Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: sBbykd+gp/dz51R1uoVs4G//g9EAE2EiEReX+ZejJ5A=
Subject key identifier: 42:FB:4D:B6:72:2B:F6:3E:8F:53:06:12:20:33:AA:DA:B3:65:E6:A8
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019D273AD802027C7EA272BCF9E40AA9CD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1589
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: TbCrPyYqoMMQhJrDxJqEM6d33VP3+cVkonHL27o941k=)
2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d8:02:02:7c:7e:a2:72:bc:f9:e4:0a:a9:cd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=42fb4db6722bf63e8f5306122033aadab365e6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:9f:14:81:58:f8:f1:65:5a:e0:e5:f1:f4:
67:39:7a:05:a2:3b:2f:6e:3f:3a:a1:76:ee:7e:9e:
fd:03:14:ed:7d:f2:db:85:5a:e7:cc:e9:e9:22:c8:
ae:89:fe:9f:42:af:7b:26:1a:2e:94:f4:6b:84:1d:
9b:c6:84:dc:3b:d5:aa:7c:6e:2a:71:ce:b9:da:cd:
be:a4:f7:df:b2:13:0f:70:ae:3f:9b:4a:83:ab:32:
07:cf:95:06:a7:5a:21:99:38:87:5f:9e:83:22:8f:
d2:e7:f6:a1:37:85:b8:05:53:36:a5:0a:06:3a:20:
4d:52:95:44:43:de:8c:40:37:b2:70:88:e8:03:68:
eb:cd:71:b8:ce:08:ff:ee:c3:7e:40:d1:b9:83:dc:
b4:06:9e:47:d8:d5:62:a2:00:60:1a:0a:08:5a:dc:
8b:9c:45:c8:05:c5:76:2d:4f:84:b2:af:45:55:c5:
f4:93:77:11:fb:86:aa:43:0e:c1:e2:dc:38:f6:dc:
95:cc:d7:5b:c4:92:4f:ee:75:2d:0b:6c:4a:4e:9c:
3a:ee:6d:86:15:d1:18:41:67:4f:ac:a4:b2:3e:fe:
95:44:7f:bf:c2:4d:23:3d:78:7e:17:11:41:b3:60:
d9:b0:09:9b:b3:86:f6:bd:bf:26:2f:36:98:99:b7:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:4D:B6:72:2B:F6:3E:8F:53:06:12:20:33:AA:DA:B3:65:E6:A8
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:3d:69:81:03:eb:e7:43:5b:e2:c9:16:e1:3c:46:b8:0c:
18:59:43:cd:14:3c:1e:ef:ee:42:3f:ee:03:2c:51:80:3e:cd:
2d:01:d4:a7:ce:9d:15:af:ac:bb:76:c1:d5:7b:5f:73:3c:54:
61:2e:0f:e4:4d:7d:08:9b:55:08:35:63:c3:87:86:20:27:c9:
83:f4:23:20:84:61:b5:13:9e:da:09:28:32:a5:0f:c8:82:d7:
8c:42:96:b6:43:76:74:24:2d:a1:70:a6:18:a6:23:54:8a:ed:
ee:5a:7a:94:4a:07:78:40:64:a0:2b:9a:5f:c5:45:c1:f6:5c:
58:59:64:98:01:f2:1c:2c:d1:4b:77:ce:ab:04:89:c1:f8:23:
e9:51:0f:6d:e3:44:4f:85:aa:e9:f2:37:24:31:42:1d:b2:cc:
a2:71:ba:71:f8:ad:e6:de:02:fd:77:2d:fd:23:5f:51:b2:b0:
3d:92:dd:2b:6d:78:32:32:f5:81:24:5f:ad:7e:f0:de:be:23:
1f:a4:91:8e:85:88:1e:7b:89:69:3c:44:38:50:c5:4a:8a:34:
65:18:3b:cf:29:73:60:7f:02:59:d7:63:72:61:da:5b:5a:83:
73:a3:63:2e:9f:ba:54:58:62:72:0f:ac:57:af:61:1a:66:b7:
b2:c3:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:05 2026 by rpki-client