Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: zvuTDY30ZXNpNMSc+TmZ/vf+o9gR3/75mCoJjCETewQ=
Subject key identifier: 95:39:F9:9E:35:1B:FA:D0:26:B9:41:14:CA:9C:57:56:18:D6:45:FB
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 019D37F78650F3AD63567A2D8BDD0B20CC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: 5wRzsz/oAn1utIi3NeRaefcnj8C656QO+ogA4Nzy/Uk=)
2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:86:50:f3:ad:63:56:7a:2d:8b:dd:0b:20:cc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=9539f99e351bfad026b94114ca9c575618d645fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:44:32:d7:22:8d:72:a7:87:2f:db:d9:58:
23:3b:77:22:88:fe:3f:34:87:57:6b:25:bb:18:7d:
51:d5:6e:7d:1b:ee:d5:61:36:6f:c7:f9:2d:b8:1f:
01:7e:04:2a:7e:0a:03:aa:bc:40:66:2c:d0:bb:a4:
17:ac:a5:b5:6e:3c:e1:5d:c2:a4:52:ab:27:0d:d9:
6c:03:11:3c:fb:ea:03:b7:4d:4e:4a:ef:63:42:a3:
a4:65:78:56:3b:7a:c6:8e:78:7e:23:8b:e5:ad:7a:
0f:08:a7:ea:9c:74:66:17:c0:c0:9f:c2:7d:6c:fa:
fa:57:45:18:87:33:2d:0a:69:0e:7b:e6:0d:5a:c7:
1c:e3:8d:de:75:b3:1e:28:44:09:35:6d:67:d8:11:
bc:8d:24:19:54:be:24:d8:55:8d:ca:36:db:cd:6b:
b6:14:64:f2:27:e6:75:c6:48:5c:96:76:8d:3b:94:
2b:4c:ad:35:a2:43:9d:40:23:4d:d1:af:be:ea:39:
7b:f2:fa:ef:65:50:ee:6e:2d:fa:ec:91:29:86:e0:
b2:77:8c:a1:2b:25:24:43:95:06:87:cd:ca:b9:9f:
7b:f3:75:3e:e7:1b:51:bc:70:80:b6:1c:b8:ff:00:
6a:fd:c1:4e:4b:c5:48:f7:df:e9:b9:1e:25:78:3f:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:F9:9E:35:1B:FA:D0:26:B9:41:14:CA:9C:57:56:18:D6:45:FB
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:62:85:b8:a5:22:c2:1e:3d:ef:83:15:3c:df:e2:9c:5c:1f:
eb:29:8b:50:cd:d0:28:73:20:85:83:43:a0:4d:10:50:23:80:
dd:25:0e:c9:66:e7:2c:35:41:7b:c6:f0:6f:ad:0f:e1:26:fc:
28:4d:32:33:b9:92:0a:f9:e9:a1:16:22:c2:83:f6:df:9c:9a:
3a:9b:1b:a5:56:b2:6a:d2:32:25:fa:32:91:c3:9b:2c:e8:96:
21:b6:98:18:d0:76:c6:ec:cf:6a:5c:6e:13:73:37:ed:1d:ed:
bf:5b:e1:b1:6f:a3:67:24:06:e2:29:5d:b8:89:7f:c9:70:5e:
d1:26:a5:2f:64:e7:83:04:8b:23:0b:a7:21:41:f9:8a:06:62:
45:51:bc:9a:e9:26:4b:3b:6f:b7:d2:fc:6e:a2:9d:5d:ea:f5:
1a:6b:23:60:8c:9e:e3:0e:2a:6a:47:dd:84:48:9a:59:54:0e:
5e:be:f6:a3:a3:29:32:c3:f8:2f:db:4c:46:9f:ad:39:50:bd:
12:49:a0:b9:45:ab:b2:f7:24:92:26:33:34:c7:8c:73:9f:e3:
5e:fd:39:90:1a:79:ea:4c:43:b8:26:4b:77:12:bd:80:dc:7d:
f6:a8:54:aa:26:65:0e:c9:ad:da:d5:42:31:b2:65:20:bb:ef:
b3:0c:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:36 2026 by rpki-client