Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: QuW3QlpJyd6fsatADRsJkaFGwMb1oMQG5+nLuQbRl7I=
Subject key identifier: 8D:59:06:E3:8D:CA:53:84:B3:C5:72:51:D5:11:2D:21:D0:6C:A0:08
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 01A13522EAA8C9294831B34C8E7DE141720A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 12:00:43 +0000
Manifest this update: Tue 13 Oct 2026 12:00:43 +0000
Manifest next update: Wed 14 Oct 2026 12:00:43 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: yt7hMlWRfC2egbotbj1xqssMSE35sZ+ZWT8wlt9OgA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:22:ea:a8:c9:29:48:31:b3:4c:8e:7d:e1:41:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Oct 13 12:00:43 2026 GMT
Not After : Oct 14 12:00:43 2026 GMT
Subject: CN=8d5906e38dca5384b3c57251d5112d21d06ca008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:3d:1c:d0:e4:7c:ad:27:16:e7:15:ec:0a:
8c:80:93:51:5a:40:0f:98:35:8c:a9:ed:1f:1a:03:
cf:21:c4:fa:b7:a7:8b:eb:1c:42:e8:af:be:8d:bb:
31:fb:e8:59:59:e1:ea:75:c2:4e:01:95:5e:ff:93:
28:01:b7:b6:ef:0a:2f:97:e2:67:43:2b:10:78:22:
3e:af:c3:4b:2d:45:db:30:cd:2c:0e:83:c3:59:d1:
f6:d3:28:34:c5:cb:fb:ca:2c:ef:e2:16:16:f3:bd:
56:1c:b5:b5:bd:a1:a1:97:e5:e1:da:e1:01:f0:05:
ce:81:36:23:af:24:8c:05:a5:f7:c9:1c:f6:42:95:
fe:e3:cb:8f:2e:98:08:a2:8e:31:6e:19:5c:a7:fc:
93:f1:c8:b5:11:20:76:fd:08:6d:f4:71:9f:95:27:
4c:4f:03:77:96:c9:2c:17:e5:48:f7:03:e2:5a:95:
ed:e9:35:4e:c3:27:46:90:d8:e0:f9:63:85:3c:9c:
57:c0:e6:e4:cf:80:f7:32:00:f5:54:c2:af:e5:e1:
a7:1b:b9:1d:c2:29:ea:15:2e:55:d0:70:bd:10:10:
da:f7:bc:ca:7a:5f:3d:88:f8:f5:3e:50:b6:69:f1:
e3:79:25:c1:23:ff:56:c1:25:73:e6:35:ad:5d:ac:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:06:E3:8D:CA:53:84:B3:C5:72:51:D5:11:2D:21:D0:6C:A0:08
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b4:9d:0a:68:bc:7b:ec:d4:5e:a6:3c:93:21:f5:e8:5d:a9:
e4:0e:69:37:58:97:5e:ef:09:54:11:09:27:02:da:af:8b:4d:
3c:5d:be:8d:7b:66:a3:c6:36:66:d5:56:5c:5e:1d:ef:44:f3:
11:94:78:58:4c:5a:b8:8a:44:72:9c:7f:c4:64:89:c1:ba:0c:
c3:60:6c:4d:80:63:8b:41:3f:06:c3:7a:fe:3e:87:05:17:8d:
77:93:6f:f1:de:b8:60:21:50:7d:ce:dd:82:49:ce:f6:ef:f6:
fd:4f:bc:4f:f9:09:3a:c8:84:8f:07:85:1d:93:0c:3d:16:ef:
62:78:60:12:8d:40:71:24:b2:03:cb:3c:e7:eb:e1:d6:ff:c8:
aa:13:e3:0b:18:53:81:8f:bf:27:b4:fc:a7:71:49:bc:49:e7:
49:28:d6:60:1c:2e:09:97:06:a9:f7:d2:e7:37:40:3d:63:46:
09:0d:2a:f4:18:b4:84:d9:3e:84:fd:f5:dc:2e:89:86:75:70:
b6:e4:2f:91:84:5f:1c:15:d5:2d:21:16:81:a0:ea:b9:bd:31:
21:73:14:8a:b3:ca:69:d0:fc:2a:84:b0:fc:f6:72:65:4c:41:
d2:42:05:a6:30:e7:88:7a:b4:99:32:53:63:f2:f7:de:d3:46:
c8:29:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:22:40 2026 by rpki-client