Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
File: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft (raw, json)
Hash identifier: 4EiaVGcG3Frjh5aZtjzose44Ws8c5isUDODrr473Ol0=
Subject key identifier: A3:F0:F1:C2:21:61:D4:81:5F:93:F0:02:BA:05:96:88:96:EC:C8:B9
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Certificate issuer: /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial: 01A12AD7922FE0C12EEB35E00F46A6F411E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:02:13 +0000
Manifest this update: Sun 11 Oct 2026 12:02:13 +0000
Manifest next update: Mon 12 Oct 2026 12:02:13 +0000
Files and hashes: 1: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (hash: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=)
2: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl (hash: vNl8X6W7UWn/i0fgVNHTquqYeIjKZup733CX+QMXkDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:92:2f:e0:c1:2e:eb:35:e0:0f:46:a6:f4:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Validity
Not Before: Oct 11 12:02:13 2026 GMT
Not After : Oct 12 12:02:13 2026 GMT
Subject: CN=a3f0f1c22161d4815f93f002ba05968896ecc8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:78:4d:aa:f8:ec:44:0f:0c:8b:79:21:53:
06:af:4b:b8:45:5b:a6:5c:0b:c9:c9:2f:e2:42:f5:
4d:e0:75:a4:c6:c0:e5:d8:68:d2:88:0d:c6:48:56:
fd:7f:67:bf:78:7e:40:f4:40:33:39:c2:43:bb:f2:
94:00:02:5d:80:18:fe:b3:61:97:ca:83:80:a6:be:
f4:cb:44:d7:24:38:af:a9:59:b9:27:8e:41:1a:5b:
ab:44:59:a2:43:cd:bb:d6:40:66:3b:95:1c:a1:52:
e3:a6:c7:08:71:23:78:32:5b:8b:52:14:40:88:0b:
30:ba:b9:88:b9:94:76:10:65:30:16:24:41:8b:38:
87:f0:c8:6f:8f:ba:50:2d:1c:b4:fa:ec:20:8d:12:
f6:55:ed:07:a6:b3:72:2b:49:72:ab:64:4e:67:55:
88:eb:7e:6f:76:7b:b5:a4:3c:a3:dd:9a:1f:12:48:
fd:2e:21:9d:c9:35:61:57:1c:60:65:1b:34:b7:a6:
32:82:1d:24:48:3c:70:fb:d1:f1:55:fc:86:3a:c1:
45:67:af:ff:b4:8f:0e:ad:36:d4:53:2b:50:36:3f:
ea:e5:a7:60:31:ca:19:f0:dc:78:e6:ce:cd:42:c0:
df:13:6a:6c:60:f1:c6:d4:8d:ff:ba:1f:97:31:f4:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:F1:C2:21:61:D4:81:5F:93:F0:02:BA:05:96:88:96:EC:C8:B9
X509v3 Authority Key Identifier:
keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:87:f9:4c:58:7c:a1:63:7f:a7:c1:31:9d:7b:28:dd:9b:c7:
90:30:6c:ab:e8:c7:f1:c1:2a:00:66:50:e4:fe:9a:7b:f4:f0:
43:0b:84:32:e9:65:a1:a5:17:7c:57:70:82:3e:19:7b:ac:1b:
aa:8a:fd:1f:e4:36:ad:74:de:ae:06:ef:c7:3e:97:34:ef:ef:
43:12:64:04:cc:56:00:c0:95:65:12:90:28:03:0e:ee:b9:ae:
62:cf:63:15:1f:61:1f:0d:4d:18:34:e5:36:ea:a7:e7:37:fd:
ca:83:93:fe:4e:ae:14:f9:13:f1:5b:60:f3:06:9a:45:a3:38:
75:7f:4b:0e:47:83:bd:99:c4:f8:86:55:ed:86:f9:52:0e:c3:
9c:fc:ee:23:07:41:88:5d:31:da:38:b9:c5:cb:e6:b4:64:5a:
2e:33:48:4c:9a:6c:d9:10:bb:70:c4:ee:f7:13:45:5a:f2:3b:
30:ab:fc:9c:b0:aa:dd:37:51:96:e7:a6:9f:87:33:25:db:10:
84:c0:20:d2:d3:d1:89:5f:06:ed:c9:cc:dd:5d:19:79:86:e8:
25:21:77:d3:a5:a7:1b:51:40:e6:7e:e1:8d:55:c5:91:30:f6:
df:d3:df:d8:3d:82:05:d1:cd:20:8c:23:db:29:93:62:df:0d:
45:e5:de:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq15Iv4MEu6zXgD0am9BHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZmRjNGRhNWRmMzUwNWY1ZjY2YzQwNjE3NDFjMjNhOWVj
ZTBiZTcwHhcNMjYxMDExMTIwMjEzWhcNMjYxMDEyMTIwMjEzWjAzMTEwLwYDVQQD
EyhhM2YwZjFjMjIxNjFkNDgxNWY5M2YwMDJiYTA1OTY4ODk2ZWNjOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PJ4Tar47EQPDIt5IVMGr0u4RVum
XAvJyS/iQvVN4HWkxsDl2GjSiA3GSFb9f2e/eH5A9EAzOcJDu/KUAAJdgBj+s2GX
yoOApr70y0TXJDivqVm5J45BGlurRFmiQ8271kBmO5UcoVLjpscIcSN4MluLUhRA
iAswurmIuZR2EGUwFiRBiziH8Mhvj7pQLRy0+uwgjRL2Ve0HprNyK0lyq2ROZ1WI
635vdnu1pDyj3ZofEkj9LiGdyTVhVxxgZRs0t6Yygh0kSDxw+9HxVfyGOsFFZ6//
tI8OrTbUUytQNj/q5adgMcoZ8Nx45s7NQsDfE2psYPHG1I3/uh+XMfRIXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPw8cIhYdSBX5PwAroFloiW7Mi5MB8GA1UdIwQY
MBaAFAX9xNpd81BfX2bEBhdBwjqezgvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt
MTRhMDgyNWI1MjkxLzEvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx
LzEvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApof5TFh8
oWN/p8ExnXso3ZvHkDBsq+jH8cEqAGZQ5P6ae/TwQwuEMulloaUXfFdwgj4Ze6wb
qor9H+Q2rXTergbvxz6XNO/vQxJkBMxWAMCVZRKQKAMO7rmuYs9jFR9hHw1NGDTl
Nuqn5zf9yoOT/k6uFPkT8Vtg8waaRaM4dX9LDkeDvZnE+IZV7Yb5Ug7DnPzuIwdB
iF0x2ji5xcvmtGRaLjNITJps2RC7cMTu9xNFWvI7MKv8nLCq3TdRluemn4czJdsQ
hMAg0tPRiV8G7cnM3V0ZeYboJSF306WnG1FA5n7hjVXFkTD239Pf2D2CBdHNIIwj
2ymTYt8NReXeGg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:34:36 2026 by rpki-client