Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: hw7npCI5Sxg4YFgFp4h5wJTgtU7latXaqT53+1qE5Qo=
Subject key identifier: B3:B6:20:41:69:6C:55:3F:BD:0C:24:F7:81:B9:8A:99:3F:2B:16:4D
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019E043E3E126762EA634DF850FFE5C43E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 082A
Signing time: Thu 07 May 2026 21:00:48 +0000
Manifest this update: Thu 07 May 2026 21:00:48 +0000
Manifest next update: Fri 08 May 2026 21:00:48 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: HCpucF8TA7a6QWZpTK95yWDWO5NFZygE18dEs87Bhu8=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:3e:3e:12:67:62:ea:63:4d:f8:50:ff:e5:c4:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: May 7 21:00:48 2026 GMT
Not After : May 8 21:00:48 2026 GMT
Subject: CN=b3b62041696c553fbd0c24f781b98a993f2b164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:5b:0b:5e:6b:0e:22:1b:29:4c:fe:cc:95:
f5:9b:f4:b8:37:3c:56:65:ff:75:8d:76:58:f5:dd:
2a:0d:91:08:f3:a7:3c:fe:65:ae:00:88:36:f5:98:
21:de:1e:e0:fd:cf:31:28:89:d2:ab:23:67:dc:3b:
cd:64:54:7a:3d:1d:76:e2:94:b6:84:8b:32:fd:a0:
94:30:00:96:1d:31:51:0c:8f:5d:d0:1e:3e:6a:92:
ba:5c:0c:19:80:72:84:65:a6:ef:51:61:bc:8c:c7:
5c:e0:16:7f:8f:e5:3e:08:a4:db:ad:cb:2b:06:2f:
4a:df:80:e4:f0:c5:67:e5:a3:8e:48:b8:f0:bc:a3:
5b:f4:43:91:ca:9e:7b:07:d3:77:84:23:fa:2b:61:
af:3b:61:c3:f1:65:91:8a:e6:75:b6:55:de:88:51:
ae:b0:51:1f:eb:ae:35:23:b7:4e:cc:21:6f:c9:29:
60:89:f9:c9:a8:5d:0f:95:75:80:17:46:bc:13:e2:
70:f3:f3:63:6e:2e:a7:a9:6f:24:8a:90:4a:5b:7e:
1e:ae:2f:c3:98:76:44:06:a5:f5:a9:e2:26:bd:48:
4f:b9:8a:c2:15:31:da:90:44:93:a6:d2:23:8f:f9:
70:b4:b2:c6:5a:f2:81:ea:6d:5b:b9:a0:c0:9c:a4:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:20:41:69:6C:55:3F:BD:0C:24:F7:81:B9:8A:99:3F:2B:16:4D
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:71:01:11:28:fe:23:b8:40:ff:c9:2b:45:30:69:ef:c7:
59:a6:56:f5:96:fa:b9:cd:84:f6:7b:fe:36:ad:cb:a0:e2:c2:
ad:19:5e:d4:69:14:fb:83:58:08:33:f5:59:51:5c:9b:fb:d8:
8b:db:4b:1d:12:b4:2a:bc:c7:22:11:af:fb:22:1c:1e:01:ba:
ff:d3:eb:47:97:3c:0a:ca:14:e4:a1:e0:f1:97:40:ea:e0:d5:
a3:1b:87:dd:50:5c:63:d1:c3:5b:19:64:b3:0b:d1:88:e5:84:
63:ef:d1:db:28:93:3c:65:f4:ea:e9:bf:13:63:4d:9d:b3:0e:
4c:6a:32:55:a5:eb:61:bd:35:6c:c8:6f:06:15:c0:e1:52:48:
7e:be:d3:95:60:f0:8e:4e:54:89:81:c3:22:6c:7c:0a:a6:fb:
50:97:2f:d4:76:fb:ed:8b:72:61:a3:1c:ce:70:bc:47:70:f5:
f3:08:d1:18:86:7a:5e:a4:83:17:cc:2b:c2:ca:59:87:9e:55:
c1:ed:85:9b:83:7c:17:23:fd:20:41:af:80:fb:89:4c:5e:ab:
78:ee:07:b4:30:1c:e2:76:f4:09:df:cc:4d:65:d7:0a:f7:b5:
7b:11:cb:98:e4:7f:23:de:5f:fc:ed:6a:77:79:be:13:1f:ad:
b5:d9:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:20:01 2026 by rpki-client