Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
File: BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft (raw, json)
Hash identifier: lTMkp+iALg3/0fjDCrs7CwAyJP+pqVSqugRCcQbYo+w=
Subject key identifier: 9C:4B:D6:BC:40:76:97:79:BC:F2:A7:F9:5C:85:ED:84:0E:64:22:49
Authority key identifier: 05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4
Certificate issuer: /CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
Certificate serial: 01A181BD8AE65FA0B420C16664F182BE52C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:00:45 +0000
Manifest this update: Wed 28 Oct 2026 09:00:45 +0000
Manifest next update: Thu 29 Oct 2026 09:00:45 +0000
Files and hashes: 1: 6yHxEFCX8SGDDuqJtxkLqvDHhAM.roa (hash: FJdjgo8aJL+d/N15X0/urga/udLTA1icT6feDIkUrRY=)
2: BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl (hash: hIiqdrbYdJlJqDA6kyb1tNKCLTYKjkxyh5S/7+/tc3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:8a:e6:5f:a0:b4:20:c1:66:64:f1:82:be:52:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
Validity
Not Before: Oct 28 09:00:45 2026 GMT
Not After : Oct 29 09:00:45 2026 GMT
Subject: CN=9c4bd6bc40769779bcf2a7f95c85ed840e642249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:ec:32:f0:4d:36:97:d8:ac:28:9f:0e:80:
79:5e:e7:39:d6:74:46:48:fc:cb:82:10:80:de:67:
94:d1:4b:67:4a:4c:e4:3c:86:91:e0:ca:89:58:50:
15:38:29:bb:39:3a:be:0e:71:68:16:e1:16:a7:d4:
c5:8d:bd:eb:15:58:f9:8e:ed:77:20:dd:f0:cd:6a:
91:80:ed:1e:14:6d:03:cf:d7:5c:73:fa:60:15:fd:
66:83:27:49:e4:1e:6f:a0:7c:ac:bc:d5:78:19:2a:
f3:e4:f8:4e:de:3a:6f:07:41:8c:73:42:81:83:30:
8a:3c:51:50:a4:07:2f:49:4c:aa:0a:74:70:d2:d1:
da:66:8c:61:13:1d:0a:c1:a6:45:b6:55:1c:51:06:
14:15:3e:ea:c5:70:8c:5e:5d:e8:54:53:a6:42:47:
38:c3:f6:3b:af:96:6a:8c:36:9b:8f:89:52:b3:34:
af:c2:0b:7c:ae:88:30:46:05:29:63:5d:7e:d0:9e:
32:29:6c:5e:a0:9d:88:dd:e2:d0:3f:8b:c9:c7:96:
64:31:bb:fb:b1:26:30:ed:52:17:b8:22:a9:9f:4c:
a6:da:88:64:de:7b:b5:dd:03:3b:94:43:0c:ab:2e:
1d:af:a6:b3:d7:4c:d6:b8:9b:7d:bf:79:a1:1a:b5:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:D6:BC:40:76:97:79:BC:F2:A7:F9:5C:85:ED:84:0E:64:22:49
X509v3 Authority Key Identifier:
keyid:05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:91:3c:e2:5f:74:17:1d:42:3c:40:6c:49:91:a8:eb:28:09:
7a:8f:49:83:42:b3:4f:0c:2a:90:f6:58:42:4d:8d:75:b1:4f:
b4:05:7a:c1:fd:4c:1f:98:91:33:93:26:99:5f:77:3d:c4:8c:
36:56:ea:87:2e:fe:07:37:eb:2c:68:b6:cb:1d:77:ab:3e:6c:
3f:9a:08:87:0a:67:e2:42:0e:d4:b2:bd:b1:b6:da:04:9b:55:
03:16:5c:45:72:9f:f7:cc:2e:eb:5c:06:a0:78:bf:b7:94:39:
a7:6d:99:26:b5:07:f6:c6:b9:59:ba:cb:d5:83:7f:41:00:14:
53:a9:f0:8f:e2:5b:0b:d2:3b:00:33:dc:f1:bd:89:51:63:28:
8e:2e:bc:d6:1c:3e:34:4e:90:68:b7:cb:b9:30:d1:31:dd:5d:
5a:8c:e4:21:f7:ec:0a:2f:5b:49:3f:d2:d5:0a:ec:4c:9d:b4:
36:2b:a8:93:2b:5e:71:52:ae:2d:9b:65:75:63:47:53:cf:8b:
f4:44:29:7a:17:d1:5f:96:c1:64:af:06:d7:70:9a:b6:17:3d:
2d:e9:05:1c:e0:98:30:03:dc:1a:02:df:ff:2a:c4:18:69:41:
e4:ae:cf:3d:39:13:82:4a:9e:9d:2b:6b:14:52:df:f3:87:ee:
f9:2a:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:44:54 2026 by rpki-client