Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: EiF0T2FHHNgAUdjHyvaFr4F2XZOKL31j3cR+TrgrT70=
Subject key identifier: 59:2C:C3:A0:3B:6A:E1:7F:D4:51:2C:D6:C3:37:38:0D:4E:7D:24:B0
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 019D277221546C3B03B2E3EAE750732FFCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 1459
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: olxd2RvroTeSdyRgDhxzLGqDDv6owMj+xfbeRpDFCPE=)
2: gQ9G1wyw8P68T-YoeRrNExRIJ54.roa (hash: U225Ret2JuGydyVsYjJv8x78fpJD2cYEwUxTjEVRMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:21:54:6c:3b:03:b2:e3:ea:e7:50:73:2f:fc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=592cc3a03b6ae17fd4512cd6c337380d4e7d24b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:ea:8d:f9:6c:1d:1e:d5:c1:35:22:55:d7:
ca:2b:d4:c1:24:95:6c:75:f5:e6:39:0c:7c:62:dc:
cf:55:7c:fd:2a:57:44:fe:4f:33:da:88:98:ea:4c:
d4:5c:17:e0:cf:e8:39:55:53:0f:a4:2f:b4:e3:ec:
01:f2:98:d6:77:a6:30:7d:d2:73:03:13:36:b6:42:
82:0b:d9:cf:ad:e1:ed:2b:5d:00:fb:69:05:1c:7a:
d4:76:8d:03:01:b4:41:ba:aa:c0:bf:5f:ad:84:32:
74:eb:4d:b0:d6:0b:95:c7:d7:85:56:88:fb:b7:52:
92:5a:c8:8d:5b:42:fc:1a:19:65:9b:ae:11:6e:b3:
4d:c8:05:5d:f7:27:e2:59:e7:b8:af:97:2c:95:72:
ba:31:cb:2a:b6:52:ac:9c:d6:62:36:80:5b:86:ee:
8f:31:df:ac:f6:4a:14:30:ef:14:71:8b:fd:9c:9d:
82:9e:4d:66:86:23:2d:7c:e3:77:5d:55:30:e6:2e:
d7:cd:0a:6a:7e:11:ee:2a:b4:f5:8f:61:99:30:b2:
72:6f:31:e5:22:0a:74:65:1c:58:26:02:b1:76:27:
26:4d:9d:79:c0:21:f4:ea:5a:7d:a4:07:69:41:69:
3d:d5:f2:5a:0b:a4:d5:d3:c3:cb:78:dd:5e:b9:08:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:C3:A0:3B:6A:E1:7F:D4:51:2C:D6:C3:37:38:0D:4E:7D:24:B0
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8a:d3:a5:5a:c5:83:8a:4d:84:1c:30:7d:bd:b2:63:39:9a:
80:9c:9a:b3:4d:05:be:24:42:8e:5f:90:6c:47:87:f3:79:2c:
09:d5:60:15:38:a0:78:5a:31:40:8f:20:fc:ae:a0:7c:f3:4a:
85:b4:53:0b:37:03:ce:15:06:3b:6b:f2:de:c6:50:b6:3f:0c:
d6:47:a1:97:2c:4c:56:b5:21:f1:2b:a7:30:08:88:40:a7:52:
c5:1d:52:e4:39:9a:aa:2f:a2:62:24:62:d3:d7:61:1b:8a:85:
05:42:7a:f9:59:f3:4c:ee:63:e5:31:cd:c3:13:89:9e:ad:f2:
0a:28:84:7a:d8:3e:87:8f:a0:29:a7:36:fc:1f:74:0b:f5:3c:
12:3b:68:9a:fa:a3:5a:03:19:99:56:cd:eb:bc:52:cd:89:f0:
db:e1:fa:03:9b:e1:78:44:f3:d8:99:be:0d:71:eb:ce:31:95:
13:d2:19:ef:7b:51:4e:8c:ce:e9:be:ca:ff:a2:f3:d1:75:07:
c2:de:2b:00:81:fd:d2:e5:b0:35:ce:e0:0a:d3:89:59:f9:9f:
e8:da:0b:60:cd:44:84:d9:8f:6f:6e:7f:7d:79:63:78:ec:89:
46:4c:88:5e:16:a9:10:c9:b0:e8:fb:01:6e:43:dc:9b:3d:8c:
9e:4d:78:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciFUbDsDsuPq51BzL/y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4
OTZhMDAwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD
Eyg1OTJjYzNhMDNiNmFlMTdmZDQ1MTJjZDZjMzM3MzgwZDRlN2QyNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23nqjflsHR7VwTUiVdfKK9TBJJVs
dfXmOQx8YtzPVXz9KldE/k8z2oiY6kzUXBfgz+g5VVMPpC+04+wB8pjWd6YwfdJz
AxM2tkKCC9nPreHtK10A+2kFHHrUdo0DAbRBuqrAv1+thDJ0602w1guVx9eFVoj7
t1KSWsiNW0L8Ghllm64RbrNNyAVd9yfiWee4r5cslXK6McsqtlKsnNZiNoBbhu6P
Md+s9koUMO8UcYv9nJ2Cnk1mhiMtfON3XVUw5i7XzQpqfhHuKrT1j2GZMLJybzHl
Igp0ZRxYJgKxdicmTZ15wCH06lp9pAdpQWk91fJaC6TV08PLeN1euQhdEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFksw6A7auF/1FEs1sM3OA1OfSSwMB8GA1UdIwQY
MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt
NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3
LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYrTpVrF
g4pNhBwwfb2yYzmagJyas00FviRCjl+QbEeH83ksCdVgFTigeFoxQI8g/K6gfPNK
hbRTCzcDzhUGO2vy3sZQtj8M1kehlyxMVrUh8SunMAiIQKdSxR1S5Dmaqi+iYiRi
09dhG4qFBUJ6+VnzTO5j5THNwxOJnq3yCiiEetg+h4+gKac2/B90C/U8Ejtomvqj
WgMZmVbN67xSzYnw2+H6A5vheETz2Jm+DXHrzjGVE9IZ73tRTozO6b7K/6Lz0XUH
wt4rAIH90uWwNc7gCtOJWfmf6NoLYM1EhNmPb25/fXljeOyJRkyIXhapEMmw6PsB
bkPcmz2Mnk14HA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:10 2026 by rpki-client