Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: YV5B5RXlMl7cHBnMAeZOLXID6j3LDYM10zDy/+sQeNA=
Subject key identifier: 75:1C:30:3A:C5:26:26:29:C5:CD:0B:72:C2:23:7F:04:2D:AB:6D:FA
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019F19432C98284ECE022354414230A99A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0A57
Signing time: Tue 30 Jun 2026 16:01:00 +0000
Manifest this update: Tue 30 Jun 2026 16:01:00 +0000
Manifest next update: Wed 01 Jul 2026 16:01:00 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: uiR4YHD0C3U0T4ulnJRLwXHUv/T0/H/r5DxtHT+p4XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:2c:98:28:4e:ce:02:23:54:41:42:30:a9:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Jun 30 16:01:00 2026 GMT
Not After : Jul 1 16:01:00 2026 GMT
Subject: CN=751c303ac5262629c5cd0b72c2237f042dab6dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:8b:13:ef:a5:20:49:3c:53:e1:7b:1f:bd:
a6:f2:7f:0b:89:dc:83:1a:1a:6f:60:5f:5f:af:1d:
98:39:ad:7e:fc:8f:20:57:f6:f3:bc:77:12:25:3e:
6f:de:c8:c8:ed:53:11:a8:ec:17:a4:95:f4:f0:0f:
e1:b5:f0:eb:6e:35:2d:71:1f:39:23:2d:47:58:9f:
b3:43:e3:89:0a:8a:87:c5:f9:c6:e0:09:6c:85:b9:
40:c7:87:6b:fc:fe:20:b9:69:08:15:99:75:8f:b2:
94:76:86:c9:ee:e5:7f:07:c6:8f:1e:c7:85:68:34:
e3:90:49:40:bf:e0:32:5c:a4:97:fe:d0:07:12:b9:
93:dd:49:b7:10:92:65:be:ee:3c:8c:2c:8a:36:89:
ec:3b:a7:f1:30:70:c4:56:05:68:b0:b9:a4:e4:42:
b2:f1:b3:96:a0:64:66:a8:b3:ab:21:c5:13:aa:3a:
2d:e5:6e:ea:9d:7d:7c:b8:fa:44:fd:d0:58:56:5f:
92:ff:09:19:06:70:aa:60:ca:43:15:53:24:5c:dd:
66:ed:f2:86:ca:8f:2a:6a:6f:8d:ee:28:d6:b6:f9:
ea:00:a8:e9:83:22:c3:61:ec:d1:3e:ae:e7:6e:ab:
6d:0d:23:29:81:c7:fe:05:7d:61:e3:e7:b2:00:62:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1C:30:3A:C5:26:26:29:C5:CD:0B:72:C2:23:7F:04:2D:AB:6D:FA
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fc:0d:94:91:91:3f:55:84:8e:ca:c2:d6:dc:17:71:07:1f:
ac:af:c4:3c:9c:7f:b4:05:8e:81:9e:38:eb:8c:42:6e:88:71:
67:de:19:b1:49:8e:30:c7:2a:8e:88:85:da:4f:66:44:e2:0b:
fa:f0:1f:ac:a2:f4:d2:1c:81:66:99:07:0a:09:c9:e8:f6:4d:
ab:27:5e:c2:3d:ca:f1:eb:9e:cb:67:2c:e2:e7:1f:56:b4:67:
b1:4b:4a:07:3e:ef:ff:bc:f7:80:94:b2:6b:49:84:80:dd:77:
a9:0e:94:88:fa:88:94:51:ce:2c:ab:61:12:d6:92:91:76:95:
cf:8a:09:7f:27:2b:15:80:cf:2e:7f:35:8c:c2:c3:3b:49:c9:
6f:aa:e6:da:0e:e3:0b:03:bd:4d:fa:f2:6a:25:8b:d3:18:f7:
22:af:c8:02:0e:09:70:61:01:d1:3a:9a:ed:e4:0a:2c:00:82:
2c:78:40:25:c9:30:3f:d2:e2:eb:a2:e8:0a:92:1c:5b:b2:12:
bf:30:2f:26:2f:bf:36:c7:ce:04:f0:87:12:4f:bc:95:c3:cc:
a4:56:b6:1e:cf:2d:00:da:60:f4:f2:30:4c:2e:a8:6e:ec:a0:
9d:06:ba:01:e0:59:68:c2:56:8c:a4:bd:66:53:99:7f:93:81:
1f:66:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:08 2026 by rpki-client