Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: n4evZLQC0VJitYDuwlyCj346X8Lz/Mg7JroCkgXaY8I=
Subject key identifier: AD:F4:04:93:99:3B:22:29:5C:63:97:0B:06:97:3E:F7:1C:7A:A0:71
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 019D389BBF2BADE7941C2103420DC785CB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: YQR-M13FITu11JiiH0aP1_gjSMk.roa (hash: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: VnFNvYyg5CQoiTNrF0pmQW5Smos0WNuqg2UWuSTD1dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bf:2b:ad:e7:94:1c:21:03:42:0d:c7:85:cb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=adf40493993b22295c63970b06973ef71c7aa071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:3b:61:14:5d:cd:9f:be:6b:3b:e6:95:7f:
28:3f:fe:4e:99:10:0b:09:fb:df:ec:7d:04:ec:c4:
81:9d:65:24:a6:8f:1f:5c:c9:f5:5f:93:8f:78:7e:
9c:5a:d9:19:51:02:ae:c7:05:84:ee:61:5f:7b:f2:
b6:1d:fa:a0:c4:47:93:10:58:45:10:1e:15:d9:50:
8a:52:07:54:61:b7:14:e6:74:0a:1b:f5:34:75:71:
9a:db:e3:ed:59:cb:2e:09:a2:bd:33:3d:da:ae:f4:
57:87:79:d9:aa:b3:29:47:15:0b:04:df:1a:5b:63:
b1:b5:71:bf:01:08:6f:ac:44:da:84:ac:3d:ae:10:
c0:f9:e1:b7:5e:82:5c:be:f1:96:b9:26:d3:75:3a:
5f:6f:ac:ba:2f:eb:a6:dc:7d:ea:1b:4c:e0:ea:aa:
16:4c:0a:c7:4a:b9:6a:b0:4b:e6:91:7f:aa:b5:f5:
d3:5d:ef:8b:88:b5:f4:c7:5e:09:91:38:96:23:28:
e5:54:59:93:5e:78:51:57:da:54:fe:87:ac:be:dd:
f5:83:23:fd:4a:bb:aa:20:48:54:28:77:94:b2:ba:
3c:97:d8:35:6e:2d:6e:05:40:c9:61:38:25:8f:17:
66:7f:b3:41:dd:6a:a2:94:8a:d3:0b:2e:c1:f1:3e:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F4:04:93:99:3B:22:29:5C:63:97:0B:06:97:3E:F7:1C:7A:A0:71
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:77:cd:ca:ee:7b:75:4e:15:7d:2c:73:24:21:8c:cf:49:
33:06:29:50:b7:a2:d7:c4:37:01:97:ba:90:df:79:f5:8a:ae:
9f:4e:76:5f:13:ad:aa:56:44:79:bf:14:a2:d4:60:66:6c:b8:
a2:50:e2:a1:7f:f0:04:af:90:3e:c0:4b:16:36:cd:f9:55:3c:
47:10:6a:0a:64:7b:eb:60:fd:bb:22:c2:17:e7:7e:2d:c5:70:
91:a3:6d:ca:9b:a2:a9:db:d9:2b:1b:04:3a:0d:7c:d4:49:2d:
8e:65:b5:cb:96:e6:4a:59:e2:c5:8e:9d:1c:08:e9:c5:32:81:
82:b0:b6:9d:33:d8:08:95:60:fa:59:9e:5d:3c:e8:6a:cd:3a:
90:ba:e7:e4:4e:9c:76:9d:b9:54:19:4e:e6:2b:36:78:87:08:
12:a9:97:59:91:72:59:95:e6:23:09:b8:92:fa:21:09:e4:2c:
30:f2:e6:65:79:d3:bb:76:8b:aa:68:50:07:39:36:b6:1e:4a:
27:e9:81:94:bd:b2:aa:67:4c:77:fb:c7:20:4e:e7:60:da:84:
c6:12:ef:16:ca:1d:f6:21:69:e7:a0:8f:d2:4e:31:53:bf:c9:
b4:d0:35:0a:2a:92:42:e0:56:de:53:5f:f7:82:87:f5:da:3e:
89:09:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:34 2026 by rpki-client