Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: ZeEr3ioK3+04BCu9DqUF5YHtCqzYyr1ZI/rnK/InzmA=
Subject key identifier: 06:44:6C:33:84:49:3A:2B:26:46:BC:A4:CE:2C:CA:E2:70:23:26:D8
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019DA3AF5D3477D9C0C2C8D3C1FAA717CD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 03:01:11 +0000
Manifest this update: Sun 19 Apr 2026 03:01:11 +0000
Manifest next update: Mon 20 Apr 2026 03:01:11 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: MftViTXKgSbb/mqXhVFnxtCgGBgmrYWId+VFi0ApLt4=)
2: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:5d:34:77:d9:c0:c2:c8:d3:c1:fa:a7:17:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Apr 19 03:01:11 2026 GMT
Not After : Apr 20 03:01:11 2026 GMT
Subject: CN=06446c3384493a2b2646bca4ce2ccae2702326d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:46:8e:73:84:24:02:b6:47:e6:70:99:b8:0c:
e2:3a:18:e4:7d:c9:21:f3:16:81:ce:c5:2d:5a:83:
b3:1f:d9:68:50:32:c1:ca:42:c1:1a:2a:63:c3:3a:
22:0c:e4:fc:86:33:67:24:f7:2e:2a:55:c1:4d:ad:
0d:cc:87:08:ef:de:70:9d:03:22:69:ad:7c:c2:00:
b3:33:75:c4:18:df:c9:9d:a8:c9:da:fc:df:a7:e1:
d6:3a:6f:e8:4e:d7:ed:91:f2:95:4f:3b:cc:b9:57:
f1:e1:94:7b:04:e5:c0:59:89:54:f5:4f:3f:f6:ca:
d6:c1:de:ef:4c:be:d7:ee:bf:28:72:16:ee:7e:3d:
7b:fd:da:f6:32:39:4a:27:d8:ec:d2:22:fa:7f:db:
9e:fd:ea:10:08:2c:f2:5c:51:ae:03:42:11:be:41:
ed:c7:5f:3d:d0:f7:6a:38:87:3f:64:5f:c7:51:fe:
7c:90:a0:d5:f7:31:d3:3c:98:d2:1f:95:b0:54:2d:
36:6d:ff:3d:88:2d:44:f8:1b:9c:04:6d:5b:75:6e:
0a:f0:e6:4f:0b:1a:5e:7c:d1:f3:a1:88:bc:8e:fa:
96:60:36:ed:dd:a9:18:dd:fc:17:e1:c1:8b:55:d4:
07:a3:fd:56:90:ad:1d:8d:30:f3:92:60:37:4f:c7:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:6C:33:84:49:3A:2B:26:46:BC:A4:CE:2C:CA:E2:70:23:26:D8
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f0:da:0f:a8:f7:3f:4b:e4:bd:3a:dd:83:b0:80:81:70:7e:
56:10:87:47:f4:64:a0:cb:02:b0:49:a4:0b:4a:df:ef:97:3e:
01:9e:a8:bf:db:9c:f8:fd:7e:42:dc:1b:33:40:ad:92:3d:cf:
12:ee:f2:44:10:dd:38:88:3e:51:c8:6d:65:4b:9f:e2:cd:b3:
87:4a:67:de:0c:6a:48:28:06:1c:24:af:a5:89:f2:f2:6e:8a:
6f:cb:32:47:b8:53:45:ae:7e:cd:8d:a5:68:22:80:d6:23:41:
ca:b1:ab:5e:c7:58:e4:02:f6:c5:9a:41:20:6a:52:d9:bb:d9:
6c:8b:ba:2e:3e:d1:a1:cd:5e:ea:76:5e:85:e2:cd:ef:b5:a4:
fa:89:0c:8a:e7:da:00:d8:fa:36:98:47:84:ec:50:ae:80:4f:
c7:58:b9:4f:a4:01:be:0c:af:6c:f4:01:d0:2e:cc:b2:8f:dc:
99:f7:81:81:db:8a:d8:00:0c:1c:8d:cf:16:e8:b4:93:4a:51:
22:63:93:8f:5f:32:a6:17:c5:39:58:f4:bb:c6:d9:93:8b:c8:
08:a1:53:b6:b7:fb:26:be:94:b5:23:b0:51:6e:c2:f8:39:dd:
3c:8d:bb:0b:be:a2:95:73:8a:38:79:4c:6e:bc:89:96:16:5f:
bd:6b:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:01:52 2026 by rpki-client