Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: FSueNwYIfC+Z9ohUyDmYGhESYAGegmOpKf91wS5UoLA=
Subject key identifier: D9:00:FB:33:4E:59:CA:57:02:CE:BA:F1:23:7C:55:B4:C1:B7:CF:55
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019E1C474568B1F10A8B9B2FEBF501768D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1900
Signing time: Tue 12 May 2026 13:01:33 +0000
Manifest this update: Tue 12 May 2026 13:01:33 +0000
Manifest next update: Wed 13 May 2026 13:01:33 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: 2bRRgjYw+UuRcN0wGSSKde/kinp3LKFdzYtotgwyouE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:45:68:b1:f1:0a:8b:9b:2f:eb:f5:01:76:8d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: May 12 13:01:33 2026 GMT
Not After : May 13 13:01:33 2026 GMT
Subject: CN=d900fb334e59ca5702cebaf1237c55b4c1b7cf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:49:8f:cd:58:31:c7:84:3a:39:62:27:dd:
36:eb:24:9e:89:e4:0e:df:0b:83:c3:88:f3:75:a1:
fa:81:4a:9c:04:9f:c3:bc:64:05:50:91:6b:7a:d0:
16:71:a4:95:7f:47:19:8b:25:80:ee:29:fb:cb:e3:
d4:3d:b8:fe:dc:e5:31:21:7f:15:12:88:b4:5f:9e:
94:95:0b:bd:bd:e4:22:1a:bc:fa:92:4e:85:2a:33:
8e:fa:12:e6:d2:47:81:59:95:f8:ba:d0:84:b3:b2:
22:53:b0:b4:0d:2a:e6:fd:00:09:87:c5:bd:a7:06:
44:60:0f:eb:72:c4:6a:d3:c8:5f:5f:45:8a:a2:88:
87:1f:9e:a4:89:31:93:30:a7:3b:57:07:71:2e:6a:
21:5a:03:7d:ec:f8:a4:83:fe:9d:64:8e:f3:26:cc:
bd:4f:c7:ea:92:f3:f9:09:e0:b0:ec:33:c4:2b:89:
dc:3c:a0:f5:58:72:12:96:6a:ce:ab:d7:30:e0:3e:
2b:20:f8:8e:a2:5f:b3:8c:b2:0d:05:9e:98:d4:12:
ba:9c:02:78:d4:2e:57:47:dc:dd:30:11:22:37:22:
4c:c9:f4:99:4b:65:9e:46:5b:af:1b:52:f4:46:11:
0f:4c:e2:5c:62:8b:a3:50:53:f1:eb:67:a4:9f:7f:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:FB:33:4E:59:CA:57:02:CE:BA:F1:23:7C:55:B4:C1:B7:CF:55
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5a:fb:c3:39:eb:a3:3b:b4:3d:c0:f2:1d:5f:72:39:8d:d1:
10:b6:0e:97:40:4d:ca:06:80:6a:f6:60:53:9d:0f:ac:ac:21:
07:a7:f9:33:cd:31:1d:c2:d4:da:39:90:ee:75:3a:b1:3e:2d:
bd:e2:4b:98:a2:e5:af:a9:28:96:74:d6:20:12:dd:d4:75:e4:
16:16:77:c3:49:56:b5:f8:2f:7f:cd:60:a4:d0:20:a7:81:e7:
a1:3e:34:6f:c3:2c:64:d2:8d:63:7b:d7:11:bd:1b:8e:51:f6:
c6:d0:6c:fb:b1:fd:49:16:99:bb:5f:99:8a:31:cc:08:8c:ee:
7f:36:ea:ff:83:9c:8e:28:f3:98:74:e3:41:6e:81:1e:04:52:
25:2d:8e:e4:c6:00:03:a7:82:00:ed:55:6e:98:9e:aa:fc:38:
fa:1a:be:0b:d6:7b:1b:38:ea:b3:c8:3b:f7:f9:b3:24:56:9f:
53:d0:ee:27:7b:24:4e:3a:8e:c5:07:55:03:70:1d:5a:51:bf:
c3:d0:bf:dd:c2:26:a1:73:1e:c1:4c:44:60:37:10:28:cd:df:
71:a1:e9:d5:aa:fa:ae:90:f4:45:c8:5d:ab:34:e0:21:09:84:
6a:9f:e7:b6:ec:4d:84:d4:0e:6d:7e:88:44:cc:e2:46:24:e9:
1f:97:29:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR0VosfEKi5sv6/UBdo0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzdiYjkzMjRmYzc1MGE1M2UwNTU4NDhlZjA2OTAzNDE2
YzNlMDgwHhcNMjYwNTEyMTMwMTMzWhcNMjYwNTEzMTMwMTMzWjAzMTEwLwYDVQQD
EyhkOTAwZmIzMzRlNTljYTU3MDJjZWJhZjEyMzdjNTViNGMxYjdjZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzFJj81YMceEOjliJ9026ySeieQO
3wuDw4jzdaH6gUqcBJ/DvGQFUJFretAWcaSVf0cZiyWA7in7y+PUPbj+3OUxIX8V
Eoi0X56UlQu9veQiGrz6kk6FKjOO+hLm0keBWZX4utCEs7IiU7C0DSrm/QAJh8W9
pwZEYA/rcsRq08hfX0WKooiHH56kiTGTMKc7VwdxLmohWgN97Pikg/6dZI7zJsy9
T8fqkvP5CeCw7DPEK4ncPKD1WHISlmrOq9cw4D4rIPiOol+zjLINBZ6Y1BK6nAJ4
1C5XR9zdMBEiNyJMyfSZS2WeRluvG1L0RhEPTOJcYoujUFPx62ekn38vIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkA+zNOWcpXAs668SN8VbTBt89VMB8GA1UdIwQY
MBaAFAV3u5Mk/HUKU+BVhI7waQNBbD4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmIt
MjdmZWY2ODVjYmIyLzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmItMjdmZWY2ODVjYmIy
LzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlr7wznr
ozu0PcDyHV9yOY3RELYOl0BNygaAavZgU50PrKwhB6f5M80xHcLU2jmQ7nU6sT4t
veJLmKLlr6kolnTWIBLd1HXkFhZ3w0lWtfgvf81gpNAgp4HnoT40b8MsZNKNY3vX
Eb0bjlH2xtBs+7H9SRaZu1+ZijHMCIzufzbq/4OcjijzmHTjQW6BHgRSJS2O5MYA
A6eCAO1Vbpieqvw4+hq+C9Z7Gzjqs8g79/mzJFafU9DuJ3skTjqOxQdVA3AdWlG/
w9C/3cImoXMewUxEYDcQKM3fcaHp1ar6rpD0RchdqzTgIQmEap/ntuxNhNQObX6I
RMziRiTpH5cpjA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:49:25 2026 by rpki-client