Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: +IGKvgKoM96UPO/0lmXEE4eMu1P89gm1/eAu6bHbC3E=
Subject key identifier: F8:F2:54:2E:98:0C:9A:23:84:BC:34:F9:6C:6F:B3:6F:06:0E:01:F8
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019EEDEAF539B759B780C3B60A481F35AD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 08A3
Signing time: Mon 22 Jun 2026 06:00:58 +0000
Manifest this update: Mon 22 Jun 2026 06:00:58 +0000
Manifest next update: Tue 23 Jun 2026 06:00:58 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: biFmQlWamo26+IXmHR1G14jDdzd/0wsxthWvDV7V054=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:ea:f5:39:b7:59:b7:80:c3:b6:0a:48:1f:35:ad:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jun 22 06:00:58 2026 GMT
Not After : Jun 23 06:00:58 2026 GMT
Subject: CN=f8f2542e980c9a2384bc34f96c6fb36f060e01f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:42:94:65:77:95:1c:af:4f:bf:66:8b:a7:
9d:62:ad:23:35:0d:9a:07:1f:01:d9:42:74:a5:c1:
ec:2a:48:ca:a8:bd:08:72:52:2c:94:7e:34:a5:19:
90:1e:8c:76:06:eb:6d:4e:0b:a2:17:0b:41:8c:52:
d3:8c:64:fb:cf:df:2a:31:1d:74:c7:ab:88:27:ca:
87:91:f9:fd:5c:55:62:0f:53:e3:3c:e8:81:aa:f3:
57:c1:ea:6b:a6:4f:41:29:c2:b1:6a:b5:96:0e:f4:
cd:86:cf:e5:aa:9f:88:c5:d9:dc:2b:9e:7e:ad:72:
82:ca:b2:f7:c6:2b:22:f5:7b:cf:14:6c:98:d2:f7:
bb:0a:00:50:5a:06:98:0b:7f:13:fb:bc:6a:98:88:
12:75:87:78:7e:1e:e1:2e:fb:e4:38:20:51:58:92:
cc:1b:03:1a:35:c4:a3:99:7e:5a:0c:5a:73:f9:d8:
01:8d:32:aa:e0:53:6b:5f:c0:36:09:b6:8f:86:65:
ae:05:32:1d:17:94:92:6d:04:96:91:c6:bb:79:42:
78:57:e6:48:b4:31:2b:fc:db:1f:0d:63:e9:6e:a4:
49:36:f2:60:06:01:40:b1:20:ec:a2:77:1e:b8:cd:
80:4e:87:63:04:cb:e2:24:5d:f5:a0:5c:58:9d:9d:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:54:2E:98:0C:9A:23:84:BC:34:F9:6C:6F:B3:6F:06:0E:01:F8
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:98:35:f0:9b:94:d5:03:93:c6:88:de:8e:2f:5c:e0:46:85:
5d:ad:c9:c2:dd:0f:70:b2:c7:13:51:55:0a:44:63:dd:f7:14:
aa:35:ee:ad:02:96:f1:e7:6f:b8:1d:90:18:3c:a1:87:bc:2f:
78:bb:56:92:f4:aa:47:67:36:1d:41:ed:02:59:5f:28:40:89:
f6:28:fb:ea:ea:54:7d:fe:79:e2:f6:75:8c:6a:4b:ba:a4:68:
36:bf:cc:fc:4c:95:ae:18:3e:95:3d:23:b0:20:4f:5b:bd:11:
30:09:fb:ed:10:d1:f3:bb:e9:1f:17:d7:ee:89:a0:f8:08:47:
9f:ce:d2:76:fa:ba:93:4f:0e:61:d2:78:67:70:84:dd:59:a5:
8b:ee:4d:8e:f5:4c:28:69:64:bb:40:f8:bc:9c:0a:48:7b:a6:
d6:59:43:22:55:00:d1:9b:f9:c4:98:b7:b7:04:28:5e:a5:a9:
72:17:d5:9c:3e:54:95:43:2f:86:13:19:71:74:f4:1a:04:80:
9b:95:46:25:e1:09:eb:0c:0a:e9:45:e6:dd:71:d1:98:02:16:
3e:cf:07:10:82:2b:2d:63:48:9b:58:80:f9:d1:56:39:cb:eb:
0e:ac:65:f4:34:52:89:e6:5f:5a:3c:84:df:4d:51:7e:48:18:
f9:71:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 16:16:54 2026 by rpki-client