Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: To1w3uRXUjTsz4VY+LpPXHaowD5/kBGHKTizEsMRrHY=
Subject key identifier: 7D:75:7D:9D:43:DD:20:11:04:C4:EF:EC:FC:75:57:80:4F:DB:5F:C7
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019D386651CC451BE72B8848564B426AC534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: Ljigm4u/1O0ghYwh2feS40UijlBjko42tsyUJIeTBgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:51:cc:45:1b:e7:2b:88:48:56:4b:42:6a:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=7d757d9d43dd201104c4efecfc7557804fdb5fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:89:fc:d2:66:d1:90:31:0e:af:98:df:7f:
7a:5f:31:0b:e0:ec:2b:1c:7b:14:30:3e:30:eb:2b:
07:c5:35:17:08:28:35:b8:e6:ec:05:21:e9:9b:54:
bc:94:bc:5a:ec:a7:9f:09:53:0c:f7:9d:40:bc:ec:
7c:65:8a:d9:b9:7d:b7:c2:bf:67:06:68:e7:6a:93:
3f:3b:f6:13:e9:1a:67:00:da:e5:9f:2c:fd:da:cc:
8a:96:bf:c7:de:ec:2f:52:a7:4c:14:e5:56:5a:d6:
dd:b9:1e:65:99:1b:50:f7:a8:11:2e:d1:fd:56:61:
95:48:3c:3e:e1:20:b5:95:d9:3f:7f:c5:15:38:49:
57:4c:c4:b0:d6:78:4b:d7:69:17:73:d9:b7:31:3d:
16:dd:a8:c1:99:51:35:46:91:67:76:16:74:64:9f:
85:0a:45:7c:c6:92:72:ea:67:0b:e5:50:99:c7:c3:
b0:ce:40:5e:66:e0:95:1e:88:da:3f:81:72:22:d8:
ca:e3:08:7c:b5:89:e8:08:c3:b7:d0:f7:53:b7:d2:
fd:fa:e3:80:6e:98:05:bd:4b:5b:17:af:78:5b:44:
51:95:e3:95:44:cc:00:0a:b8:e0:02:f9:50:37:91:
30:7a:bf:dd:a0:67:07:57:20:4e:1d:4c:e4:a3:f5:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:75:7D:9D:43:DD:20:11:04:C4:EF:EC:FC:75:57:80:4F:DB:5F:C7
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:df:88:a5:0e:db:48:57:e6:de:8a:83:6a:f5:c6:aa:3a:c0:
c5:e7:49:33:1d:80:ea:62:e8:33:52:17:2d:54:f6:af:33:d5:
45:ad:78:3f:a4:ec:8c:1e:08:1c:4c:13:7d:ec:f4:22:19:6f:
e8:32:d8:56:40:41:b2:40:e0:c2:98:5f:d6:bd:14:cf:13:02:
00:23:ef:83:37:a8:a7:c2:95:23:0b:6d:e7:64:ba:dc:96:26:
d9:de:36:5f:ec:c0:b0:ef:01:21:17:ab:67:be:1d:c5:6c:20:
ab:8a:e6:1d:88:f4:e6:af:cb:34:f1:2c:dd:16:1b:27:82:c4:
01:88:9f:5f:8c:30:20:9e:e8:ac:0b:21:54:4c:b9:5d:74:6c:
4e:b1:89:79:2c:43:db:f2:07:c9:df:b1:9e:bd:fb:86:13:b0:
2f:90:82:ae:63:62:8b:3d:d7:44:59:79:31:bf:29:a7:d0:81:
c1:5f:bc:cf:8b:fd:2b:d7:c9:17:97:e1:6c:77:45:fe:ee:fa:
70:b0:8c:78:25:c3:12:d7:85:99:1e:50:f6:79:57:0f:39:7f:
d4:dd:32:40:ae:81:87:41:cd:12:77:60:47:ec:24:3e:0e:09:
67:91:5f:67:f8:78:3a:17:8c:61:5d:0c:e8:8d:a2:e3:7d:fd:
05:f0:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:34 2026 by rpki-client