Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: ZGR9ieY9NJk+JHUNaD3clZoVZTXC04p3Wuz6AwruYVo=
Subject key identifier: FF:D6:F4:5D:CD:44:23:59:F6:9C:98:7A:BE:F9:D1:86:E9:46:7D:41
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 01A0C6335F4718DCF82FB0C7F48D0C44E088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 23:00:50 +0000
Manifest this update: Mon 21 Sep 2026 23:00:50 +0000
Manifest next update: Tue 22 Sep 2026 23:00:50 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: CO3TcQ2ZBvk1EgXYHul+oduh9w/J2EUIXm2oqLvGVKg=)
2: RRml_hYYRV_uh2tH4MKlyEdnOfU.roa (hash: j9pqLSMOpk42y3UflLLzJCKLgosgbaeUgLKU1+ncNBI=)
3: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:5f:47:18:dc:f8:2f:b0:c7:f4:8d:0c:44:e0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Sep 21 23:00:50 2026 GMT
Not After : Sep 22 23:00:50 2026 GMT
Subject: CN=ffd6f45dcd442359f69c987abef9d186e9467d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:b6:01:4e:95:e1:3c:c4:40:19:62:09:e7:
26:16:52:b6:38:1a:b6:40:d7:e0:39:ea:a8:e7:51:
6c:91:fc:6b:13:b4:b4:d3:e8:bd:bf:f9:40:05:57:
99:42:68:f8:58:c0:56:ca:1e:b3:94:87:58:48:40:
d6:aa:6e:94:e7:ca:46:d6:cd:e3:10:76:af:60:8e:
5e:5e:0a:b2:d6:60:06:98:04:27:19:19:40:13:aa:
76:55:72:c3:43:e8:32:48:07:75:c5:c1:43:a8:1d:
c3:77:aa:0f:74:94:0a:57:dd:42:dc:a9:c5:58:2c:
bd:72:3a:89:ca:67:0a:05:5c:1d:8c:61:f7:b2:74:
4a:7d:9c:02:05:43:7a:aa:81:d8:de:2a:c0:10:52:
6f:1b:f4:19:f4:bf:27:99:ae:d8:5e:8d:9c:9b:5e:
65:20:c5:ca:00:cf:53:f4:16:98:ea:7e:08:70:d9:
d4:2f:32:e2:d5:f2:0f:e2:c0:04:4b:1b:38:37:9d:
0d:74:61:49:2f:c9:60:c2:36:43:fe:08:d5:07:f3:
96:f7:fd:18:73:6c:dd:6e:98:5f:9d:b7:e1:cb:65:
88:e0:85:9a:0d:b2:ac:2d:79:d7:35:b2:75:fc:e3:
de:77:58:9f:89:89:1b:4e:b1:ac:82:3b:76:b3:2e:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D6:F4:5D:CD:44:23:59:F6:9C:98:7A:BE:F9:D1:86:E9:46:7D:41
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:fd:4d:e4:be:b0:ec:b6:ea:5d:62:ed:0e:9f:65:99:6d:
b6:ec:b5:a0:9e:08:c7:33:a4:d0:ea:e9:64:eb:6e:cc:5c:84:
2b:cf:13:66:2a:f5:59:97:4a:92:a4:7b:7e:3c:7a:d5:9d:91:
05:9f:6b:a8:c2:da:37:4c:3d:72:62:6c:cb:f3:6a:77:d1:f4:
fd:da:cd:a0:b2:11:2b:4e:37:61:7d:50:0b:af:54:fd:a1:c6:
e4:f1:7b:de:0d:9d:f3:34:4f:2f:d6:38:f8:6a:4e:0f:8e:7a:
8f:35:e5:39:e1:c2:1d:1d:09:65:aa:98:4e:84:3d:b1:a6:ee:
2f:41:fc:f9:56:db:39:e1:e6:6a:c2:57:35:88:e0:3e:35:80:
bf:33:64:bc:f4:0b:e4:49:53:a1:55:87:a5:2f:8c:61:09:c0:
20:50:c3:97:43:91:e1:59:b1:6e:84:61:3a:aa:55:a7:1b:25:
ea:dc:38:08:e7:f3:61:a3:fc:19:c0:23:f4:22:35:b0:ea:bc:
ee:e9:86:be:c3:62:3d:dd:c5:37:50:a4:5d:da:00:62:da:f6:
e5:04:f4:41:8d:43:26:1d:d1:79:7b:60:80:4a:e1:a0:3d:ee:
ae:11:1e:a1:35:d6:f9:81:70:0c:62:0e:b3:69:de:aa:81:fb:
e3:5d:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:55:05 2026 by rpki-client