Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
File: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft (raw, json)
Hash identifier: l5SKdVjyg4+owt9xk8YJy55pmjBeioSX5sdv3gMTlmA=
Subject key identifier: AA:79:60:81:9D:88:55:33:DD:78:01:0C:B6:86:61:B2:D3:AB:96:45
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Certificate issuer: /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial: 019FAA8894AEEAB763C26371507E8DDCF799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (hash: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=)
2: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl (hash: YLtbfmSulfnFqqDxBstD6oTu0s+tsughovLEtn+e1DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:94:ae:ea:b7:63:c2:63:71:50:7e:8d:dc:f7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=aa7960819d885533dd78010cb68661b2d3ab9645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:29:f2:a9:24:93:bb:48:cb:5b:f2:f3:07:
f2:71:db:42:e8:99:11:0f:90:93:b2:45:30:e1:b3:
0f:15:af:cf:b8:e9:2d:ff:14:6a:cf:ee:b0:a7:ec:
27:a3:52:9f:78:7a:d7:9b:aa:3c:e1:ad:57:fd:38:
04:41:aa:75:16:95:69:3a:45:ad:95:7d:58:47:28:
4d:05:dd:cb:47:e0:4f:8b:aa:36:5e:dd:aa:96:dd:
a3:8f:de:e9:d8:35:bd:a5:60:d4:4b:39:32:ba:9e:
c4:96:28:f8:77:57:3b:00:35:99:e5:b3:6a:45:29:
e2:8e:d3:37:86:4b:fd:b3:94:c9:b5:07:6f:4a:6f:
ac:af:60:3b:04:8a:2e:d8:33:e9:57:a2:46:5d:7e:
31:2c:f9:8a:55:14:34:5c:13:43:36:e1:17:84:80:
14:ea:39:1e:be:cb:69:65:22:01:7b:ec:7e:72:7c:
8a:6b:c8:f9:eb:05:9d:ff:75:f5:59:1f:09:e1:67:
c5:65:02:d6:84:38:02:7c:65:6b:38:f8:80:01:f5:
51:5d:72:3a:69:95:1a:fd:93:65:67:a7:a9:16:3f:
c8:7b:c2:00:de:5d:61:dc:ed:17:53:71:65:f3:19:
37:31:5e:f6:88:f3:f9:a2:2b:86:ba:49:83:89:cf:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:60:81:9D:88:55:33:DD:78:01:0C:B6:86:61:B2:D3:AB:96:45
X509v3 Authority Key Identifier:
keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:95:4d:18:4a:c7:a4:72:db:5c:fd:b4:e2:27:80:3a:ab:
08:d3:3d:b1:03:12:cd:23:4e:3b:6b:d0:ac:98:48:e7:71:c5:
77:8c:83:28:0f:6c:4f:d6:b7:a5:f5:72:7d:7e:b9:52:5a:08:
30:e6:bc:e2:bd:b4:09:43:ae:e8:47:c6:8a:44:04:1d:0a:e1:
74:bd:3f:e9:75:73:b7:fc:59:e8:d7:42:71:95:2d:f7:3b:24:
6a:9d:86:0c:e3:59:45:3c:ab:7a:ea:08:06:fe:16:1a:02:bb:
d8:ec:f2:56:cd:9e:d4:e4:bd:9f:44:93:0f:09:89:7e:55:4c:
e4:c0:4c:2d:16:9f:4c:86:21:1b:80:b4:8d:d1:45:65:24:64:
99:52:24:fc:df:b2:8e:c0:98:3c:37:6f:2c:cc:3d:38:74:a9:
c9:e5:1d:40:3c:59:2f:a0:16:c1:bc:a2:12:24:dd:86:f0:72:
6c:c7:6f:39:ae:52:f3:30:41:a3:a0:e0:5f:22:86:1b:d6:fc:
a6:7f:b3:f7:82:b5:2e:bd:5e:3b:db:16:a5:77:b9:8d:ba:b5:
21:03:c0:17:c4:b5:85:5e:45:4f:ac:70:ec:51:19:2a:1c:aa:
5e:f8:ac:03:6f:85:26:00:a8:10:62:41:3a:f8:d6:61:63:e2:
88:df:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:07:29 2026 by rpki-client