Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: /Y/PMJWQ8yYbu011Zf+h6un6QIHF57dc61RRgkxXfpc=
Subject key identifier: 37:F7:5F:18:1F:34:77:CB:90:C3:C9:1F:AE:07:14:00:9D:4E:BB:53
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01A125B00F86419A090B92CC95FEEEFB5B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 09C9
Signing time: Sat 10 Oct 2026 12:00:57 +0000
Manifest this update: Sat 10 Oct 2026 12:00:57 +0000
Manifest next update: Sun 11 Oct 2026 12:00:57 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: cy7J8nfRYhBvE3p8Z8uWThwj4JxuFO4paIIBQF73YKo=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:0f:86:41:9a:09:0b:92:cc:95:fe:ee:fb:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Oct 10 12:00:57 2026 GMT
Not After : Oct 11 12:00:57 2026 GMT
Subject: CN=37f75f181f3477cb90c3c91fae0714009d4ebb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:27:c8:8f:d6:8f:0f:de:86:35:c1:21:30:
91:fe:c3:0e:df:b6:67:e4:e3:c0:08:90:4a:2b:46:
90:da:f6:24:01:9e:92:db:ae:e1:67:92:ab:a2:ab:
4e:02:1a:e6:99:90:bd:04:93:78:9a:b2:07:bd:16:
bd:41:a8:db:81:07:5c:b5:8e:10:ad:2e:90:48:9d:
c6:dc:45:ec:d9:9e:8c:32:55:ce:07:c0:3e:15:9f:
ac:48:17:56:ae:fd:f3:01:e9:9d:53:4c:84:f0:5d:
f9:e2:c8:72:2c:71:c5:e3:c9:89:ae:7c:f3:5d:57:
1b:08:22:19:a5:aa:3f:9a:7d:89:c7:9b:26:9d:79:
a6:d7:6d:8b:df:2c:9b:58:a9:11:c3:2a:98:76:6a:
17:79:6b:be:d1:5f:4f:1b:7d:39:af:f7:ca:5a:54:
01:fa:bb:8c:61:a7:f1:7c:95:2d:41:67:aa:12:e9:
5a:76:98:58:b1:23:9d:ee:a6:33:9a:71:29:d0:0d:
68:d2:2b:d9:56:a7:74:ef:3c:bb:34:84:ed:45:d4:
70:88:89:e7:45:3f:45:e4:43:84:05:94:b6:6c:61:
d3:1b:e6:43:e6:1f:3d:2e:c3:e2:2a:5b:0b:6c:0c:
e8:b8:86:39:b5:10:77:dc:d3:4d:0b:62:2d:63:08:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F7:5F:18:1F:34:77:CB:90:C3:C9:1F:AE:07:14:00:9D:4E:BB:53
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9e:80:a6:74:62:e3:c7:46:97:73:98:9d:1d:78:da:97:b2:
ef:2d:a7:b6:a2:d5:56:97:68:05:fc:ce:e1:a9:a6:29:a7:5b:
d7:64:12:a0:a7:52:40:7d:d6:61:9c:da:92:56:67:6d:0a:0b:
0b:7e:f9:d3:a3:14:71:28:37:ca:10:da:8d:d4:1d:14:33:f5:
e6:21:cc:1b:39:f2:7f:d6:9a:ff:e7:75:2c:17:ba:65:05:62:
86:50:11:31:d6:14:63:58:7e:5a:f3:d8:fe:fb:4f:71:86:d4:
12:61:50:1e:c6:54:4b:2c:2d:0f:6f:eb:41:04:da:c8:d1:5e:
17:a6:9c:6a:1c:1a:50:5c:71:cc:ad:4c:6e:0b:f3:50:53:b0:
49:66:ef:34:d7:0d:b3:db:6b:57:a2:ee:73:5c:fd:be:92:56:
a5:d0:ba:ac:3d:8a:2d:de:8f:c4:f2:22:97:2e:6d:ce:e6:23:
a9:d0:b9:4c:69:e1:06:97:81:7d:4b:ff:62:0b:04:ee:98:b7:
4b:06:12:e8:81:b0:a4:53:62:91:aa:01:ef:02:2e:7d:d7:db:
49:35:87:9e:32:19:70:17:c7:2d:ee:54:60:79:e5:69:34:ee:
26:a5:c4:02:89:6c:0f:eb:f4:4e:95:38:f6:80:70:e4:95:79:
1b:8f:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:12:05 2026 by rpki-client