Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: LJD2l5BjsRtl1puj768lMV8SE0nth5oujasWhpUx1Zg=
Subject key identifier: 29:E5:6C:BD:A6:92:FA:3E:BF:9C:02:88:97:2E:D0:58:E6:5D:04:B6
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019E2F973CEE9979B29F2D72C6EA85B6A18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 190A
Signing time: Sat 16 May 2026 07:01:41 +0000
Manifest this update: Sat 16 May 2026 07:01:41 +0000
Manifest next update: Sun 17 May 2026 07:01:41 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: 9mydjyOvreS8T4N+asj+93CPGZyAXywZFnmsZ0Ga8wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:3c:ee:99:79:b2:9f:2d:72:c6:ea:85:b6:a1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: May 16 07:01:41 2026 GMT
Not After : May 17 07:01:41 2026 GMT
Subject: CN=29e56cbda692fa3ebf9c0288972ed058e65d04b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:3c:21:6b:c0:bc:bd:78:72:87:a1:51:17:
eb:02:fe:9c:b0:31:d6:82:34:6e:d7:a4:69:d4:bb:
a0:85:a0:24:5a:01:27:13:6e:a1:c1:ce:eb:fa:0b:
a0:f7:a2:38:ee:25:51:53:22:65:7f:95:8f:0d:47:
65:bb:fa:f3:20:7e:c7:28:9e:f8:0d:39:74:b3:2f:
39:f2:7f:b5:2c:6a:47:9c:a7:00:11:ca:2b:7e:b1:
7a:fd:64:a2:1a:0a:a1:e0:58:d4:99:7e:75:0d:33:
4d:cd:91:11:b9:51:42:f7:14:d8:11:a6:af:12:bd:
17:09:27:82:0e:4d:c6:cf:a2:b5:5b:38:e7:c9:cb:
c2:01:7c:d2:21:ee:78:0f:ca:f2:33:49:98:07:ea:
83:4e:3f:d6:c6:a1:23:59:e7:49:06:dc:45:22:7b:
0a:b2:fa:d5:3f:dd:52:f0:c1:cd:ac:86:49:89:f6:
d3:ce:a6:17:8b:24:9e:36:3a:bd:08:66:19:05:64:
a6:6d:38:38:32:13:b1:62:6a:05:27:dc:c0:b4:e3:
86:65:13:38:68:8b:05:81:61:23:fd:3a:e4:29:5f:
3a:d0:7a:20:f2:2f:c5:30:bd:77:3f:de:16:c4:9d:
63:a1:24:38:1c:44:9e:5c:9e:18:5c:35:a7:62:29:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:6C:BD:A6:92:FA:3E:BF:9C:02:88:97:2E:D0:58:E6:5D:04:B6
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4c:ab:89:2f:2b:bd:0f:37:fc:9f:00:33:25:94:b4:2b:35:
11:1d:7d:63:36:ea:87:e0:40:5b:62:7f:66:10:c0:2b:53:09:
5c:ea:71:7a:a9:70:45:42:81:8c:31:5f:0b:0d:8f:04:d0:88:
6d:f7:dc:84:43:8f:36:b8:5d:40:69:3e:18:f8:00:2f:d8:cc:
48:ab:ef:47:f5:f8:39:61:ac:77:99:4d:7a:cf:a3:6f:20:af:
11:6b:d8:66:f9:21:7c:fd:d3:02:d2:0b:4a:9d:ae:b2:dd:49:
4d:82:50:03:c1:36:e5:ed:82:be:de:b9:b4:4d:76:91:d1:5c:
48:57:8f:0a:57:6d:3a:f6:c6:fb:9b:f3:89:27:8d:25:fb:8e:
2c:e6:98:b0:b9:62:b8:21:82:8a:93:9d:ab:17:c5:5e:db:ae:
45:f1:0f:80:13:80:ca:6f:b1:b0:ef:4a:0b:58:81:c3:1a:88:
a5:ae:44:15:e5:09:d1:f1:d2:13:75:ca:96:5f:f2:8a:ea:d9:
32:30:39:7b:8e:be:c4:82:c4:84:a7:54:2a:0f:84:11:7f:ae:
91:ff:09:8d:a0:21:b7:66:93:00:9f:15:71:a2:5a:65:14:63:
9c:6c:51:7d:54:50:f0:70:57:20:64:58:5b:72:f2:57:d9:42:
0f:9c:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:58 2026 by rpki-client