Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: NJc0CmoWkJW3IB/ZaNR9NLrj1IYK3SUk/pgtfy/SfuM=
Subject key identifier: E2:F6:EF:D7:6D:34:F9:A1:53:D8:1D:7E:4F:EE:15:A1:F4:4A:FF:32
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019F90FE6047B1E854F4E00F38DAF86C2868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 19C1
Signing time: Thu 23 Jul 2026 22:00:17 +0000
Manifest this update: Thu 23 Jul 2026 22:00:17 +0000
Manifest next update: Fri 24 Jul 2026 22:00:17 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: 7Vs88r8zfkifDrkFtup5QQciw5s//oaID4el1Bc9/m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:60:47:b1:e8:54:f4:e0:0f:38:da:f8:6c:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Jul 23 22:00:17 2026 GMT
Not After : Jul 24 22:00:17 2026 GMT
Subject: CN=e2f6efd76d34f9a153d81d7e4fee15a1f44aff32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:6c:79:60:0c:f8:94:2e:03:e5:5c:77:34:
08:ce:5f:4b:ce:27:f7:5a:41:dd:f9:d4:c4:74:fc:
59:b5:31:88:ba:e5:67:0e:a1:e3:21:72:24:31:5d:
b3:6c:7a:e8:08:6a:47:16:c3:9c:3a:96:9d:95:5d:
b1:2e:51:30:41:59:25:4e:03:2a:b7:43:38:18:a6:
51:57:ab:6b:63:28:ab:ce:f1:54:3f:a7:bd:94:dd:
bb:99:67:e6:f7:c9:29:11:22:fd:5f:5d:dd:0f:5a:
e9:c6:05:e6:3a:9c:4d:83:7f:ae:3f:91:78:00:07:
11:94:47:da:bd:96:62:14:5c:1a:c2:4d:fd:8f:83:
8e:79:b7:f8:6c:1f:11:6d:b3:1f:e8:78:a1:21:6e:
fd:f5:e3:04:93:4e:c0:d9:9e:1c:f6:cd:8c:33:ff:
14:c3:6c:f1:7b:f7:ac:04:a9:5e:50:d8:29:10:ed:
03:d0:32:bd:f0:69:75:2f:79:51:d3:12:b5:41:fe:
75:3e:36:8a:1b:46:33:af:1a:3f:8d:c7:0d:d0:0b:
c9:03:70:01:63:1f:29:a9:99:02:78:a9:67:4a:46:
0b:72:1a:df:e3:45:47:77:ed:c2:31:e7:40:00:df:
23:3b:80:51:5e:54:32:51:ab:c7:95:93:90:b0:46:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:EF:D7:6D:34:F9:A1:53:D8:1D:7E:4F:EE:15:A1:F4:4A:FF:32
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:69:02:16:a5:06:f1:d5:33:a2:94:35:02:4e:0b:7c:f0:fb:
6f:38:19:60:84:22:79:42:bb:8f:39:84:0d:9f:7b:66:60:10:
7a:fc:df:bb:15:76:23:44:c2:01:f0:89:51:d0:66:30:14:aa:
75:94:fd:8c:fd:2d:72:97:14:a0:e2:5e:30:5a:b4:19:22:52:
0d:ca:b4:f4:dc:61:00:d7:12:c3:05:cf:58:bf:0a:b8:4e:e9:
a3:80:1d:d6:e8:9b:24:72:f8:f9:c3:8f:fc:7e:a3:26:eb:18:
ef:22:2c:2c:af:26:9b:f8:13:fb:82:d0:05:d1:af:53:7e:a0:
48:20:dd:9c:05:0e:03:ad:d5:38:7b:4d:63:ef:5f:bd:30:fc:
84:46:8f:f3:13:ec:78:d5:7b:89:32:cb:b4:7f:68:1c:4a:da:
b7:9d:5f:db:26:99:0e:4f:78:24:d4:25:88:ff:78:b1:6f:c4:
46:53:66:83:b8:39:cc:a0:5f:ce:f7:93:77:ba:62:33:b6:ac:
98:b5:8c:34:17:c6:aa:9a:ca:b6:0c:6c:46:a7:c1:16:3e:93:
b5:de:67:1f:62:ff:a1:f2:79:bb:28:bf:5d:18:8a:74:3d:a7:
e2:1a:d3:73:99:bb:5a:0c:c3:b2:9a:0e:cf:f3:5a:70:96:eb:
8e:d5:4d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:24 2026 by rpki-client