Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: 5PW5cM5UiVE6w1YqqtMPmKcfUDMgC4ZudUARjau0TRw=
Subject key identifier: 7E:EC:9E:60:AC:1A:04:78:B5:18:ED:4D:11:BE:34:23:53:33:43:51
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 019D99D07939259478428DB020DBC36CDA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0AAA
Signing time: Fri 17 Apr 2026 05:01:09 +0000
Manifest this update: Fri 17 Apr 2026 05:01:09 +0000
Manifest next update: Sat 18 Apr 2026 05:01:09 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: ECRQ+qQ43iI6xnaDmkEq5hlIu5VJOI2ovBZ91+zqJbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:79:39:25:94:78:42:8d:b0:20:db:c3:6c:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Apr 17 05:01:09 2026 GMT
Not After : Apr 18 05:01:09 2026 GMT
Subject: CN=7eec9e60ac1a0478b518ed4d11be342353334351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:6e:77:b0:68:f0:8b:33:56:43:35:80:c5:
44:62:b7:53:04:ca:88:3a:40:d2:4f:64:c0:49:0d:
71:55:0c:80:dc:ab:f7:a5:d0:1c:56:0f:e4:4c:8d:
db:72:b3:ed:bb:d7:ef:ee:fe:3b:7d:41:38:15:36:
37:74:7e:4c:e6:e0:90:13:43:19:c3:7f:ab:a1:2d:
57:9d:04:8c:ab:a1:1f:f7:f5:0c:2c:67:c7:b9:14:
3c:f2:4e:38:e8:08:86:c0:25:d4:b9:e7:34:94:bb:
c9:de:bb:6a:78:ce:b6:c6:b0:ec:c4:14:9b:f2:ac:
05:87:4c:ea:bd:31:2f:5d:3e:f2:78:3a:cc:54:a4:
25:78:d9:a6:8b:63:8e:87:c6:6f:6e:82:ed:6e:7d:
a7:a0:d0:76:ce:a4:74:62:81:d1:61:bc:8d:44:57:
d3:d9:a8:79:75:bc:fb:79:ef:08:7b:a5:df:5f:f2:
cb:34:b5:7e:cf:e2:49:65:5e:f7:0d:b8:73:77:4b:
c9:9e:f5:1d:d1:d3:8c:fe:ad:87:ce:3b:62:57:de:
d8:f1:70:4f:a7:0e:f9:36:2c:ff:7e:d9:8f:9c:a9:
56:5a:26:9f:47:ce:1c:12:54:0d:9d:6f:93:ee:da:
37:83:38:4f:e3:c5:f9:44:1f:ab:38:e6:82:ba:d0:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:9E:60:AC:1A:04:78:B5:18:ED:4D:11:BE:34:23:53:33:43:51
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5e:bb:b0:37:2d:40:e5:52:88:3c:f3:31:3e:08:9b:5b:c6:
8d:ae:d3:7c:30:17:8d:a0:e4:b2:6b:1c:58:3f:de:c7:a0:a0:
d2:ec:37:55:9e:42:c5:aa:3a:11:76:2d:5d:73:a5:ee:36:77:
b3:b4:1a:e7:04:74:8b:f3:b8:5b:61:bb:56:fd:d9:2e:b6:e0:
05:aa:61:67:1a:b2:c0:f3:25:d8:d7:3d:7d:85:0d:9f:65:04:
90:cd:52:40:2d:d5:a3:89:75:6a:35:7f:aa:59:3d:cd:9b:a4:
ef:76:18:97:71:a3:1b:21:f0:c4:f7:a3:02:38:35:e9:65:59:
72:80:30:2f:5d:e8:eb:e1:5b:ba:7c:0e:37:f2:86:7d:7e:65:
b0:56:ec:6b:df:9e:4f:65:9a:d6:b3:59:4e:a7:dd:55:2d:88:
01:4b:bc:00:9e:19:b2:74:ec:f7:9a:f2:5a:ca:ab:ba:88:3b:
f7:d0:86:c9:3b:07:41:f4:24:b0:8c:8a:6c:d2:3f:75:ae:62:
13:63:e1:c5:77:70:a8:99:75:96:c7:cd:e7:3b:89:49:cf:36:
32:cb:80:16:4b:f1:cb:8b:ca:0b:63:c7:1c:46:00:df:46:98:
99:f3:8c:f0:4a:ab:6a:ee:33:2e:ed:1b:f7:0f:3e:f7:a3:b6:
77:c8:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:17 2026 by rpki-client