Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: vD012/e55KGnTVY3ALv5VQlLDmAxMpqncUs6jnpUsQY=
Subject key identifier: 8B:6E:55:05:8A:94:3A:9E:A6:9F:6C:DD:DB:15:E0:B3:F9:55:E0:94
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019D1A91BE2EE3AE5DB2AF72B5F15852FFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 07B1
Signing time: Mon 23 Mar 2026 12:00:52 +0000
Manifest this update: Mon 23 Mar 2026 12:00:52 +0000
Manifest next update: Tue 24 Mar 2026 12:00:52 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: R95rjBsueeWJJLobOUTfzSnax4kPV6TlaPRhGkZ2Eno=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:91:be:2e:e3:ae:5d:b2:af:72:b5:f1:58:52:ff:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Mar 23 12:00:52 2026 GMT
Not After : Mar 24 12:00:52 2026 GMT
Subject: CN=8b6e55058a943a9ea69f6cdddb15e0b3f955e094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:0b:f1:29:67:ff:6f:e4:d2:ad:4b:81:f1:
9e:64:5c:18:bb:1c:8d:7b:41:01:77:a9:19:44:47:
f4:14:b7:b7:d7:2e:64:82:c9:eb:4f:75:16:14:c9:
4b:23:8c:57:96:af:cd:81:03:78:db:4e:d1:b9:02:
43:04:c0:19:79:af:3c:d5:2b:37:d1:11:52:66:72:
d3:06:e2:35:a3:14:51:9c:31:16:80:8d:cf:73:70:
74:8f:a7:d3:99:ee:bd:37:27:24:c7:50:4e:f6:38:
c7:60:76:72:9f:de:53:87:86:dc:19:4a:87:cc:4f:
10:f0:35:45:0a:ec:7b:8c:86:63:f7:ac:7e:7c:6a:
7e:ac:6c:41:98:43:8e:05:ca:23:fd:15:3c:a0:54:
4a:d3:36:f9:a2:b1:9f:2c:80:40:8d:9a:e6:eb:f8:
33:b5:ca:29:2d:9e:b5:b8:93:56:27:2f:64:42:dd:
45:4e:54:7e:e1:58:4a:0e:bf:07:a6:e7:9c:d9:da:
42:01:89:1f:69:0c:3b:af:39:8a:9d:d1:56:ba:da:
dd:8f:e6:27:f7:7a:cf:3e:f3:f6:a0:cc:01:7e:b8:
c9:02:f1:18:0d:ab:a4:79:24:61:2b:8a:20:bc:51:
93:3f:96:21:42:4c:39:51:bd:a4:f7:5e:34:96:fb:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:55:05:8A:94:3A:9E:A6:9F:6C:DD:DB:15:E0:B3:F9:55:E0:94
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:91:2c:76:74:62:dd:b1:88:86:bb:cf:ce:43:07:d8:d5:2a:
ae:06:a7:02:e5:6c:37:ef:d6:48:0f:92:80:15:df:de:c9:e9:
1c:4c:e0:46:9e:a6:53:37:51:f7:e9:fc:e5:3c:f7:f7:c9:d3:
c2:f1:21:5f:1a:4d:83:bd:54:c9:b7:a2:75:3b:61:c5:c9:a7:
2e:8f:f6:36:70:6b:4d:90:3e:95:67:16:86:24:db:c8:8f:09:
33:8a:98:2f:44:d8:52:e1:2a:7d:51:83:84:19:77:1e:0f:18:
70:c5:3a:2b:b2:f5:fd:f9:fa:0e:ac:21:55:ca:13:0d:0f:67:
4a:a8:4c:a3:2c:2d:76:56:f6:3b:61:99:bd:28:e7:28:88:7f:
00:cd:09:96:45:13:10:17:ac:92:b4:61:1f:b1:3a:5a:77:c8:
9c:e5:8b:24:61:a0:42:8b:51:c6:72:df:75:86:9b:cc:f3:f5:
3f:f6:17:20:02:9e:3c:2b:63:8f:5b:88:98:80:ae:51:7b:7f:
e9:72:04:e3:bc:61:82:16:6a:e9:e9:4b:69:41:91:e0:23:26:
fb:c3:b1:d2:ff:b4:97:b9:0c:e0:d9:6f:ce:c1:87:b1:56:21:
a9:f5:e0:56:c3:d0:b9:22:2a:0a:80:60:44:1c:10:c6:51:38:
f8:4c:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 21:55:43 2026 by rpki-client