Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: bZFPU/3bhqV5JnTTfYobnKcFaq3YptB0gH4LTk3va3U=
Subject key identifier: 72:A8:08:75:CA:9F:AE:58:CB:05:6B:8F:70:66:D1:43:8A:FF:3E:67
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 01A13CDC3AE3A5632B4DAB2AAF4C195B473B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0B2B
Signing time: Thu 15 Oct 2026 00:00:28 +0000
Manifest this update: Thu 15 Oct 2026 00:00:28 +0000
Manifest next update: Fri 16 Oct 2026 00:00:28 +0000
Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: PEVyCbS+7ckhS3qthDbMl4uIIyaKEo+vMZpQZrzFfkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:3a:e3:a5:63:2b:4d:ab:2a:af:4c:19:5b:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Oct 15 00:00:28 2026 GMT
Not After : Oct 16 00:00:28 2026 GMT
Subject: CN=72a80875ca9fae58cb056b8f7066d1438aff3e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:72:f2:2c:a2:43:19:a4:01:95:99:1e:a2:65:
0f:1c:35:83:ca:c8:57:e6:88:8a:5c:ad:5a:01:95:
1f:6a:1d:88:1f:21:0a:d4:58:f2:f8:49:69:d3:87:
26:23:37:8c:b6:e8:13:db:6a:e9:22:3d:c8:ac:79:
e3:f9:5e:0e:2d:67:ef:4f:43:23:13:42:18:7b:63:
99:be:da:cc:4a:4e:69:d3:a3:11:bf:cc:9e:0d:2d:
7e:cd:c1:94:5a:22:56:72:69:7a:8c:de:69:39:01:
ee:4b:31:80:c0:8c:39:af:3b:2b:5b:c9:99:3b:31:
5e:28:21:b1:0f:b4:58:20:0c:98:0e:e8:2f:77:78:
cb:d7:5e:dc:39:26:4c:b7:dc:d0:0f:6c:95:f5:30:
e8:fb:c0:fb:50:35:eb:91:3e:b8:c9:7e:03:e8:63:
61:73:ad:2a:94:de:45:eb:9e:99:ee:43:ad:af:2f:
2e:37:fd:dd:db:a2:f1:d1:2b:a4:4f:a7:a0:45:ed:
c6:3b:9a:67:7c:93:81:26:e0:51:ee:27:51:14:6f:
40:65:3a:9e:37:62:03:29:78:de:df:ee:32:61:7c:
e2:09:13:67:7f:a3:e6:24:91:49:7d:73:d8:86:2b:
09:4a:fd:03:53:c8:24:5b:12:a7:8d:02:d0:87:a4:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:08:75:CA:9F:AE:58:CB:05:6B:8F:70:66:D1:43:8A:FF:3E:67
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:20:8a:ed:1d:96:d7:74:50:79:60:97:84:59:68:83:7d:54:
4f:88:f6:1c:69:88:0f:7f:98:d0:b1:28:d9:3a:b1:7c:d7:03:
c2:a8:f7:5f:78:d3:84:c1:71:6e:78:cb:6d:0c:c5:3f:f4:1f:
f7:a3:39:af:f7:ff:e7:a8:89:52:eb:98:50:8d:2f:89:2b:08:
23:69:b8:89:d1:47:f5:d1:16:38:29:17:31:91:5f:e4:ce:b5:
7f:62:5c:0f:ce:53:20:5a:21:4f:92:bf:97:5d:b0:b9:ff:f1:
42:a9:ad:7f:95:e3:6a:a2:69:b0:73:ee:ec:70:7a:dc:8f:31:
bd:c6:6a:98:48:00:09:cd:5c:46:95:16:29:1b:2b:8f:45:1f:
71:83:d0:e2:04:e5:55:c1:56:1a:17:86:67:7a:4f:2b:84:23:
c7:5d:5c:87:5d:15:f6:95:57:13:9a:91:f2:69:77:73:f6:9c:
2b:00:d0:c2:cd:25:9a:76:c7:7f:83:2e:be:52:b2:ac:c0:79:
0e:44:f0:c3:d9:4c:f4:83:17:c2:11:c9:43:e9:dd:30:a5:81:
2d:3d:e3:ef:09:74:c5:e9:9b:2d:f6:5e:8b:65:4b:b8:57:ce:
3a:b4:2b:a7:15:be:7f:41:17:2d:30:f2:a7:79:b8:bf:dd:e7:
85:19:04:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:47 2026 by rpki-client