Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: Mh9DWPoiUH/wk3aYDmAaC/5Qe/WyR0br+T37WWv00t4=
Subject key identifier: 30:65:6B:A2:B9:23:57:BE:C5:97:F8:79:3C:9C:1E:B5:C0:18:67:C0
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019D28F2D4990F53B138D5627F9EB09C31DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 07:01:35 +0000
Manifest this update: Thu 26 Mar 2026 07:01:35 +0000
Manifest next update: Fri 27 Mar 2026 07:01:35 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: Vv5DQ27xXYYZGU/fGnR6Aeh9tJYmv4FC5u86/TBn4j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d4:99:0f:53:b1:38:d5:62:7f:9e:b0:9c:31:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Mar 26 07:01:35 2026 GMT
Not After : Mar 27 07:01:35 2026 GMT
Subject: CN=30656ba2b92357bec597f8793c9c1eb5c01867c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:c2:39:33:32:0e:48:dd:1a:4e:70:9b:11:
83:cd:27:06:46:6b:2b:83:b2:44:55:0d:14:be:89:
f7:d5:a8:bc:2e:77:57:28:cb:08:73:8c:67:02:5c:
b8:1e:f9:e7:9f:d2:53:d3:d5:bf:fe:46:ab:90:d7:
4c:bd:d7:f4:ce:83:db:96:af:b7:53:d0:2c:9f:89:
73:d3:3c:e6:9f:db:36:f6:1a:4a:c3:90:5f:ad:fe:
3b:0c:0f:6e:ca:97:4e:bc:c8:e7:7a:8f:04:74:e4:
df:25:8b:1c:26:37:dd:4b:f7:0e:1c:2f:1b:cf:26:
69:90:59:74:bb:96:06:5a:71:fc:da:af:d0:1b:28:
46:ef:50:ec:0e:8c:86:64:0a:ff:73:95:67:42:35:
e9:d5:2f:f3:dc:ae:24:bc:c6:fa:56:84:fe:54:ba:
8a:43:00:ef:cc:6f:dc:99:c9:d6:35:bf:6d:88:9c:
2a:4c:19:b7:d5:e3:34:d2:a5:29:76:af:cf:d2:4b:
52:f5:a3:f8:60:9b:1f:48:d8:22:2b:56:9d:b8:df:
82:4d:c6:b3:4a:52:2d:cb:73:ca:7a:90:9f:50:35:
de:82:af:20:e2:c2:2e:f2:32:ab:a3:24:00:b6:03:
b9:56:d2:87:16:cd:69:b1:7b:3d:da:f2:e0:93:af:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:6B:A2:B9:23:57:BE:C5:97:F8:79:3C:9C:1E:B5:C0:18:67:C0
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d6:e5:e2:f2:db:e5:b7:3d:98:17:eb:a8:99:4b:bc:4f:5d:
e7:6e:7b:c3:64:4d:c5:d2:09:d8:7c:bb:cb:93:96:3f:41:e2:
91:c6:87:5c:4f:6b:fb:05:3a:9b:55:90:91:f1:23:99:d8:c6:
7c:cf:de:17:95:f5:03:d8:8c:99:5c:a8:22:c1:e4:5a:26:d2:
66:95:29:c8:48:a7:3c:08:73:f9:7b:b4:66:10:82:08:50:fd:
be:85:f2:c7:92:49:77:b0:e7:29:0a:40:a4:a0:6d:60:be:8c:
7d:24:d4:e3:0a:7a:b1:be:ea:b7:1d:c6:6f:3c:35:8c:3a:3a:
df:94:45:8a:d7:36:ce:5b:d6:94:f3:36:a6:b3:47:5b:35:91:
7b:3e:d1:f6:db:4f:fb:6a:65:4e:8e:cd:65:24:87:bf:1b:c1:
f9:52:85:4a:dd:ed:c0:ef:71:b2:f5:55:dd:5d:07:de:6b:c1:
20:3d:c8:ef:02:f1:fd:23:2b:e7:46:af:87:da:80:95:ed:3a:
15:3d:fc:b8:5a:84:84:26:80:af:3b:11:78:d0:12:f8:d5:a9:
ae:f4:10:1d:d4:ef:f0:59:39:51:55:9f:30:85:4c:01:36:f6:
8e:52:eb:3d:bb:34:c8:58:29:ce:8c:62:12:83:e5:10:37:42:
b1:e6:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:40 2026 by rpki-client