Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: JA0yasy1vZ50AeaAADhKkYAGGLbDRNBO5gQTUvHBhnc=
Subject key identifier: F6:4A:B0:43:2F:4D:36:53:01:00:50:7E:6A:B6:FB:12:95:96:68:15
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 019E30A939FCFFCE0894858484B844DBE180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0997
Signing time: Sat 16 May 2026 12:00:57 +0000
Manifest this update: Sat 16 May 2026 12:00:57 +0000
Manifest next update: Sun 17 May 2026 12:00:57 +0000
Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: Rj3fhaU6Jcdm/7uoB7bk0pdlm3b+dJDJzBzJFDoLbZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:39:fc:ff:ce:08:94:85:84:84:b8:44:db:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: May 16 12:00:57 2026 GMT
Not After : May 17 12:00:57 2026 GMT
Subject: CN=f64ab0432f4d36530100507e6ab6fb1295966815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:44:94:c2:12:c6:be:19:bf:5e:79:bf:27:
9c:d0:81:24:c4:16:54:4b:00:08:f1:7f:e3:bd:19:
52:e2:84:a5:6a:67:4f:20:00:9f:f2:b9:11:06:00:
ea:fe:91:92:18:28:f6:db:7c:f7:8a:16:a2:20:b1:
95:cb:47:9c:e5:41:12:85:7b:e8:51:28:3f:8a:a7:
ed:91:8f:6e:5a:6e:f3:82:36:cb:9c:d6:96:1c:0b:
1e:40:77:db:7d:6b:cd:27:a1:31:1f:47:62:82:a4:
08:60:b1:94:2a:91:a3:53:ba:ef:60:86:eb:41:b6:
74:77:4b:fd:87:7c:5b:87:96:57:d5:b7:e8:e1:f5:
7b:de:46:0e:3b:e4:e4:c5:92:34:6c:e6:d4:9e:e1:
9f:97:d7:1b:7f:80:47:a1:19:59:4f:a1:7b:0b:33:
3f:3a:82:5b:15:13:a4:45:e9:45:37:43:80:87:a6:
3d:7c:70:26:b4:47:d1:33:73:51:5c:b5:f0:11:30:
ea:24:1a:e4:3d:25:91:d6:4f:f2:04:a4:13:86:7f:
24:58:51:50:ae:05:22:3a:cb:29:41:63:7e:ce:d8:
c2:33:a5:33:66:a3:3e:be:a5:45:fd:e9:37:7d:70:
f1:c1:51:e7:b6:f2:f4:ff:bd:26:ec:72:d5:e3:f4:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4A:B0:43:2F:4D:36:53:01:00:50:7E:6A:B6:FB:12:95:96:68:15
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3a:b8:3a:9f:e8:06:e1:d7:c9:a3:14:1d:a3:3d:a5:98:94:
1c:00:58:32:c4:64:65:d5:50:64:30:c9:dd:56:e8:66:1e:9e:
b5:2f:b1:08:9f:b2:87:fd:a0:a2:5e:0b:75:3c:47:ed:20:9c:
48:d9:e8:93:47:be:be:e2:1c:fe:9d:ad:8e:4f:26:20:4a:76:
e2:2d:97:cc:81:82:32:d3:04:a1:f7:58:40:0b:87:18:df:ba:
01:b8:e5:d4:29:9c:e1:f5:fe:1d:30:15:da:08:11:db:f4:d9:
9d:d0:fc:39:52:61:ee:e5:d2:f5:5a:ef:74:af:85:96:4b:ed:
c7:89:91:fd:83:50:8b:16:05:8f:89:d8:bc:70:a2:81:fb:fe:
34:ea:ed:22:7b:dc:1b:92:0c:41:e8:f1:c8:da:84:6d:fc:a2:
c2:54:62:da:80:9a:a3:fb:57:9c:7d:da:75:4a:a7:74:e0:e7:
78:88:76:b8:08:ca:31:a0:97:95:d2:4c:f5:a9:5c:3a:b5:db:
ea:16:ef:2d:af:7d:52:32:78:1e:1a:72:33:a1:3b:28:72:7d:
1f:36:c1:41:80:1b:3e:00:8e:84:4c:56:8a:c4:26:9e:75:03:
e8:fb:d2:f8:c7:f7:b4:ce:28:8c:3e:b1:fa:fb:9f:18:38:19:
0a:04:20:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqTn8/84IlIWEhLhE2+GAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw
ZDVmYzMwHhcNMjYwNTE2MTIwMDU3WhcNMjYwNTE3MTIwMDU3WjAzMTEwLwYDVQQD
EyhmNjRhYjA0MzJmNGQzNjUzMDEwMDUwN2U2YWI2ZmIxMjk1OTY2ODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXpElMISxr4Zv155vyec0IEkxBZU
SwAI8X/jvRlS4oSlamdPIACf8rkRBgDq/pGSGCj223z3ihaiILGVy0ec5UEShXvo
USg/iqftkY9uWm7zgjbLnNaWHAseQHfbfWvNJ6ExH0digqQIYLGUKpGjU7rvYIbr
QbZ0d0v9h3xbh5ZX1bfo4fV73kYOO+TkxZI0bObUnuGfl9cbf4BHoRlZT6F7CzM/
OoJbFROkRelFN0OAh6Y9fHAmtEfRM3NRXLXwETDqJBrkPSWR1k/yBKQThn8kWFFQ
rgUiOsspQWN+ztjCM6UzZqM+vqVF/ek3fXDxwVHntvL0/70m7HLV4/TczwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZKsEMvTTZTAQBQfmq2+xKVlmgVMB8GA1UdIwQY
MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt
N2JjZmQ2NGUwMjg4LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4
LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDq4Op/o
BuHXyaMUHaM9pZiUHABYMsRkZdVQZDDJ3VboZh6etS+xCJ+yh/2gol4LdTxH7SCc
SNnok0e+vuIc/p2tjk8mIEp24i2XzIGCMtMEofdYQAuHGN+6Abjl1Cmc4fX+HTAV
2ggR2/TZndD8OVJh7uXS9VrvdK+Flkvtx4mR/YNQixYFj4nYvHCigfv+NOrtInvc
G5IMQejxyNqEbfyiwlRi2oCao/tXnH3adUqndODneIh2uAjKMaCXldJM9alcOrXb
6hbvLa99UjJ4HhpyM6E7KHJ9HzbBQYAbPgCOhExWisQmnnUD6PvS+Mf3tM4ojD6x
+vufGDgZCgQg0w==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:34 2026 by rpki-client