Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: UarAS+m/zSuwhRVGgCreWHrorEQHLsj/D2CpZ85Uxfw=
Subject key identifier: B9:F4:A1:3E:BF:13:A2:E8:49:A9:6E:58:BD:DB:32:A3:C4:F9:C6:B0
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 019CA97CCE684B18782294B50B36DF1A7875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 12C7
Signing time: Sun 01 Mar 2026 13:00:54 +0000
Manifest this update: Sun 01 Mar 2026 13:00:54 +0000
Manifest next update: Mon 02 Mar 2026 13:00:54 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: +8OU55JENPq6RUaXpslBbTBQ1v3n0N9ABYBbM5Hu8cI=)
2: z5T8Jeg-KRSBVrpJUiY8WPEbWHc.asa (hash: zIR+Jq1Supq4I4d8NJWheupQs8oviXsGrFqUkRsxnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ce:68:4b:18:78:22:94:b5:0b:36:df:1a:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Mar 1 13:00:54 2026 GMT
Not After : Mar 2 13:00:54 2026 GMT
Subject: CN=b9f4a13ebf13a2e849a96e58bddb32a3c4f9c6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:9d:7b:a5:46:73:fe:6b:d7:c4:14:25:00:
a1:98:65:c5:53:2c:15:95:ff:84:d6:da:26:35:e4:
dc:12:3b:4a:1c:5a:c3:b0:90:bf:44:2c:7c:32:a7:
13:04:95:1e:48:36:5d:d2:6e:30:14:20:13:ed:13:
98:5e:fa:87:60:6e:aa:c9:85:63:13:d9:58:39:93:
45:89:9b:a6:cc:ed:31:c3:76:20:82:b4:4b:25:7d:
48:89:be:5c:4e:a1:b0:20:18:bd:7b:d4:48:32:00:
d0:b8:50:28:ad:d2:60:b7:f7:8c:f9:84:4c:42:cd:
7d:c3:9a:fa:32:a7:05:99:76:43:76:e4:bf:22:66:
e2:3c:0e:80:89:84:70:a2:12:22:eb:2a:7f:d3:99:
f2:27:42:40:55:6b:b5:fb:26:36:34:fe:dd:d7:8f:
5f:05:e3:63:68:4b:ba:00:fe:e7:de:ac:4a:af:b5:
d3:c2:97:c7:4d:1c:8e:9e:24:52:e1:72:91:08:41:
ce:ea:a1:2a:1d:5f:89:79:e8:ce:f1:2b:77:6f:7b:
83:e1:98:9e:4c:ec:2c:1c:01:82:94:fa:14:a2:bd:
b6:0c:63:1a:3f:6a:06:fe:4a:6d:57:42:9f:57:4e:
6d:c8:d7:ac:e9:f4:f1:23:43:34:5c:d2:c9:5a:f5:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F4:A1:3E:BF:13:A2:E8:49:A9:6E:58:BD:DB:32:A3:C4:F9:C6:B0
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e2:0a:61:93:2b:25:02:67:94:42:34:5b:73:cb:37:85:ad:
27:ae:3e:39:0a:bb:8a:96:13:fb:7e:d8:f0:94:90:f0:e7:37:
52:65:f4:b9:b5:92:7d:03:2e:c4:fd:9e:b3:95:1f:b3:8e:71:
21:93:2a:6c:4e:24:cd:1d:39:fc:55:79:da:b3:9a:9e:22:6c:
aa:13:34:f5:5c:2a:cc:0a:0b:cd:a6:c9:72:e6:59:f9:6d:6d:
62:62:1f:86:97:72:45:86:3d:01:46:e6:c7:97:79:03:eb:c9:
96:a1:85:25:5d:b8:58:d2:34:d5:8f:f1:3a:d4:09:7f:bf:c5:
e5:bc:e4:e7:60:15:0c:26:0f:ee:26:52:e0:e2:d8:5a:06:d8:
fc:2e:f5:b8:fa:3a:46:97:0c:e2:1c:d9:dd:6b:8f:f5:1b:36:
22:bd:28:fe:4f:e8:cc:f6:91:60:d6:52:fa:1f:64:6f:d1:06:
d0:cf:74:a3:66:94:fc:3c:4b:ac:12:d3:a6:bd:2f:e9:5a:c0:
a5:ad:1e:91:3f:1e:c5:ed:3b:e4:00:5a:8a:8b:45:14:35:13:
23:83:f9:ff:5a:fd:e6:95:78:a8:47:73:a5:29:20:05:39:ac:
20:bc:77:d4:b3:db:88:ee:98:89:2f:06:01:e1:b6:2b:9c:48:
be:d6:a8:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfM5oSxh4IpS1CzbfGnh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmIwN2ZlYmQ1ZDAwYTkyM2FlMzkwYTQxOTBmZTU2NDRj
ZGQ0ZjYwHhcNMjYwMzAxMTMwMDU0WhcNMjYwMzAyMTMwMDU0WjAzMTEwLwYDVQQD
EyhiOWY0YTEzZWJmMTNhMmU4NDlhOTZlNThiZGRiMzJhM2M0ZjljNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTSde6VGc/5r18QUJQChmGXFUywV
lf+E1tomNeTcEjtKHFrDsJC/RCx8MqcTBJUeSDZd0m4wFCAT7ROYXvqHYG6qyYVj
E9lYOZNFiZumzO0xw3YggrRLJX1Iib5cTqGwIBi9e9RIMgDQuFAordJgt/eM+YRM
Qs19w5r6MqcFmXZDduS/ImbiPA6AiYRwohIi6yp/05nyJ0JAVWu1+yY2NP7d149f
BeNjaEu6AP7n3qxKr7XTwpfHTRyOniRS4XKRCEHO6qEqHV+JeejO8St3b3uD4Zie
TOwsHAGClPoUor22DGMaP2oG/kptV0KfV05tyNes6fTxI0M0XNLJWvUE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn0oT6/E6LoSaluWL3bMqPE+cawMB8GA1UdIwQY
MBaAFG37B/69XQCpI645CkGQ/lZEzdT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYt
ZGI4NWJhNDA2YzUxLzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYtZGI4NWJhNDA2YzUx
LzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeIKYZMr
JQJnlEI0W3PLN4WtJ64+OQq7ipYT+37Y8JSQ8Oc3UmX0ubWSfQMuxP2es5Ufs45x
IZMqbE4kzR05/FV52rOaniJsqhM09VwqzAoLzabJcuZZ+W1tYmIfhpdyRYY9AUbm
x5d5A+vJlqGFJV24WNI01Y/xOtQJf7/F5bzk52AVDCYP7iZS4OLYWgbY/C71uPo6
RpcM4hzZ3WuP9Rs2Ir0o/k/ozPaRYNZS+h9kb9EG0M90o2aU/DxLrBLTpr0v6VrA
pa0ekT8exe075ABaiotFFDUTI4P5/1r95pV4qEdzpSkgBTmsILx31LPbiO6YiS8G
AeG2K5xIvtaozA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:18 2026 by rpki-client