Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: glBIBm745QjrozsM4W6Xez9sh3S67zx1kf45xlNDcxk=
Subject key identifier: 5C:69:CD:91:5E:EC:70:D6:42:3E:FE:0C:E7:E6:A8:5F:9F:36:A0:52
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019D389BC0BDE1E9C648B4360E7940E67090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1592
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: iQl0tc4I7c88QrPxzgJuKkbJG6s0gtaWwPfQhD/9Mlc=)
2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c0:bd:e1:e9:c6:48:b4:36:0e:79:40:e6:70:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=5c69cd915eec70d6423efe0ce7e6a85f9f36a052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:01:cd:09:f5:79:de:53:a5:c5:35:b4:64:
f7:ef:19:dd:51:92:5e:90:01:ec:c3:ce:f3:ff:85:
3e:e9:4c:2d:ff:eb:64:1b:4f:79:8b:c1:e3:34:11:
2d:09:76:57:0e:d2:a4:f9:42:78:32:cb:29:35:1b:
2b:70:44:11:76:eb:7f:fa:d4:d1:ca:85:cc:11:23:
0c:d4:44:33:f6:32:67:17:b5:4a:25:82:6d:bc:53:
0c:d6:1c:5c:65:5f:bb:f4:25:ed:ef:d2:17:7a:39:
d5:26:51:32:fa:db:a9:f8:e6:9b:8d:d9:dc:19:e9:
0d:9c:60:23:34:91:89:b6:29:5a:59:75:ba:cb:0d:
a2:4e:fa:ea:a6:ac:41:90:86:bb:9d:ae:c2:84:11:
75:71:96:07:e8:75:c7:82:87:2a:3b:d0:97:17:53:
a8:18:50:6f:6e:3b:4f:9f:d6:a7:55:6e:67:3d:3a:
16:76:1a:b4:cb:dc:9d:de:0f:85:ce:5f:01:95:e8:
e3:4b:c2:c3:2a:f6:ba:ac:bd:72:cd:dc:7b:35:cb:
ca:44:30:53:ad:b8:cb:ec:00:d6:42:ee:ca:3d:f1:
1d:06:d9:4f:32:4d:a2:8e:e8:be:da:39:2e:87:f0:
a2:29:d3:3a:1b:5a:5b:a3:bf:05:d8:3e:08:d9:a6:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:CD:91:5E:EC:70:D6:42:3E:FE:0C:E7:E6:A8:5F:9F:36:A0:52
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:72:3a:3c:86:d7:c9:50:9b:b0:cf:1a:06:da:ea:71:f2:d0:
d1:48:da:ae:eb:c6:b1:ff:50:87:46:19:33:24:bd:7d:86:1b:
a8:05:75:6d:ed:93:5d:4b:39:78:fe:9a:6c:f3:1d:1a:a5:3b:
65:55:8c:f7:eb:bd:15:7c:eb:e0:3e:a1:69:aa:5f:05:fd:f7:
39:d4:17:d9:ff:b1:a9:b9:32:97:f3:fa:76:b5:c9:34:d2:72:
7c:c1:92:52:1e:3a:c2:c2:b3:bc:14:b7:b2:0c:f5:98:01:0a:
3c:c2:4e:67:b5:60:8e:b4:aa:d2:81:a1:c3:d6:39:4b:28:6a:
57:a6:b1:56:0f:8c:1c:96:5f:db:7b:b6:9b:2c:40:9f:5e:8f:
f4:fb:a8:04:53:a2:f6:7f:9a:2c:05:2f:9e:b4:80:6a:ea:a7:
bc:15:b1:77:39:10:29:78:84:8e:e6:a2:99:e4:46:ac:f3:f1:
4f:03:7d:fd:f2:41:7b:e1:30:d1:32:e8:ee:42:8d:76:43:95:
db:d9:21:b0:b4:d7:53:73:6f:0d:09:6d:7f:af:fe:a5:4a:ac:
07:b0:40:5d:77:c9:69:46:08:51:15:fd:8a:7b:d4:1a:b3:cc:
ba:1f:b5:45:0a:d6:93:97:6b:31:34:0d:99:0a:7f:89:96:75:
10:b9:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:46 2026 by rpki-client