Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: XJRZamdzoO2qki+ZXrrrDwBIOky+vfQa8l6uDC0/XDs=
Subject key identifier: B9:65:39:F0:B9:41:D8:10:FF:95:9F:8F:98:F9:B2:FE:3E:F3:26:95
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 019F90FED0AE76D206EE1C03999A2F7C737E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 0CF8
Signing time: Thu 23 Jul 2026 22:00:46 +0000
Manifest this update: Thu 23 Jul 2026 22:00:46 +0000
Manifest next update: Fri 24 Jul 2026 22:00:46 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: u0w7JjgEyVESbXUOH0HP2jW2jbEUDasWw9Rv3YQoPLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:d0:ae:76:d2:06:ee:1c:03:99:9a:2f:7c:73:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Jul 23 22:00:46 2026 GMT
Not After : Jul 24 22:00:46 2026 GMT
Subject: CN=b96539f0b941d810ff959f8f98f9b2fe3ef32695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:8c:54:c7:62:97:26:39:8d:0a:a2:9b:d3:
a1:55:27:a9:15:63:c5:a6:68:9d:00:dd:5d:87:f2:
32:56:14:c0:ac:eb:9b:4e:b8:70:0b:62:3d:af:4c:
19:bc:e0:9a:e6:6c:98:0b:be:21:90:6c:6f:c9:19:
10:26:7a:0b:f8:07:0a:d9:b3:78:7f:74:11:8a:40:
1c:a9:2d:08:5d:6b:86:19:e4:4c:98:0b:af:bc:af:
4c:80:6a:f2:44:bf:77:86:f5:47:21:3e:0f:51:3a:
d2:4c:6e:0b:19:7c:d7:23:71:f8:b5:d1:48:ac:ed:
af:9b:50:58:19:f4:bd:ad:3d:a8:e7:e5:42:f0:a9:
be:40:fb:bd:6a:1c:80:65:ed:ac:07:fa:ec:1b:c9:
05:82:23:d4:6b:2e:04:f3:16:2a:bf:fc:71:fb:24:
09:39:56:34:92:c7:eb:cc:33:cb:04:d7:5f:5b:5b:
0b:2c:d9:0b:9f:3e:48:07:be:11:fa:32:50:7f:f5:
2d:a5:ca:72:67:2f:bc:d3:b5:ed:10:d6:60:09:81:
a6:d2:f7:f5:aa:ff:f5:84:f0:82:ae:3b:b5:ea:59:
63:52:f6:ae:a9:98:04:31:3c:30:85:a6:d5:43:e0:
73:ed:44:5e:97:0b:1c:31:7a:78:92:7a:08:e4:0d:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:39:F0:B9:41:D8:10:FF:95:9F:8F:98:F9:B2:FE:3E:F3:26:95
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d4:1b:2b:4f:d0:59:c9:ff:1e:42:d1:ce:e3:46:11:74:ad:
34:b6:bb:11:30:8e:27:63:9c:e1:be:1f:e3:6a:38:9c:f9:87:
7d:8b:0a:2c:69:ed:33:91:48:0d:f0:04:1a:fb:41:51:1b:a0:
b0:f2:8c:f6:ab:b6:6f:9f:d4:5b:05:f7:68:92:e7:9e:9f:55:
4c:07:67:3d:71:9e:5c:92:c6:c7:1a:ca:fa:25:e0:ec:23:5e:
32:b8:ab:4c:35:50:0d:c9:14:4e:bc:0d:7f:26:4e:9d:66:51:
f6:35:5d:28:56:f5:af:17:82:4e:00:1f:a9:bc:91:57:6b:59:
ce:3a:ef:7c:0c:e1:d8:63:d5:f0:47:db:30:e0:ba:99:93:21:
9d:fb:b0:3a:45:99:2e:60:4f:7c:90:4c:2c:bd:71:7b:98:1a:
12:98:db:80:d7:d9:32:86:0d:ca:69:51:1f:b8:cf:f1:74:03:
d3:68:ad:b7:23:7a:3c:5c:67:4b:92:0d:c1:a3:c6:fb:85:e2:
e4:e2:a4:c6:e1:a5:38:86:c3:59:0c:61:84:1d:5b:44:a3:8e:
38:3b:0b:2f:b8:38:ae:bc:0d:48:00:ab:d6:30:a3:aa:88:ef:
3e:1a:05:75:18:c3:a8:ee:a7:c2:b3:21:c7:25:f2:26:a0:e9:
b1:cb:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:43 2026 by rpki-client