Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: iHaCAzCtZvGZIoLT8cC50/kfMFXqn7k7p+QzFELubKc=
Subject key identifier: E9:BB:68:36:4B:97:F6:63:F2:81:99:4D:C7:42:08:CB:FC:E1:34:4A
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019E1C7D69E7BC86329357FB9E5770D87F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1608
Signing time: Tue 12 May 2026 14:00:41 +0000
Manifest this update: Tue 12 May 2026 14:00:41 +0000
Manifest next update: Wed 13 May 2026 14:00:41 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: pOphBHlZzcfQRlZ270ReqSNWygUtIJTfrkeBVLUul3U=)
2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:69:e7:bc:86:32:93:57:fb:9e:57:70:d8:7f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: May 12 14:00:41 2026 GMT
Not After : May 13 14:00:41 2026 GMT
Subject: CN=e9bb68364b97f663f281994dc74208cbfce1344a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:86:2a:d4:df:0a:5d:b7:89:c2:36:40:9a:
1d:3e:e0:9d:0b:24:a8:aa:35:6e:60:1b:1e:bb:de:
d8:2a:5e:7e:d3:01:fe:49:fd:d2:54:ae:87:6a:42:
88:21:92:65:37:b8:de:79:65:6d:c6:df:02:de:1d:
b6:16:49:c2:76:06:e4:60:92:26:a0:16:de:33:1e:
19:99:62:3f:c4:c1:52:94:b3:91:5e:28:83:a0:78:
de:5b:cf:06:75:97:93:6d:d1:9d:aa:45:6d:89:de:
34:b2:16:2c:5a:48:ff:b6:b8:7b:73:25:b7:b6:5b:
e3:04:0b:48:b2:5e:6e:9e:e8:05:35:2d:a5:ec:19:
45:72:1f:05:71:d0:dd:cc:9b:4e:6b:c3:11:e4:6e:
15:08:ca:ed:69:99:28:0c:dd:97:ca:11:30:1a:42:
ec:6f:0d:5d:42:3d:09:20:b6:2a:69:87:de:71:ec:
91:ed:b0:e8:8d:34:9d:8b:50:ea:97:d6:d1:d7:65:
d5:4f:c0:41:3c:14:11:c8:8f:df:28:68:32:0f:14:
f1:c3:ad:39:fc:5f:dd:44:cd:1a:77:07:c5:0c:aa:
26:e9:cd:5a:04:ef:d8:cd:8a:bf:14:ad:4d:17:23:
94:57:61:a3:77:d3:e2:ea:6b:de:3f:32:f2:2f:25:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:68:36:4B:97:F6:63:F2:81:99:4D:C7:42:08:CB:FC:E1:34:4A
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e7:23:58:48:4d:a8:2a:cf:80:9a:19:33:a4:93:6d:53:ab:
b5:26:91:b2:48:83:7f:6c:2e:c7:69:f1:3b:f9:83:f4:3c:4d:
25:2d:e4:15:a5:b5:3a:05:14:2a:b2:c5:43:ce:54:a0:13:2d:
1d:2e:b4:47:a1:95:4c:69:6d:f3:6c:bb:d7:9c:47:80:8d:4b:
aa:c9:ab:0c:90:be:df:a9:ee:a1:93:92:30:61:16:3a:2c:a6:
5e:56:c0:8b:be:19:f3:f7:96:54:c0:6e:36:20:39:4a:fa:b8:
58:b7:23:a1:56:35:2b:dc:20:26:fc:06:6c:61:dd:0f:8d:09:
54:88:47:f0:2e:ed:9b:ec:32:da:57:ff:4a:4d:06:e7:bb:5e:
28:e9:ae:01:ee:4b:46:28:6e:53:28:c0:e7:ce:5f:f1:e1:14:
ec:5c:41:5b:f2:03:0a:ad:0f:ff:b5:42:dc:bc:19:df:97:f6:
bb:d3:f8:57:7e:38:6f:68:1f:71:85:5c:8f:e1:cf:f9:47:20:
52:2d:e4:f1:33:4a:c2:bd:0c:b2:f2:92:74:02:3f:51:bb:c1:
49:b9:20:c9:3e:b8:d9:0e:2a:f0:83:a8:c2:13:1f:b1:82:49:
19:91:0a:08:1c:ad:3f:70:42:46:08:54:8d:fd:20:de:42:07:
fa:44:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:11 2026 by rpki-client