Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: 9HSjAj4dX7qiQCq7bl2Mn3Js0yNpDAVdIdfb9sFQ0Ro=
Subject key identifier: 97:3E:89:56:92:23:BD:7B:D6:A8:C7:94:BE:83:F5:3E:3D:00:97:B5
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019D3865C4D884D50B66BC6EDB03C599AA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 095E
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: AwE9b4G6ygYQHhXakEFv3hcOQgW9wF6MEa+hNaUArNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c4:d8:84:d5:0b:66:bc:6e:db:03:c5:99:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=973e89569223bd7bd6a8c794be83f53e3d0097b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:2e:71:f6:9e:a2:c4:a0:ce:20:f1:94:77:
20:70:74:0c:eb:61:4d:77:ac:ae:04:d6:8a:8c:7f:
86:33:5b:dc:cd:e4:dc:9f:b8:62:3e:cc:65:71:10:
32:75:ee:c8:e7:e4:ba:8e:83:cf:f6:09:4f:80:4c:
df:7d:05:8a:87:7c:d3:b2:99:d6:92:27:ef:2f:44:
d3:04:60:9c:1c:d4:f4:58:4a:c0:62:59:9d:2d:5b:
43:75:8c:94:cd:15:a4:d1:9d:bd:6a:58:24:df:4a:
e1:9f:47:5b:25:97:1a:c3:6b:03:b6:79:cd:e8:bf:
3d:ad:6b:da:a2:12:cd:36:08:ad:5e:77:8c:5d:eb:
0c:a9:f9:3a:3b:64:82:b3:bd:2c:bd:5f:c7:67:c2:
81:b3:93:68:1f:cb:64:12:c8:02:f2:31:0a:a4:2e:
64:09:82:24:e0:4c:92:1b:e7:5f:8c:88:ce:36:80:
af:28:76:31:48:20:13:3c:df:71:cb:91:ad:8a:9d:
30:be:4c:6d:68:10:92:00:b5:de:e3:fe:94:0d:de:
17:86:1c:be:13:c3:dd:3f:73:32:93:5c:25:3f:d9:
8e:c3:9a:5a:b2:f6:be:a2:b2:20:ac:d1:1f:d4:57:
3a:c5:ce:fb:99:b6:39:85:0e:a2:25:ba:9f:d2:60:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:89:56:92:23:BD:7B:D6:A8:C7:94:BE:83:F5:3E:3D:00:97:B5
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:39:9a:c2:9d:be:7d:27:ec:ae:1c:cd:27:78:c4:74:55:
75:b5:c7:6b:7f:07:11:b2:f1:6d:2c:1c:af:c4:b0:2e:7d:c5:
9a:c5:e8:cd:96:7f:7e:69:2f:bb:ab:36:37:48:b2:36:b9:3a:
fd:49:ab:23:b9:36:1c:c4:ba:6d:4e:8c:6a:94:2e:fb:06:7e:
d0:a9:09:c6:05:0e:36:e5:41:f5:93:1d:45:79:41:c5:8d:ac:
b8:94:f7:38:28:5e:34:b4:ec:d3:64:f2:3e:0b:83:b8:99:77:
e0:18:3d:8c:24:74:db:71:25:99:8e:f0:77:82:dd:ee:ec:b5:
5b:e4:9f:23:81:94:4f:38:20:e5:d2:c4:53:1b:89:77:86:10:
35:3d:37:3d:73:c7:20:5a:c3:ec:be:e5:89:84:35:7a:63:e1:
b4:d1:8b:42:8a:60:32:5e:b6:ef:19:8f:9d:b7:14:e1:29:fa:
fb:14:60:bf:59:d8:05:ef:fb:d6:e3:c6:1d:19:1d:39:7c:43:
9b:1a:0d:c0:10:df:b4:f3:34:24:68:2f:fb:ac:2c:8f:ea:a4:
e6:7c:af:ee:e1:7a:5e:b9:05:5e:43:5f:3b:2f:91:ce:53:f5:
8c:15:40:8e:cf:26:94:23:e8:82:c0:4c:e7:d5:26:a7:97:40:
10:41:d4:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcTYhNULZrxu2wPFmaqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZmM1NTU3NDg3NmUwZDZmYWJlOGE5NzkxY2MwZDM2NjVh
ZmY4ZTYwHhcNMjYwMzI5MDcwMTI2WhcNMjYwMzMwMDcwMTI2WjAzMTEwLwYDVQQD
Eyg5NzNlODk1NjkyMjNiZDdiZDZhOGM3OTRiZTgzZjUzZTNkMDA5N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20cucfaeosSgziDxlHcgcHQM62FN
d6yuBNaKjH+GM1vczeTcn7hiPsxlcRAyde7I5+S6joPP9glPgEzffQWKh3zTspnW
kifvL0TTBGCcHNT0WErAYlmdLVtDdYyUzRWk0Z29algk30rhn0dbJZcaw2sDtnnN
6L89rWvaohLNNgitXneMXesMqfk6O2SCs70svV/HZ8KBs5NoH8tkEsgC8jEKpC5k
CYIk4EySG+dfjIjONoCvKHYxSCATPN9xy5Gtip0wvkxtaBCSALXe4/6UDd4Xhhy+
E8PdP3Myk1wlP9mOw5pasva+orIgrNEf1Fc6xc77mbY5hQ6iJbqf0mDFhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc+iVaSI7171qjHlL6D9T49AJe1MB8GA1UdIwQY
MBaAFAX8VVdIduDW+r6Kl5HMDTZlr/jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQt
ZTk4MDYzOTIxYmYwLzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQtZTk4MDYzOTIxYmYw
LzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr45msKd
vn0n7K4czSd4xHRVdbXHa38HEbLxbSwcr8SwLn3FmsXozZZ/fmkvu6s2N0iyNrk6
/UmrI7k2HMS6bU6MapQu+wZ+0KkJxgUONuVB9ZMdRXlBxY2suJT3OCheNLTs02Ty
PguDuJl34Bg9jCR023ElmY7wd4Ld7uy1W+SfI4GUTzgg5dLEUxuJd4YQNT03PXPH
IFrD7L7liYQ1emPhtNGLQopgMl627xmPnbcU4Sn6+xRgv1nYBe/71uPGHRkdOXxD
mxoNwBDftPM0JGgv+6wsj+qk5nyv7uF6XrkFXkNfOy+RzlP1jBVAjs8mlCPogsBM
59Ump5dAEEHULA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:06 2026 by rpki-client