Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: zmpky+dghqL1AUM1u25quGtHK6uQWQ4XR63ZdqREtxQ=
Subject key identifier: 26:0D:2D:B6:A0:D5:47:77:47:19:F1:07:19:B7:9B:B7:3B:32:6F:78
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019CAAC6E5DADA6EEF7D7427D434C9932B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0567
Signing time: Sun 01 Mar 2026 19:01:27 +0000
Manifest this update: Sun 01 Mar 2026 19:01:27 +0000
Manifest next update: Mon 02 Mar 2026 19:01:27 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: 4uEn3ESDyt9qsGQmB+jUC1pPoUDmWxmMUJLFAXAAynQ=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e5:da:da:6e:ef:7d:74:27:d4:34:c9:93:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Mar 1 19:01:27 2026 GMT
Not After : Mar 2 19:01:27 2026 GMT
Subject: CN=260d2db6a0d547774719f10719b79bb73b326f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:e0:f3:78:0a:8b:bf:4f:df:81:2d:1f:58:
23:78:3f:b9:45:c5:34:55:61:9f:64:3b:b4:30:d9:
60:9e:aa:40:2b:75:c0:ee:80:11:d9:cf:e9:78:8c:
07:05:1b:11:8c:bf:4a:2e:a6:18:14:a7:f0:04:42:
bf:08:a1:85:62:11:57:19:ed:4f:df:2f:4d:86:b6:
bb:2a:fa:4e:1a:16:61:00:c9:74:75:4c:ff:d8:25:
ef:cb:48:df:3d:28:1a:e2:09:db:61:78:8b:5f:87:
62:1c:cd:39:0d:fe:20:fa:c6:16:68:50:60:d3:fb:
3c:06:08:8f:94:6d:5c:01:a5:b1:8d:c5:53:6e:81:
e7:e9:f4:20:02:c1:47:ba:39:c2:5c:56:6a:e9:37:
b9:99:b8:19:98:d0:95:a5:6d:18:a1:1a:f3:22:c2:
2b:90:c5:7c:db:04:fe:22:75:c0:cc:5e:d0:79:71:
08:2f:4d:c3:04:25:8c:fe:da:4a:93:83:8d:90:2e:
83:8b:dd:4e:03:69:23:ed:35:b3:ad:b5:46:91:28:
4f:02:56:32:ce:7b:ee:59:c7:e6:c8:d7:76:52:e4:
9b:d1:18:02:ce:4e:87:c8:7f:cd:00:ca:00:dd:6c:
1e:5d:92:4f:94:0c:e0:1c:60:3d:45:92:48:ba:60:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0D:2D:B6:A0:D5:47:77:47:19:F1:07:19:B7:9B:B7:3B:32:6F:78
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:81:38:1c:65:95:97:f1:fb:4b:df:30:1f:20:24:d5:aa:
18:ca:3e:34:8c:eb:27:c5:96:cb:6a:3b:35:54:61:47:ec:42:
8d:43:53:1e:ec:2a:e7:ee:e8:a7:b4:e9:d5:d9:50:ea:66:f7:
fe:75:de:ea:03:3c:52:f9:30:cf:ac:45:0a:51:0f:69:dd:ec:
bf:6d:fc:0f:1c:7d:eb:e7:5e:7d:61:e2:fb:dc:26:5b:6b:1a:
31:83:3e:9e:24:0b:5e:03:ca:34:71:a0:ab:7e:fa:74:52:75:
20:3b:09:6f:a5:80:db:76:b9:dd:18:b7:f6:96:71:78:d6:9d:
54:84:66:c5:83:51:81:a7:62:3c:ea:8f:65:44:a4:49:0c:c9:
94:ac:cb:76:4d:f8:ac:ff:39:17:45:b4:bd:51:c7:fe:03:a4:
40:77:98:b5:47:7c:b4:4a:e6:64:f9:5f:16:05:98:3e:86:2e:
bf:c7:ac:69:25:27:b2:1d:32:26:e8:f3:fb:a9:7e:41:35:9b:
7b:21:69:c5:91:48:d2:a1:ef:ae:f3:3b:1e:7c:f3:11:3f:42:
17:fa:70:5e:56:66:76:bb:f6:17:79:f0:bd:bb:26:af:71:66:
f7:37:17:18:4f:fe:15:9e:ed:05:17:63:b3:8d:32:77:37:84:
82:3d:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:48 2026 by rpki-client