Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: 7dIyKwhCHPR8OAF6VbPYqm84vtQ0kGQ2VmPo8kjZ3pI=
Subject key identifier: F9:03:49:9A:0C:0B:F0:A7:CF:80:11:D7:99:4A:0A:9A:BD:18:71:ED
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 019CAA58B2DC2D215E049D20CB98766C139E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0A2E
Signing time: Sun 01 Mar 2026 17:01:05 +0000
Manifest this update: Sun 01 Mar 2026 17:01:05 +0000
Manifest next update: Mon 02 Mar 2026 17:01:05 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: FlI03fQKSBYcsiHZsbfnKp2A1u2AY3JzRh+Xxo0DpAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b2:dc:2d:21:5e:04:9d:20:cb:98:76:6c:13:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Mar 1 17:01:05 2026 GMT
Not After : Mar 2 17:01:05 2026 GMT
Subject: CN=f903499a0c0bf0a7cf8011d7994a0a9abd1871ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:6b:8c:61:8f:ba:aa:50:97:44:a3:ff:55:
42:8b:0a:63:d7:ce:b9:5d:23:e4:58:60:d2:1e:b6:
44:d0:40:82:40:13:c2:78:27:dd:51:3a:8d:83:67:
33:bd:81:e9:21:19:13:44:ce:d0:d2:ee:19:d8:4a:
f9:29:3d:cc:31:3b:2e:c1:37:56:28:53:84:e1:4d:
b3:7e:ae:8e:30:76:76:5c:21:14:7c:fe:db:6e:24:
c9:b1:aa:e1:eb:0c:16:35:ab:2c:29:36:0e:a1:88:
87:af:aa:57:92:6d:55:a8:26:7a:0d:72:5c:d1:95:
09:8f:fe:6d:5d:98:d2:6f:bc:48:42:b4:6d:f3:89:
40:0e:e0:e3:7f:13:13:41:00:83:29:be:f3:b6:43:
26:04:bd:ef:03:73:fd:07:5e:cb:98:0a:96:47:73:
8a:35:ec:f7:96:93:84:84:78:9f:a5:a4:b0:3c:8c:
95:c7:ed:68:8f:75:9b:ef:4c:33:49:b9:93:cb:b4:
ab:c4:45:37:9f:0a:74:b1:9e:f0:91:ab:b1:c4:21:
9f:0e:2a:99:c3:10:ed:9d:3a:a3:18:e5:cf:f8:29:
46:ef:cf:fc:3a:5c:7b:fe:1c:1e:c4:87:ed:b8:7c:
06:a0:27:31:52:63:23:61:49:80:e3:35:b3:d2:e6:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:49:9A:0C:0B:F0:A7:CF:80:11:D7:99:4A:0A:9A:BD:18:71:ED
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:71:69:3a:0c:8c:cd:8a:b8:0d:af:06:db:51:9e:a1:50:
e1:4e:16:d3:e6:7e:d7:fe:b8:ec:de:4e:5e:d1:a2:02:5d:99:
91:a2:e0:05:ff:55:e4:87:40:a4:53:d0:be:c2:8f:c8:8e:4a:
0d:3e:f4:7b:ab:95:2a:c8:fe:f1:69:6b:75:8b:36:e7:f2:33:
68:f9:e1:b2:d3:1f:5e:8d:29:84:79:1c:5a:d2:4a:7e:bd:fb:
a8:7b:1e:24:c7:89:99:e5:40:0c:72:12:21:c5:9d:f0:84:a4:
f8:0e:32:51:cf:5e:87:55:df:88:b7:4e:8b:a2:a5:b7:98:0e:
95:a0:8a:b3:0f:1d:d6:e3:c6:c8:c5:87:6e:81:3d:94:20:ce:
9a:a9:75:21:7c:72:42:9e:88:00:3c:83:fc:2a:ca:c7:5f:09:
2c:3a:45:7e:95:98:fd:0d:47:e4:50:ff:00:5a:c8:d4:4d:19:
83:69:11:c0:b5:ce:1c:3c:41:bd:6e:7e:ef:6e:87:46:f8:90:
6a:0a:b4:c2:e6:91:46:01:c1:94:44:3f:7e:f7:46:94:89:13:
67:cb:07:53:5a:05:92:b8:f9:4f:52:65:36:71:8d:7d:c1:24:
17:4d:21:2e:80:5e:a7:41:a4:a2:29:81:44:3b:2f:46:c8:dc:
a1:2b:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:12 2026 by rpki-client