Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
File: bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json)
Hash identifier: pcArRzVeynLVNCZSUL2apVI3eJ4qy7tNm6+wIKlXLpY=
Subject key identifier: 35:02:94:65:82:29:59:13:4A:9F:D5:6F:3C:23:C2:27:DA:4D:94:40
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 019D38656B89D6D103814FFEB387182FDBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
Manifest number: 18A0
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: wPt3nJlSrdzSTlaDSz61nVmtKEBoFfSwNKzFQYi8kos=)
2: dAtJXk54QeNvdrIj2y9sPVigo4Y.roa (hash: VR9GSCDMRB0j9JdvpO5E9iyI6YnfCrylbELLiWuyElY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6b:89:d6:d1:03:81:4f:fe:b3:87:18:2f:db:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=35029465822959134a9fd56f3c23c227da4d9440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:de:b7:6b:90:15:f5:71:f1:ce:fb:a7:9f:
0c:1d:09:31:30:66:8d:55:3f:d4:44:e4:12:c7:e4:
ff:67:db:a6:20:db:f9:fe:43:69:d2:df:44:7d:48:
d9:f0:42:41:45:28:67:9c:3a:a1:c3:63:ae:42:1a:
b6:51:fd:a5:74:ad:50:08:3b:ea:5c:b3:6f:41:8d:
1c:75:a3:32:17:14:e8:4e:3f:5a:4f:18:78:5a:a5:
43:77:d1:05:22:73:a8:ed:7b:fd:67:9b:73:05:c4:
78:2b:5c:76:9d:8c:e6:2c:a1:ba:71:b8:ff:ec:c6:
a7:14:2e:5d:0b:ac:a7:89:c9:1b:d1:cc:92:f3:1e:
af:7e:9d:2a:4a:fe:05:3b:12:98:5b:5c:f3:eb:48:
e9:19:5c:a4:35:bf:ef:ad:a0:6d:d1:20:2f:07:64:
90:7c:02:e3:e8:2d:a5:ad:08:63:b1:83:63:38:76:
7d:1e:78:b4:33:18:2d:b8:c2:84:91:50:b8:c4:00:
f3:0a:e9:6e:37:e0:9b:fd:da:e2:cf:65:51:cd:c8:
d8:eb:23:9e:92:40:0c:8a:e3:8f:21:33:7b:8f:de:
42:ad:3c:08:33:b8:22:ad:60:e7:5d:b6:6e:49:f3:
76:92:df:99:52:ce:26:be:2e:fd:e3:7c:6d:32:7a:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:94:65:82:29:59:13:4A:9F:D5:6F:3C:23:C2:27:DA:4D:94:40
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:9d:8e:a9:9a:70:c9:c4:48:80:b3:e7:83:98:0a:32:d3:
89:e6:ef:32:06:43:46:11:11:da:c7:75:c8:74:a2:7b:77:2c:
95:04:97:64:5e:db:d2:33:2e:8d:d5:e5:fa:fd:7a:0c:40:06:
17:2e:ba:63:5e:05:e5:69:51:52:ec:fc:21:04:1b:9a:12:22:
6e:51:48:68:eb:3f:8b:be:c6:bc:64:b1:d2:3a:44:03:3e:9f:
66:23:2f:6d:ab:50:fa:b0:0f:53:4f:c9:b5:07:ce:b6:7c:03:
25:65:a2:f7:2f:f9:97:bd:91:d0:cc:c0:fe:db:33:a0:d4:cf:
e4:ab:13:90:01:7b:cd:6a:1f:d9:94:f8:78:02:e1:a4:64:c6:
06:9f:da:43:90:65:0c:f8:57:c4:1c:c0:14:ff:e0:51:0e:24:
72:79:8d:e0:b5:6d:38:7e:98:b0:d5:97:36:1b:47:88:eb:d3:
1b:bd:a2:c1:2a:b1:7e:35:5f:57:c6:c3:8c:71:0b:24:f0:64:
c7:36:45:31:da:e3:8f:51:4b:87:d6:fe:59:ce:99:ef:3a:72:
04:40:ed:b9:b7:df:ad:fe:81:23:84:3d:ba:8e:68:69:4a:61:
3a:41:c9:b7:89:3f:b5:ce:87:1c:4c:8e:4c:03:29:d6:6c:58:
8f:42:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:41 2026 by rpki-client