Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: uZuyGYGWjRZ58wrJWAhENcqjOdFNixkhIe6cQyXj6h8=
Subject key identifier: 68:AF:0D:71:7B:37:13:F3:69:3C:3B:A2:AB:A3:8C:1D:7D:D6:1F:39
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 019FAB2C76F0921950A95752D6B5F24E71D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:00:45 +0000
Manifest this update: Wed 29 Jul 2026 00:00:45 +0000
Manifest next update: Thu 30 Jul 2026 00:00:45 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: wJSYpkiCiRmXj75bemyeI7TAq/QsmJp/cQO816W5RxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:76:f0:92:19:50:a9:57:52:d6:b5:f2:4e:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Jul 29 00:00:45 2026 GMT
Not After : Jul 30 00:00:45 2026 GMT
Subject: CN=68af0d717b3713f3693c3ba2aba38c1d7dd61f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:7c:08:cc:cd:21:eb:f2:fe:ef:e3:18:af:
51:89:0d:35:a0:97:da:36:30:a4:aa:46:2c:35:82:
5a:d7:b7:27:26:64:e4:f8:c0:80:93:62:a2:2b:41:
7d:38:1f:d1:4f:71:9f:4b:c7:56:b0:15:99:78:48:
b0:20:31:07:e3:6f:ce:11:4d:ed:34:e4:88:8c:6a:
35:ab:ad:87:0d:2d:64:72:f2:c2:7d:46:03:09:ba:
eb:c6:84:43:91:24:b4:64:10:08:95:b0:6a:f3:5f:
5c:7b:2b:e0:f5:4f:fd:cc:f6:bb:2c:f6:27:cd:d0:
23:69:0c:47:5b:f1:7e:89:10:b2:af:99:76:71:d3:
16:1c:b2:b3:29:3c:be:3b:c8:7d:b0:0e:1b:d3:ac:
d6:69:39:fc:77:de:53:75:ce:23:a7:12:f0:b8:4e:
52:24:91:f9:c3:9f:7b:41:70:58:b2:4f:37:ac:4e:
54:3f:83:2a:74:25:26:7c:7f:14:52:10:71:cf:27:
49:31:f0:af:76:2e:27:28:0c:b8:88:41:c6:c1:ff:
ad:16:d0:10:19:a3:63:42:6e:1d:00:ba:35:76:9b:
db:af:f6:be:81:09:84:f0:2a:9c:50:5d:b2:1f:00:
2e:38:dd:20:db:05:30:8c:01:e7:33:e0:70:9b:5c:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:0D:71:7B:37:13:F3:69:3C:3B:A2:AB:A3:8C:1D:7D:D6:1F:39
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dc:be:5c:38:6a:bc:bb:b5:27:bf:cb:14:6a:f6:e9:b9:8c:
fd:85:62:04:68:64:7d:59:9e:0a:45:df:0c:e3:64:d5:a3:05:
7b:55:dd:8e:54:68:1a:ef:c3:ee:4c:39:f6:79:5a:d3:fd:fe:
4d:b9:ef:f6:42:57:4d:ea:ac:1d:95:8a:49:bb:f4:33:f3:f8:
30:cf:63:60:fc:f3:a0:c1:a3:04:33:18:26:4f:75:a6:b6:e5:
34:04:6d:82:ce:34:12:0d:2f:20:bc:63:f6:d7:7c:a8:d9:29:
fc:a3:6e:f2:7a:bc:5e:eb:ed:7d:f7:f2:87:f7:85:cb:d5:94:
a7:59:49:89:00:7c:a0:c7:77:4c:fb:d6:6f:48:da:5e:cb:9d:
f8:e0:41:2e:34:61:82:4c:d9:75:ca:b6:bb:bf:6d:88:be:cb:
dd:16:74:5b:a4:ba:5c:e7:9c:81:d7:26:2a:f9:2c:aa:c8:5a:
f5:db:0e:d0:2b:12:16:97:4c:69:1d:b2:ba:64:1e:3d:8a:a5:
c0:33:d2:6c:80:43:75:ba:27:57:1e:71:bc:72:48:17:db:51:
f4:cc:da:3b:ad:a9:94:ae:b5:04:de:a5:53:bb:83:a0:6b:0e:
c7:61:c9:56:86:f4:c5:a4:5f:16:7f:af:6e:6a:c9:d4:f3:59:
09:d5:ab:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLHbwkhlQqVdS1rXyTnHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjFjODcyNGNiYmQwMzRiYWI3YTBkYWRmMGFiNGI5OWZm
NjZmZmYwHhcNMjYwNzI5MDAwMDQ1WhcNMjYwNzMwMDAwMDQ1WjAzMTEwLwYDVQQD
Eyg2OGFmMGQ3MTdiMzcxM2YzNjkzYzNiYTJhYmEzOGMxZDdkZDYxZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwB8CMzNIevy/u/jGK9RiQ01oJfa
NjCkqkYsNYJa17cnJmTk+MCAk2KiK0F9OB/RT3GfS8dWsBWZeEiwIDEH42/OEU3t
NOSIjGo1q62HDS1kcvLCfUYDCbrrxoRDkSS0ZBAIlbBq819ceyvg9U/9zPa7LPYn
zdAjaQxHW/F+iRCyr5l2cdMWHLKzKTy+O8h9sA4b06zWaTn8d95Tdc4jpxLwuE5S
JJH5w597QXBYsk83rE5UP4MqdCUmfH8UUhBxzydJMfCvdi4nKAy4iEHGwf+tFtAQ
GaNjQm4dALo1dpvbr/a+gQmE8CqcUF2yHwAuON0g2wUwjAHnM+Bwm1wcwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGivDXF7NxPzaTw7oqujjB191h85MB8GA1UdIwQY
MBaAFG3xyHJMu9A0ureg2t8KtLmf9m//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAt
ZjkyNGQ2ZjZhNTk1LzEvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAtZjkyNGQ2ZjZhNTk1
LzEvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNy+XDhq
vLu1J7/LFGr26bmM/YViBGhkfVmeCkXfDONk1aMFe1XdjlRoGu/D7kw59nla0/3+
Tbnv9kJXTeqsHZWKSbv0M/P4MM9jYPzzoMGjBDMYJk91prblNARtgs40Eg0vILxj
9td8qNkp/KNu8nq8Xuvtfffyh/eFy9WUp1lJiQB8oMd3TPvWb0jaXsud+OBBLjRh
gkzZdcq2u79tiL7L3RZ0W6S6XOecgdcmKvksqsha9dsO0CsSFpdMaR2yumQePYql
wDPSbIBDdbonVx5xvHJIF9tR9MzaO62plK61BN6lU7uDoGsOx2HJVob0xaRfFn+v
bmrJ1PNZCdWrog==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:52 2026 by rpki-client