Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
File: BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft (raw, json)
Hash identifier: MRVEYxDLz9yZqnU4QuSl8EzqTCklPlVwZ7f1whOW9Kw=
Subject key identifier: F6:CD:21:1F:E9:7A:9A:28:A8:62:48:9C:43:12:28:0E:BB:0B:9D:4C
Authority key identifier: 05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4
Certificate issuer: /CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
Certificate serial: 019FA2CEB760F4F0CAAC1CC793C6B1A4673E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:23 +0000
Manifest this update: Mon 27 Jul 2026 09:01:23 +0000
Manifest next update: Tue 28 Jul 2026 09:01:23 +0000
Files and hashes: 1: 6yHxEFCX8SGDDuqJtxkLqvDHhAM.roa (hash: FJdjgo8aJL+d/N15X0/urga/udLTA1icT6feDIkUrRY=)
2: BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl (hash: qhd43tOkl44KZj5wm3ZZYV4SPjLb56NnrUIs/qTfoMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:b7:60:f4:f0:ca:ac:1c:c7:93:c6:b1:a4:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
Validity
Not Before: Jul 27 09:01:23 2026 GMT
Not After : Jul 28 09:01:23 2026 GMT
Subject: CN=f6cd211fe97a9a28a862489c4312280ebb0b9d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:0e:ce:0e:79:a5:b3:aa:27:fb:2e:2f:16:
44:b6:d2:2c:7a:89:2c:6b:67:80:58:dd:dc:dc:31:
03:9e:67:27:f5:b2:45:bc:f7:d6:f6:84:c6:de:42:
92:ac:c1:84:43:ba:54:46:99:aa:e9:a7:ff:cc:51:
1b:46:4d:df:17:75:24:71:b9:9a:91:f2:7e:08:c2:
00:56:a3:e3:f6:ff:12:97:6a:b6:33:ab:60:67:0a:
8b:5d:e4:54:d1:b1:e2:0e:13:f9:8f:2f:2f:6a:da:
cb:53:8b:8b:f7:88:a6:4e:7a:bf:ad:37:26:bd:81:
5a:91:75:79:21:23:4b:5f:65:f7:9e:3d:8e:53:df:
0a:31:1d:05:94:6e:b1:e6:60:aa:0c:6d:fc:55:ef:
e8:57:34:2c:b6:1b:72:d9:a1:b2:ea:9e:cb:88:65:
05:6a:50:ab:fd:ae:02:8c:86:04:ea:6f:63:74:f0:
32:90:fe:d5:20:4d:7e:b9:55:94:4d:5e:85:04:ca:
6f:fe:dc:3a:b3:95:62:1f:50:e8:0c:ae:51:e5:07:
f7:ed:93:7f:87:68:5e:b8:31:30:1a:cb:a4:bf:86:
35:18:b0:a4:f8:b5:e2:2d:7e:aa:f7:15:ae:cb:78:
50:73:98:92:53:fc:81:b5:93:e8:d7:6a:86:cc:e0:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:21:1F:E9:7A:9A:28:A8:62:48:9C:43:12:28:0E:BB:0B:9D:4C
X509v3 Authority Key Identifier:
keyid:05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4e:8a:10:60:75:40:e3:73:41:84:9a:f9:6f:13:42:e7:4f:
83:9c:2b:0e:b0:d9:9c:bb:5f:89:76:b7:ee:91:42:d1:91:cb:
3b:37:0a:59:a2:47:40:a8:c4:76:22:dd:35:95:0a:fe:47:6c:
32:c0:c0:ef:01:3f:3c:09:9e:02:72:14:c4:9c:8f:6a:7d:7c:
69:c3:5d:b3:c1:0c:37:93:f3:56:d5:16:a9:8a:34:9f:a0:3f:
df:3f:3c:19:58:ae:5f:62:67:2c:85:b6:61:63:dd:d4:8d:80:
84:31:9d:71:74:27:ce:df:77:cc:e3:d1:59:8b:94:19:fb:9a:
07:f5:41:88:24:71:14:df:f9:da:14:30:9e:08:ee:08:10:07:
6d:4f:06:c7:df:39:f9:49:c6:ab:46:2f:a8:c2:16:62:0c:d2:
02:a3:eb:4b:86:d4:2c:c9:0d:e8:03:88:cc:8e:31:88:d9:32:
b5:52:a0:bf:0c:ba:04:9a:06:c0:c9:27:39:6e:39:04:20:42:
eb:08:f8:ff:a7:a7:25:76:69:6c:fb:55:88:5d:b7:4a:14:8b:
23:6a:e9:1f:d3:8c:19:44:63:a2:41:a7:a8:6e:51:da:a1:52:
2a:8c:ae:f1:0a:64:5b:79:c4:2a:ca:48:34:bf:40:8a:78:75:
b1:15:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:07 2026 by rpki-client