Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: 5sqX7p9spuOYDGkv3DJe2DE7IOfbONKmr8eKjy86dog=
Subject key identifier: 29:7E:08:A0:CE:31:DC:AE:50:EB:33:AD:49:0E:06:5B:76:0A:CE:49
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019E2F9766F5F1E8E65C1CFBCAF6319663BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 09DE
Signing time: Sat 16 May 2026 07:01:51 +0000
Manifest this update: Sat 16 May 2026 07:01:51 +0000
Manifest next update: Sun 17 May 2026 07:01:51 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: iHZkncN1X+tsiSKfcRvlkfVSdcaRdiUfDz6Kdmsh4w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:66:f5:f1:e8:e6:5c:1c:fb:ca:f6:31:96:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: May 16 07:01:51 2026 GMT
Not After : May 17 07:01:51 2026 GMT
Subject: CN=297e08a0ce31dcae50eb33ad490e065b760ace49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:d1:e3:32:00:62:78:76:fc:bb:69:8f:e3:
cd:2f:b5:c3:58:08:b9:5a:34:38:aa:6c:b0:21:64:
ca:60:02:b2:88:05:a0:c5:23:f6:42:4b:d9:62:ec:
a3:23:42:86:b2:70:26:2e:30:60:0d:b1:1a:30:2f:
8d:e3:ff:4d:3c:ce:88:07:5a:85:1b:29:29:d1:58:
17:f9:1f:58:ab:df:44:7e:ad:00:e1:d2:d8:69:66:
5e:47:9a:a1:dc:2c:37:e7:5c:b7:f8:dd:2f:3e:ee:
d5:ef:7f:c4:2d:e0:de:36:57:8b:07:af:eb:3b:d6:
ee:05:66:2a:10:15:56:4d:cd:c1:91:71:c2:fe:57:
ab:d0:ef:ab:63:bf:6a:0e:d9:8c:08:b8:48:8d:6d:
c7:47:e9:84:ca:37:53:b6:b0:eb:27:9e:c0:82:f3:
49:45:8f:9c:fc:14:fc:fa:0d:d1:c7:d8:46:53:06:
de:30:d1:71:a6:a2:5c:5d:26:6d:c5:3c:c7:c8:4b:
45:17:7a:53:c4:ee:82:09:e1:d8:2b:3f:3b:fa:36:
86:31:41:f6:b5:c1:5a:d7:83:c0:75:36:4e:f8:98:
6d:91:84:40:52:62:c2:64:17:f1:03:cd:3a:d4:cc:
1c:83:95:cc:65:52:e6:58:90:89:2d:f9:f0:ee:9d:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:08:A0:CE:31:DC:AE:50:EB:33:AD:49:0E:06:5B:76:0A:CE:49
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:54:62:5d:f6:e3:56:f9:e3:91:73:c5:5f:f4:00:a5:de:5f:
a1:c4:f4:6e:b7:52:dc:4a:52:00:01:61:a5:1f:37:ba:55:fb:
d1:53:5f:18:34:1f:cf:2c:95:a5:44:53:68:56:38:b8:74:54:
55:6c:e6:a0:11:07:15:d4:2f:64:ba:04:4f:02:f5:b5:40:d7:
fa:37:14:04:2a:6f:01:64:e5:69:ff:19:72:84:eb:28:34:76:
3e:3a:1c:ce:91:68:ce:d1:cf:23:b0:27:07:ef:d5:0b:30:04:
b9:d2:32:3f:c1:9b:3d:9b:f3:ce:b1:6b:35:2f:c8:b4:94:27:
46:08:03:c9:42:e0:0b:05:b8:1c:b0:70:23:ca:8e:28:a3:5e:
7e:60:39:f8:50:f1:60:db:20:3f:1f:60:69:ce:20:a3:0e:88:
93:ea:0c:ba:b6:6f:60:49:50:e1:3c:8d:ec:72:6b:2c:f3:f2:
a2:63:1e:e8:2e:49:8d:9a:7d:78:0c:53:99:c9:6a:18:e4:2e:
45:c2:b8:96:60:1f:6c:38:db:55:9b:9c:30:a6:bb:04:cc:3a:
78:51:5b:99:d8:87:6a:89:7e:29:8b:8d:ee:8f:10:51:d4:c1:
0c:07:ff:11:9d:33:5a:6b:5e:2f:78:e7:8b:25:16:81:99:bf:
8d:dc:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:09 2026 by rpki-client