Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: YJfcJ5EoekfS8L3Ra7IC91WWTbL5aFcfVjzotZ3gj4E=
Subject key identifier: B3:5D:F7:3B:B4:F5:CD:46:F1:8C:B3:01:C6:4E:B6:2E:81:6E:8E:C9
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 019D25839B7B71920807D2D2C1597325E275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 0A08
Signing time: Wed 25 Mar 2026 15:01:15 +0000
Manifest this update: Wed 25 Mar 2026 15:01:15 +0000
Manifest next update: Thu 26 Mar 2026 15:01:15 +0000
Files and hashes: 1: L128U4uHpPB8XXEkgPNjVcIZ9XE.roa (hash: IYk8giMHsoZQEDIjV2cGRAdLhqHOaoQ1gIQuvMVROxs=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: Vu6GGufl5DxMOtFtbedgLyb4SKDdmpuJj7f5BN+5pac=)
3: rVOox5dPkR2CoxnWpLrFqt5-ty4.roa (hash: rByt/VY+jKmLbOAYRP4mcgPGysuMY2q4MeT7LbpcziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:9b:7b:71:92:08:07:d2:d2:c1:59:73:25:e2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Mar 25 15:01:15 2026 GMT
Not After : Mar 26 15:01:15 2026 GMT
Subject: CN=b35df73bb4f5cd46f18cb301c64eb62e816e8ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:e4:29:5b:cf:cd:a2:f2:c9:c5:c1:0f:58:
42:e9:27:d0:99:fa:f6:49:79:27:b1:84:80:49:27:
a9:31:a7:20:ab:53:2d:9b:8f:dd:e4:1a:d3:76:d1:
30:21:bd:62:97:68:55:ac:a4:76:36:45:44:6a:c4:
1f:bf:51:a6:84:4c:54:8f:c3:91:89:d4:aa:14:b7:
22:80:5d:77:2f:de:e7:b5:45:7c:e2:66:3e:ba:92:
ba:bb:69:9a:a6:07:80:86:b1:b1:88:bb:fe:c0:44:
22:c8:1d:f6:48:66:98:40:be:8b:7f:a3:d9:f2:d2:
d3:6c:6a:82:f5:6b:69:ee:fd:17:c1:56:d9:68:65:
e5:4c:06:aa:28:d6:af:84:2e:c7:52:e6:f5:3b:20:
6d:1c:0c:3d:a7:e1:12:cb:7e:7b:dd:50:55:1b:2c:
5f:bd:74:7e:b4:5f:9e:21:4c:14:69:ab:3a:f7:e8:
58:cb:2c:3f:40:5b:f5:1a:b5:84:14:00:8b:c6:d0:
74:5c:69:06:80:b1:c9:f4:19:1e:e5:e3:3f:0c:72:
39:cb:2a:d4:23:e7:a8:88:47:59:37:8a:8b:da:36:
7a:96:16:1a:30:7c:34:96:14:20:f7:da:ff:79:33:
cd:71:12:8a:09:25:5a:60:b1:72:19:55:9b:f7:ca:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:F7:3B:B4:F5:CD:46:F1:8C:B3:01:C6:4E:B6:2E:81:6E:8E:C9
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:9f:b5:36:a9:b4:5c:3b:4e:8f:ba:dd:64:f0:cc:4f:79:
77:60:b2:6a:f0:59:a3:37:ed:7e:37:6a:23:0c:ee:54:48:96:
72:c9:33:d1:1f:ac:33:3f:bd:72:26:32:75:68:f4:be:08:6c:
2b:51:b8:c7:00:f1:b7:ab:7f:7f:a4:f2:32:3b:5e:6a:e5:b4:
c0:97:3c:99:db:46:6a:27:9d:ae:86:40:70:3d:ba:38:2e:61:
ea:ea:b3:38:5c:2c:9b:cf:eb:f7:8e:ed:37:7c:e3:d1:3a:ab:
96:4a:f5:9f:8e:af:cf:2d:76:f3:4d:84:d4:c6:25:d0:62:ad:
9f:9b:02:7e:05:96:ee:b8:87:4b:24:74:e5:32:1b:2b:a9:91:
2c:f5:1f:e9:1a:7d:a8:0f:da:02:db:a0:7e:1d:e3:92:3b:87:
ea:79:62:b0:ab:43:b4:f1:40:5d:93:ca:2b:d7:cc:c8:9f:c7:
e6:25:2b:57:76:c3:46:62:89:75:ae:9f:d9:3f:c2:2d:18:a4:
48:42:95:c7:1c:48:f1:04:2d:45:cf:4b:64:c1:2d:2e:09:a0:
c5:8a:61:87:8a:ab:b6:d8:74:27:e2:42:84:b3:b7:f7:bb:ab:
bd:8e:8e:eb:e7:2c:78:c3:7b:a2:98:95:48:4d:bf:b3:88:6e:
9e:a0:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:31:40 2026 by rpki-client