Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: zm44Z9ElU6roqZwnNE3g+ZttWbEnUgFmpsWhMWpCW1Q=
Subject key identifier: BB:E9:91:C5:20:23:76:FE:D9:78:79:6E:44:70:3C:55:B8:8D:AC:D9
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 019E216CD17072E3FC332E4483D0C3997F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 1553
Signing time: Wed 13 May 2026 13:00:40 +0000
Manifest this update: Wed 13 May 2026 13:00:40 +0000
Manifest next update: Thu 14 May 2026 13:00:40 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: 9kz4MUYir64WrFroso5gEnXUpJXiaiOWS16WXBsH/HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6c:d1:70:72:e3:fc:33:2e:44:83:d0:c3:99:7f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: May 13 13:00:40 2026 GMT
Not After : May 14 13:00:40 2026 GMT
Subject: CN=bbe991c5202376fed978796e44703c55b88dacd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:25:64:c9:d8:22:a4:57:f6:d9:64:8c:c3:
4d:69:56:2d:d2:7d:a1:d2:64:8c:19:4c:b3:7c:36:
2d:72:c9:cb:37:04:05:23:b1:3d:fd:5a:be:3c:7f:
1a:76:0a:c5:51:70:5c:79:ad:a2:46:41:af:a4:da:
bd:af:86:95:cf:ec:41:ff:9b:66:8c:56:1d:4c:55:
a8:f9:05:75:d0:fa:57:c7:16:0a:1d:19:2c:36:20:
e0:d2:1a:b2:7c:4d:24:0e:53:89:c5:82:82:4c:aa:
6d:e3:6b:d1:ce:0d:61:94:1d:10:cb:81:02:e7:20:
f1:e9:a0:a2:87:07:74:e7:92:36:ae:bb:53:dc:b1:
1d:12:80:d2:8f:83:93:88:32:34:2f:3f:fc:c7:19:
50:f2:d6:d4:c1:b8:96:9e:86:6f:34:71:00:cf:32:
28:64:e2:9f:cd:f3:88:d0:e5:06:ee:29:03:58:de:
45:46:4c:50:e3:04:25:79:d0:51:2b:39:f3:48:bf:
fd:19:98:fa:f8:cf:97:b4:7d:63:54:3c:1f:3f:ad:
26:a4:b7:3e:89:04:e0:ba:1b:0c:6d:59:59:0a:02:
7e:d2:03:69:3e:9a:67:dd:d2:4a:72:d2:55:b1:01:
31:10:54:f1:d6:46:e9:03:34:c5:4f:36:ba:26:c5:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:91:C5:20:23:76:FE:D9:78:79:6E:44:70:3C:55:B8:8D:AC:D9
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:80:b6:da:74:5d:0f:22:51:dc:b4:9e:58:5b:47:34:fa:10:
70:02:88:95:ec:1f:d8:01:99:60:91:86:df:dd:7b:3f:0f:13:
b7:76:72:9e:09:f4:42:1e:b4:10:4a:09:d2:18:76:0c:c0:a8:
42:d1:f9:c2:fe:5e:73:9c:06:ef:90:d4:fd:e7:87:49:07:e8:
e1:a6:ed:0d:10:d7:1f:c0:46:6d:4d:7e:16:31:4c:97:9d:12:
2f:7f:1c:57:0c:c0:e9:61:4f:aa:bc:c9:63:b3:d0:5d:47:8e:
c0:66:8c:03:0e:24:a1:c6:4c:6a:03:1a:d9:a8:4a:bb:14:66:
5d:8d:af:01:74:3b:9b:df:c0:51:eb:11:20:27:30:b4:e8:ef:
67:e3:9c:24:cf:97:10:a3:16:10:38:ad:fd:5c:31:6e:29:9a:
93:8a:cb:e7:b0:bb:99:68:bd:27:3e:15:7d:46:90:fa:a4:3a:
a9:93:ce:38:d3:3b:c3:44:d6:55:9a:f2:65:24:99:84:6a:d2:
70:5d:41:89:42:72:be:4b:85:31:ee:d4:ee:a2:5c:ee:76:7c:
8c:68:a1:96:19:d9:34:4f:20:f9:e2:6f:89:a1:a9:bf:a7:ec:
94:f9:63:8c:a1:cf:d7:3a:d4:15:ba:80:39:fe:e2:d5:10:19:
0a:7f:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:49 2026 by rpki-client