Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: PCUMc/HxYP+lbotib7ZaChTp9pYawJzBSe/C6F/GCEk=
Subject key identifier: CE:F3:00:E2:FD:93:DD:2F:11:65:D1:00:DC:4C:17:E5:53:9F:CE:CF
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 019D378972592D0101FBD2F6284F60283F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0916
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: s6AHS3TClY74nmZQL4NmzNM1q64iEMJwI0eSJMwNUVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:72:59:2d:01:01:fb:d2:f6:28:4f:60:28:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=cef300e2fd93dd2f1165d100dc4c17e5539fcecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:5f:d6:5f:e1:23:89:cd:22:d7:7a:5f:2d:
b7:c5:34:4e:3d:4f:6b:84:8f:f6:6a:7a:d7:3e:bf:
29:dd:98:b1:a6:cf:a6:39:5a:5b:19:a7:d8:99:e3:
fa:86:8a:59:24:d0:31:92:7a:76:9f:65:31:99:2f:
f1:36:f5:72:03:81:6d:f0:58:59:e4:9a:f1:e9:78:
ae:26:52:87:c5:08:e1:e6:c7:59:7a:54:35:73:3a:
72:31:2f:9b:eb:9e:88:d2:c3:cc:9e:70:79:d8:62:
bd:f9:bb:b8:47:30:8c:cd:d5:99:e7:dd:d1:7e:9a:
cf:36:b0:86:79:dd:17:f6:d3:62:76:c9:02:2d:53:
c8:86:64:5c:51:7a:7d:55:7b:0f:ec:b2:ee:c4:41:
59:66:cf:95:0a:3d:8a:12:23:6e:98:57:bb:f5:da:
91:cf:1b:ac:1a:95:9c:87:e2:6f:e1:21:2a:d2:54:
f5:1b:ac:58:c4:8d:b0:46:62:6d:ab:2a:5f:1a:52:
a9:85:f1:0e:45:2e:57:2e:1e:1a:3f:53:8b:6f:dd:
8b:f5:6e:2a:47:d4:b7:fe:da:d1:1b:1f:6f:79:51:
4c:ad:bf:20:90:3b:b3:74:93:37:67:e1:0d:b9:ab:
64:b2:64:27:9a:95:a6:43:e5:53:6e:78:e2:4d:8c:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:00:E2:FD:93:DD:2F:11:65:D1:00:DC:4C:17:E5:53:9F:CE:CF
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bc:7b:bd:e5:4f:73:0d:7e:55:9e:a7:0f:09:dd:07:ce:82:
52:49:c9:f6:5f:58:89:41:bc:1a:53:b5:b0:52:52:6a:ba:cb:
85:50:e1:41:12:46:8b:b1:91:91:29:01:0c:8b:05:5e:32:96:
e9:09:55:fe:9a:9d:8c:ef:4b:15:2b:f0:8a:28:59:48:30:e7:
0e:fa:ab:96:57:45:e5:94:65:d9:57:42:43:fd:ea:83:3b:e6:
7c:ee:82:db:fc:f8:1f:35:6d:2e:32:00:60:dc:c9:e8:d5:c0:
29:e9:69:4a:be:64:c1:06:95:fc:61:04:a2:34:4c:5e:1b:7f:
d7:51:b3:07:af:06:20:59:75:7c:ea:ae:7b:85:b2:13:ae:77:
f6:f5:6d:3f:12:32:31:24:fc:29:24:31:e4:4d:dd:20:33:00:
2c:4f:2f:6e:76:56:d9:0b:90:0a:ea:6d:81:7f:a5:93:48:2b:
35:9a:13:15:69:de:34:50:5e:20:14:be:1d:4c:02:75:f7:b9:
a7:ff:bd:4f:b1:fd:9b:31:6f:e6:dd:06:1d:b4:b0:35:a4:1c:
98:31:57:5a:ba:19:be:a6:b5:12:0f:85:b9:4e:30:49:db:39:
a1:3b:b5:83:af:be:1a:7c:20:89:4c:44:05:24:16:1a:e7:bc:
ab:f3:07:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXJZLQEB+9L2KE9gKD9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw
ZDVmYzMwHhcNMjYwMzI5MDMwMDQ3WhcNMjYwMzMwMDMwMDQ3WjAzMTEwLwYDVQQD
EyhjZWYzMDBlMmZkOTNkZDJmMTE2NWQxMDBkYzRjMTdlNTUzOWZjZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UVf1l/hI4nNItd6Xy23xTROPU9r
hI/2anrXPr8p3Zixps+mOVpbGafYmeP6hopZJNAxknp2n2UxmS/xNvVyA4Ft8FhZ
5Jrx6XiuJlKHxQjh5sdZelQ1czpyMS+b656I0sPMnnB52GK9+bu4RzCMzdWZ593R
fprPNrCGed0X9tNidskCLVPIhmRcUXp9VXsP7LLuxEFZZs+VCj2KEiNumFe79dqR
zxusGpWch+Jv4SEq0lT1G6xYxI2wRmJtqypfGlKphfEORS5XLh4aP1OLb92L9W4q
R9S3/trRGx9veVFMrb8gkDuzdJM3Z+ENuatksmQnmpWmQ+VTbnjiTYz/GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7zAOL9k90vEWXRANxMF+VTn87PMB8GA1UdIwQY
MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt
N2JjZmQ2NGUwMjg4LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4
LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrx7veVP
cw1+VZ6nDwndB86CUknJ9l9YiUG8GlO1sFJSarrLhVDhQRJGi7GRkSkBDIsFXjKW
6QlV/pqdjO9LFSvwiihZSDDnDvqrlldF5ZRl2VdCQ/3qgzvmfO6C2/z4HzVtLjIA
YNzJ6NXAKelpSr5kwQaV/GEEojRMXht/11GzB68GIFl1fOque4WyE6539vVtPxIy
MST8KSQx5E3dIDMALE8vbnZW2QuQCuptgX+lk0grNZoTFWneNFBeIBS+HUwCdfe5
p/+9T7H9mzFv5t0GHbSwNaQcmDFXWroZvqa1Eg+FuU4wSds5oTu1g6++GnwgiUxE
BSQWGue8q/MHyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:14 2026 by rpki-client