:
d8:ab:3f:34:6e:4c:c6:e7:05:7b:6d:0f:f9:df:f4:a3:ad:ff:
c1:7c:e8:1f:ae:48:12:83:c9:a1:2b:05:d0:4b:1a:02:28:e1:
f2:d8:4c:ff:f6:d4:bd:7c:73:13:e5:46:e8:99:e0:ce:a5:53:
89:38:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:08:09 2026 by rpki-client