Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: fS6WICf57TXozfQGTQK40NEL+UwZYnkWvjvG3LXL70U=
Subject key identifier: 43:6C:E5:6E:5B:DD:88:22:89:4F:A3:D0:83:17:C6:54:D9:6C:5E:2D
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 019D38D347424273BA10A8FE0BF3D33F3524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 0A12
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: L128U4uHpPB8XXEkgPNjVcIZ9XE.roa (hash: IYk8giMHsoZQEDIjV2cGRAdLhqHOaoQ1gIQuvMVROxs=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: +Xzmt37WKkN/SGcUS+4HHPk64xLZWMogTtwsFC1fMKw=)
3: rVOox5dPkR2CoxnWpLrFqt5-ty4.roa (hash: rByt/VY+jKmLbOAYRP4mcgPGysuMY2q4MeT7LbpcziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:47:42:42:73:ba:10:a8:fe:0b:f3:d3:3f:35:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=436ce56e5bdd8822894fa3d08317c654d96c5e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:15:5f:eb:3e:25:cd:8f:94:ff:5f:a0:ab:
ef:f7:cd:44:fe:37:5f:fd:5d:b7:7a:ba:c4:ae:e2:
04:b8:b0:94:24:54:1b:15:e8:33:71:2f:dc:e9:a0:
a8:14:ed:5a:08:57:4b:32:35:17:3b:32:e6:ca:95:
89:98:45:03:a7:b4:d1:bc:ec:5e:d6:1b:8c:c0:e1:
11:ff:54:91:90:6c:c4:3f:f7:c7:9f:f6:af:e9:b6:
66:08:fd:25:c5:c3:b9:28:31:9d:89:57:20:ad:60:
2b:03:e7:03:db:7d:54:ab:e6:ec:e7:f4:53:30:9d:
d0:62:b9:10:ac:ac:d5:fb:9d:05:55:e2:58:4d:a8:
78:3a:0d:3e:01:2a:3f:40:0c:5d:16:52:23:76:8c:
2f:94:73:23:73:e2:20:cf:d9:15:d9:c5:b3:72:f7:
14:0e:8d:a2:d9:9f:06:18:d4:22:02:5f:d0:69:55:
c6:39:39:d2:80:a4:6d:21:25:9f:b5:87:aa:85:e6:
f5:7e:22:5a:ea:ef:ac:09:57:7e:3e:63:a7:96:b1:
4b:dc:4e:d8:91:7a:91:ec:0d:7b:e0:3c:00:f3:34:
9b:5f:67:8d:8a:2e:ee:89:be:8f:c7:8a:1a:a8:89:
78:75:77:a1:47:80:71:11:50:56:ff:33:7f:0d:8b:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:E5:6E:5B:DD:88:22:89:4F:A3:D0:83:17:C6:54:D9:6C:5E:2D
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:e2:32:a3:04:bc:cf:68:ed:52:a4:4b:ae:1a:1b:4e:04:
ef:b5:9a:48:c3:e1:9e:49:1d:b8:75:9e:69:a7:76:2a:dc:64:
5f:63:b5:5b:ed:eb:3b:2e:94:70:d8:37:28:37:f5:5f:63:fa:
bf:fe:37:dd:0c:73:52:5b:56:7f:f5:a1:73:2f:fb:66:67:0f:
57:d4:5e:7e:cc:04:04:04:73:95:7c:21:e3:27:33:ac:58:2b:
0f:82:47:3b:39:77:25:bf:0c:18:22:2a:41:0c:12:77:81:1a:
63:8c:5c:eb:40:c9:4d:d1:e4:de:3d:9a:aa:32:95:c9:c5:6e:
30:4a:76:46:9b:ef:80:e8:1d:5c:c7:3c:04:ef:a3:95:a4:40:
58:54:ce:23:ed:50:6b:ea:96:b2:a9:02:01:c1:20:be:5c:7e:
8f:24:54:8a:db:63:df:66:3e:ce:ce:c3:27:4e:ab:c6:ba:55:
8b:88:a5:16:bd:5b:12:49:12:cc:bd:0c:94:c0:14:0d:04:65:
ef:a3:48:44:17:fa:c7:4a:fa:d2:fe:f6:d7:ee:ba:d1:9d:ce:
56:0c:19:fe:da:6c:f4:f8:6b:ee:ae:2b:41:80:2d:45:76:bd:
36:0b:12:bf:a4:0d:65:04:f9:13:36:a4:68:78:17:d5:b9:01:
90:40:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:35 2026 by rpki-client