Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: kSRWDe7h6Ud3vCdn95PZSwRLlOpAdP0ple9Y/RMzcrg=
Subject key identifier: 43:26:CA:B1:C6:F3:73:FB:3B:31:66:39:AE:1A:9C:C0:8D:36:F6:92
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019CAA8F69C4959D3C1769A70DBA267DF449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 18:00:51 +0000
Manifest this update: Sun 01 Mar 2026 18:00:51 +0000
Manifest next update: Mon 02 Mar 2026 18:00:51 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: cDCkb88LjRPRxeMrr6mzW2Jxy+bI5AL1ScJPp9YjAE4=)
2: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:69:c4:95:9d:3c:17:69:a7:0d:ba:26:7d:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Mar 1 18:00:51 2026 GMT
Not After : Mar 2 18:00:51 2026 GMT
Subject: CN=4326cab1c6f373fb3b316639ae1a9cc08d36f692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:4e:8b:cc:a9:5b:f2:3d:dc:0a:1e:94:67:
d9:1d:f6:54:d6:6d:3a:99:a7:7d:11:e5:31:0b:00:
0c:1b:48:05:2a:63:17:0a:f1:e5:ce:2d:f6:03:16:
5d:fe:45:21:ce:57:24:1b:58:01:a1:de:d1:da:ce:
80:2d:2f:c7:a9:52:6e:36:93:ad:bd:d3:05:f6:b9:
26:e8:4c:bf:ce:3c:f0:ec:05:b9:a4:9a:67:47:31:
03:30:0e:e0:e8:90:06:ce:de:78:62:a7:b2:14:b2:
15:2f:3f:12:7e:e2:26:c4:b8:49:b5:7a:cd:c9:20:
23:8f:f3:56:04:db:8b:0c:9b:5e:0d:68:07:ae:d2:
eb:d9:aa:87:74:7d:14:68:dd:47:6e:76:e6:7e:80:
19:bf:6c:49:d7:84:0e:3b:b1:64:af:4a:17:ca:ae:
bf:c0:81:37:95:b5:be:05:b1:19:75:c6:40:8d:8c:
6b:2a:38:04:70:9d:27:78:60:f9:89:66:fc:9d:04:
33:8b:34:d9:25:1f:c8:75:9d:1e:7a:0e:06:d4:1d:
ac:b0:78:de:4e:7f:e9:8c:d5:1c:9d:1e:39:d1:43:
80:9f:2b:5e:18:2e:78:ba:4e:26:00:bd:8a:3b:e7:
32:cc:5e:8e:a4:fb:0d:ec:2b:7e:f1:dc:fa:46:eb:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:CA:B1:C6:F3:73:FB:3B:31:66:39:AE:1A:9C:C0:8D:36:F6:92
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:17:39:11:1f:98:21:e1:22:51:53:d1:0e:f3:d1:c5:d7:
83:55:cc:cf:a7:35:ac:df:e8:f1:27:6a:a9:85:23:b4:30:82:
2e:8f:17:94:08:a8:c0:c0:21:da:bd:ef:20:ab:f9:30:86:59:
cc:cc:a1:fc:ce:23:6c:70:d3:9a:95:b5:94:b4:26:c4:d6:7e:
1b:6e:2f:fb:99:6c:35:e5:fe:5b:a2:d4:d7:37:ae:cb:2d:f9:
e7:9e:a9:47:4d:52:d1:cc:7a:c4:66:96:b2:90:72:f0:48:d1:
b1:ec:e7:8b:66:1a:4d:a5:78:b1:3a:8e:fb:ec:3b:82:50:19:
8d:8d:52:b4:c5:18:23:03:0b:ec:7b:47:06:d9:2b:bd:b9:10:
cb:80:4b:6d:d1:81:b6:11:d7:11:3c:a7:7c:ea:0f:e5:16:77:
0e:2f:92:f6:22:16:bd:6d:5e:8c:12:b0:bf:42:58:26:b9:f3:
00:bf:1a:bb:ba:a1:86:fc:ef:70:c4:fb:7b:f8:c2:29:b2:d5:
2a:7b:e2:9a:32:fa:b1:f0:00:c4:87:93:78:f2:7b:74:bc:83:
5a:0c:82:6c:93:7c:2d:d8:6e:54:da:cf:77:54:5c:fc:1a:4b:
ee:b5:6e:4c:bb:3e:24:bb:88:ae:29:74:bf:a6:62:f6:23:60:
e3:e7:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:10 2026 by rpki-client