Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: Uk8NpvpEzHmK8CoZOpIfx5TmH2bssIkSjT5fMteV93A=
Subject key identifier: FA:4C:06:F8:36:73:E8:3C:BA:C9:A6:7A:7B:B9:9E:72:52:86:22:C5
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019CAEA315F8681336318C1458150A8A118C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0569
Signing time: Mon 02 Mar 2026 13:00:49 +0000
Manifest this update: Mon 02 Mar 2026 13:00:49 +0000
Manifest next update: Tue 03 Mar 2026 13:00:49 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: 8A3upa6Yx1UJeU3tdqAn1s6ZM1BSvJy/8uGX7XDCVdw=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:15:f8:68:13:36:31:8c:14:58:15:0a:8a:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Mar 2 13:00:49 2026 GMT
Not After : Mar 3 13:00:49 2026 GMT
Subject: CN=fa4c06f83673e83cbac9a67a7bb99e72528622c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:c9:77:e7:8b:aa:e1:9d:f6:9b:05:38:eb:
76:4f:09:04:cd:1f:10:7c:cf:7f:80:52:b1:2e:0e:
e1:d7:4d:af:37:47:1c:30:c3:b5:64:98:e5:b5:ac:
ad:db:03:d5:1b:0f:8e:8f:11:4a:c1:88:b5:3a:61:
56:26:a1:fa:b9:e8:1e:7b:50:cb:bb:86:fa:9c:68:
51:9a:10:74:1a:fb:a9:78:ef:62:70:24:e9:7d:88:
0a:92:7d:70:66:f3:d5:ce:16:a3:ee:da:49:16:ce:
fe:1e:2e:41:d0:fc:ad:c3:23:25:cb:d7:26:f7:93:
1c:fe:7c:c1:7f:50:09:20:68:28:8a:56:f5:d4:7f:
09:0c:62:57:02:16:89:44:cd:8a:da:57:82:c8:a5:
bc:7e:8c:91:c3:84:a2:63:54:81:45:2f:e5:a9:49:
e2:5a:fb:83:bd:82:22:4e:59:20:a7:23:9d:1a:ff:
0d:78:42:b3:b5:05:d7:01:8c:e0:5c:20:1f:fe:7a:
8b:30:c5:1d:ee:5c:49:5c:6f:ec:3c:b7:93:b5:67:
2c:1b:7e:f6:dd:38:28:ce:77:2a:26:0d:ef:1e:f0:
37:39:fe:fb:81:cc:2b:82:93:28:3c:54:59:b8:6c:
78:d4:92:d3:bd:0d:d7:2c:15:ff:dd:43:5c:28:ce:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:06:F8:36:73:E8:3C:BA:C9:A6:7A:7B:B9:9E:72:52:86:22:C5
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:c0:48:50:09:3d:31:2d:da:43:05:27:8a:ec:6e:1b:35:aa:
d5:c9:2f:06:2f:e8:3c:63:57:dd:f6:f6:1b:b7:9d:de:d1:dd:
bd:64:ed:c4:d2:d0:04:83:c8:8e:03:29:78:96:40:05:55:58:
18:86:4c:51:ab:65:e6:bb:26:eb:70:3f:f2:4a:34:ce:1e:5a:
07:ad:9c:76:37:e7:9d:65:36:c6:ce:30:9d:1e:65:2f:22:ec:
d1:7e:7d:cf:db:43:1b:7d:40:b7:cd:8f:b2:f7:36:01:42:8a:
2f:d5:3d:8f:a1:b3:c2:e2:61:a8:18:eb:1b:25:65:65:68:a9:
db:fb:b5:d0:02:58:3e:58:75:c1:9f:21:27:7e:0d:9f:87:b4:
01:e8:57:ef:8b:36:53:e4:b2:3b:ab:ed:71:78:43:16:11:ce:
18:9a:1b:e1:ba:45:ae:20:8b:be:30:be:55:42:19:34:b7:3a:
84:0e:c7:a4:3c:71:a1:b0:bf:ba:1a:56:bd:ff:69:df:c7:3b:
56:e7:1e:bf:23:59:bb:e3:b1:5b:5a:a7:50:03:d8:8a:55:94:
b1:1d:fd:f8:9f:00:a9:8e:2c:40:51:99:b4:f4:3e:5f:17:2a:
aa:6f:5e:e9:df:f0:fc:4e:93:bc:c0:df:37:a1:de:09:26:cd:
bd:20:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:37 2026 by rpki-client