
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: 3SN2Immc1zueMrOaKNFxyfC+4GZGZA+lzIKz5JLAMLs=
Subject key identifier: 15:BE:E6:55:85:7B:0E:7E:85:2A:69:85:6E:E8:22:10:D1:0A:D1:98
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 01A0C17AD0FA26B9251D61499F9FB49889A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0785
Signing time: Mon 21 Sep 2026 01:00:46 +0000
Manifest this update: Mon 21 Sep 2026 01:00:46 +0000
Manifest next update: Tue 22 Sep 2026 01:00:46 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: OV0yOhBfA8xxs9AyIjzMIdFEZQ02gXbV+SqxoWJr5IY=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:d0:fa:26:b9:25:1d:61:49:9f:9f:b4:98:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Sep 21 01:00:46 2026 GMT
Not After : Sep 22 01:00:46 2026 GMT
Subject: CN=15bee655857b0e7e852a69856ee82210d10ad198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:65:0d:33:3e:f2:6b:f1:85:89:68:73:60:
79:c5:3b:1b:60:ca:d2:55:3e:91:89:4f:37:c6:3b:
9d:53:49:63:af:45:77:ed:19:ee:08:c7:e2:83:ee:
27:e2:23:63:6c:85:ba:fb:b1:d9:29:ff:a6:db:04:
71:e1:ba:4f:b8:92:a8:a1:27:da:f7:f1:3c:39:57:
f4:5b:2e:94:c6:a4:99:87:57:f0:17:50:51:1b:bf:
8f:e1:fb:a3:af:5e:ee:09:a8:dd:b0:cb:49:c1:56:
0c:ff:03:a5:b1:57:79:ee:22:f4:db:97:23:47:c9:
49:ac:14:10:43:02:f4:78:f4:33:e0:63:57:a1:53:
1d:07:40:96:1e:90:78:84:24:ea:4e:cb:b4:0d:60:
3d:f4:29:bd:d0:7a:83:40:bc:af:2d:0f:1f:4f:d3:
ed:b8:0a:28:6d:ce:21:d9:b8:26:21:27:35:a4:46:
53:59:ba:76:9d:75:bb:60:99:53:16:0d:be:aa:dc:
43:eb:b1:5e:ad:0e:6a:59:23:9e:65:0a:92:d4:27:
9a:09:59:03:fe:56:ff:0e:93:fa:51:4a:a8:13:b2:
77:79:c1:54:d0:1a:4c:9b:c1:93:8c:2d:77:d9:1b:
12:40:91:19:2a:67:fb:a1:48:bb:6d:60:60:dc:73:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BE:E6:55:85:7B:0E:7E:85:2A:69:85:6E:E8:22:10:D1:0A:D1:98
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3c:81:8f:71:a4:97:78:94:b1:5c:da:b0:22:02:e6:00:e6:
1c:1d:94:a2:a5:61:e6:43:b4:6f:00:45:8f:75:96:a0:66:88:
54:54:15:d9:29:1c:17:16:28:12:25:28:10:a5:44:49:86:b0:
5d:8d:c0:da:42:54:dc:63:0e:88:0a:79:46:3e:ef:d1:6b:a0:
94:8e:3f:5c:f5:58:33:8b:d3:08:60:f0:4b:bc:2e:1b:e2:6d:
c4:e4:0f:3e:e0:1b:8d:4e:82:09:b3:cf:fc:ed:53:09:0d:50:
5b:fb:ac:14:27:c0:5c:61:d0:f2:93:5d:a3:c6:ac:19:33:0f:
16:74:07:37:a8:02:3e:68:f0:87:02:a0:cd:cb:a2:ea:aa:36:
d8:a3:68:d5:6c:46:ea:18:f2:64:8e:cb:96:f5:cb:e1:5c:69:
ba:6c:7d:4e:3f:f3:aa:37:37:8f:57:f4:39:80:4e:fc:98:f0:
5a:ad:f3:1b:87:66:37:37:51:0f:72:fd:f1:60:8c:8b:7f:e4:
cf:18:0e:06:30:f0:c9:21:52:d4:1a:a9:5e:12:e2:1d:ac:64:
92:45:08:f5:50:0f:60:27:dd:c3:c9:83:c3:17:90:80:28:e1:
da:60:1b:f7:29:09:79:fd:48:f0:a7:80:88:98:c4:68:92:23:
2a:c7:b8:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBetD6JrklHWFJn5+0mImlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjIyMWY1ZjA0Y2Y5ZDk2ZGRlYTQ0MjUxYjJiODIzZjcx
MTQ2NjMwHhcNMjYwOTIxMDEwMDQ2WhcNMjYwOTIyMDEwMDQ2WjAzMTEwLwYDVQQD
EygxNWJlZTY1NTg1N2IwZTdlODUyYTY5ODU2ZWU4MjIxMGQxMGFkMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5JlDTM+8mvxhYloc2B5xTsbYMrS
VT6RiU83xjudU0ljr0V37RnuCMfig+4n4iNjbIW6+7HZKf+m2wRx4bpPuJKooSfa
9/E8OVf0Wy6UxqSZh1fwF1BRG7+P4fujr17uCajdsMtJwVYM/wOlsVd57iL025cj
R8lJrBQQQwL0ePQz4GNXoVMdB0CWHpB4hCTqTsu0DWA99Cm90HqDQLyvLQ8fT9Pt
uAoobc4h2bgmISc1pEZTWbp2nXW7YJlTFg2+qtxD67FerQ5qWSOeZQqS1CeaCVkD
/lb/DpP6UUqoE7J3ecFU0BpMm8GTjC132RsSQJEZKmf7oUi7bWBg3HPZ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW+5lWFew5+hSpphW7oIhDRCtGYMB8GA1UdIwQY
MBaAFAXyIfXwTPnZbd6kQlGyuCP3EUZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgt
Y2JmMmEzYjZhMjg0LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgtY2JmMmEzYjZhMjg0
LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjyBj3Gk
l3iUsVzasCIC5gDmHB2UoqVh5kO0bwBFj3WWoGaIVFQV2SkcFxYoEiUoEKVESYaw
XY3A2kJU3GMOiAp5Rj7v0WuglI4/XPVYM4vTCGDwS7wuG+JtxOQPPuAbjU6CCbPP
/O1TCQ1QW/usFCfAXGHQ8pNdo8asGTMPFnQHN6gCPmjwhwKgzcui6qo22KNo1WxG
6hjyZI7LlvXL4Vxpumx9Tj/zqjc3j1f0OYBO/JjwWq3zG4dmNzdRD3L98WCMi3/k
zxgOBjDwySFS1BqpXhLiHaxkkkUI9VAPYCfdw8mDwxeQgCjh2mAb9ykJef1I8KeA
iJjEaJIjKse4iA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:18 2026 by rpki-client