Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: g+HXBSnSrOJuuZaJW5s5wtcy7B2i/34ZXrdNk8tswac=
Subject key identifier: 31:B0:E5:34:45:F5:BD:96:8D:02:9B:B8:55:C1:85:DE:92:55:9A:E6
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019E2FCDC4D7AD55F3A869570C9D56CA3F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1612
Signing time: Sat 16 May 2026 08:01:14 +0000
Manifest this update: Sat 16 May 2026 08:01:14 +0000
Manifest next update: Sun 17 May 2026 08:01:14 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: 41Vl1Bxe+G0Mxx+pR3MO2IcnPc3HwEBJpO9Evn9VYFg=)
2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:c4:d7:ad:55:f3:a8:69:57:0c:9d:56:ca:3f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: May 16 08:01:14 2026 GMT
Not After : May 17 08:01:14 2026 GMT
Subject: CN=31b0e53445f5bd968d029bb855c185de92559ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:4d:ab:84:f1:93:db:d2:44:59:b2:09:f1:
c8:da:c5:83:4b:34:83:d9:39:52:c6:ac:88:85:3f:
c7:67:0c:c7:4e:66:5f:48:2c:94:2f:2a:cb:84:e3:
a9:84:94:f9:b3:31:f2:c0:37:1c:1b:9b:09:0c:bb:
d8:0c:90:59:59:20:c4:ef:31:31:7b:e6:32:29:2d:
bc:7e:d0:8e:0f:4e:5d:43:28:a7:63:c4:f8:31:2a:
8b:a3:29:fc:e5:22:11:71:ca:07:03:c5:ad:7a:06:
f7:39:10:4d:78:a0:84:f2:7f:45:9a:ea:8f:9d:ee:
df:d9:64:d4:55:60:78:00:98:26:bc:fa:d8:a0:46:
3e:1c:60:cd:f7:e4:ec:c6:51:68:d5:cf:d5:c6:e8:
11:dc:8b:c3:d5:64:06:78:de:40:14:f3:45:a5:cd:
91:ae:3b:cd:ab:6a:42:fe:f3:28:e4:36:31:76:c9:
69:89:12:75:67:d5:3f:fb:fe:92:25:f4:d0:bd:3a:
52:92:15:5e:76:4e:8c:f1:2a:4c:2c:93:80:73:1b:
16:29:c5:b1:07:ec:7c:1b:40:f3:08:d4:c1:43:28:
2d:3a:97:1b:7e:33:56:56:16:8f:fe:75:fd:b6:fe:
06:e6:21:5b:da:a1:d3:cd:16:d6:7c:bf:9f:db:df:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:E5:34:45:F5:BD:96:8D:02:9B:B8:55:C1:85:DE:92:55:9A:E6
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6b:6d:e7:6e:6d:d1:90:22:40:98:d2:f6:8b:5d:f3:e9:c6:
95:52:b2:ca:1d:62:56:d2:cb:9b:db:d7:42:90:6c:1b:a8:66:
eb:da:fe:7d:7c:81:fc:24:33:94:35:f0:77:e5:77:18:54:bd:
50:b3:ab:32:ac:5e:17:51:20:aa:3e:73:b4:19:f9:14:79:e4:
1b:52:72:ff:db:d5:55:ef:b5:96:d4:14:9b:b9:4e:a2:8b:13:
19:44:7b:50:8d:57:0d:6f:f7:12:65:34:87:8d:b5:ba:a6:2d:
85:a8:55:3d:4e:fb:d9:f6:14:b5:79:2a:95:fd:a1:9e:35:17:
0c:ca:cc:26:48:b0:1e:d7:f9:9d:59:e9:40:8b:69:f1:1a:6c:
a8:63:27:cc:80:02:41:71:a6:92:11:62:1b:eb:6c:ea:d8:fc:
c4:f3:26:4b:e9:af:22:78:18:0c:a8:9f:76:e9:a7:06:1c:36:
d9:09:88:cd:a9:a6:55:c0:24:8f:ef:07:63:6e:eb:44:9d:83:
3f:10:c2:1b:5b:f6:a7:8c:32:2d:e2:73:9e:aa:ab:12:14:b2:
ff:a5:2a:a9:9f:ee:9b:55:ef:36:8b:b0:05:29:4d:21:f6:01:
d7:03:6a:ec:c3:3f:cc:7c:c7:a9:c6:27:38:5e:26:9b:d8:d4:
05:ec:2c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzcTXrVXzqGlXDJ1Wyj9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy
NDQzOTUwHhcNMjYwNTE2MDgwMTE0WhcNMjYwNTE3MDgwMTE0WjAzMTEwLwYDVQQD
EygzMWIwZTUzNDQ1ZjViZDk2OGQwMjliYjg1NWMxODVkZTkyNTU5YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHVNq4Txk9vSRFmyCfHI2sWDSzSD
2TlSxqyIhT/HZwzHTmZfSCyULyrLhOOphJT5szHywDccG5sJDLvYDJBZWSDE7zEx
e+YyKS28ftCOD05dQyinY8T4MSqLoyn85SIRccoHA8Wtegb3ORBNeKCE8n9FmuqP
ne7f2WTUVWB4AJgmvPrYoEY+HGDN9+TsxlFo1c/VxugR3IvD1WQGeN5AFPNFpc2R
rjvNq2pC/vMo5DYxdslpiRJ1Z9U/+/6SJfTQvTpSkhVedk6M8SpMLJOAcxsWKcWx
B+x8G0DzCNTBQygtOpcbfjNWVhaP/nX9tv4G5iFb2qHTzRbWfL+f299niwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGw5TRF9b2WjQKbuFXBhd6SVZrmMB8GA1UdIwQY
MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt
MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi
LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2tt525t
0ZAiQJjS9otd8+nGlVKyyh1iVtLLm9vXQpBsG6hm69r+fXyB/CQzlDXwd+V3GFS9
ULOrMqxeF1Egqj5ztBn5FHnkG1Jy/9vVVe+1ltQUm7lOoosTGUR7UI1XDW/3EmU0
h421uqYthahVPU772fYUtXkqlf2hnjUXDMrMJkiwHtf5nVnpQItp8RpsqGMnzIAC
QXGmkhFiG+ts6tj8xPMmS+mvIngYDKifdumnBhw22QmIzammVcAkj+8HY27rRJ2D
PxDCG1v2p4wyLeJznqqrEhSy/6UqqZ/um1XvNouwBSlNIfYB1wNq7MM/zHzHqcYn
OF4mm9jUBewsfA==
-----END CERTIFICATE-----
Generated at Sat May 16 18:42:27 2026 by rpki-client