Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: Fd5mOY7busFh0Ib+c5YnYST7q6ywE3yCJur+xvC0/6k=
Subject key identifier: 8D:D3:30:E9:D7:F2:04:52:55:D5:68:7F:BE:8A:BB:A0:00:10:BD:B2
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 019D9AE39015D0E04E128A1E7E45E12CE263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 10:01:37 +0000
Manifest this update: Fri 17 Apr 2026 10:01:37 +0000
Manifest next update: Sat 18 Apr 2026 10:01:37 +0000
Files and hashes: 1: XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa (hash: 30n2Bw5522A46gw1W2HezcGrkjx97JHsFkbK0N2tgYE=)
2: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: NYkeygb/qMm3zmBpuXhKcIYj+pGF6rlrxn9TmesLEOk=)
3: mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa (hash: sr/dXfSSlPIqMnWe8S1qR8pWu+O2s9TKt2RJh6kkvX4=)
4: tfHdDRVXG7intRn8ynqb-cwa37E.roa (hash: C4IgEy8F2zxJrndcjUMLwRBcCn03RIvDFs2z8wsXHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:90:15:d0:e0:4e:12:8a:1e:7e:45:e1:2c:e2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Apr 17 10:01:37 2026 GMT
Not After : Apr 18 10:01:37 2026 GMT
Subject: CN=8dd330e9d7f2045255d5687fbe8abba00010bdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:b5:d7:92:64:c0:77:54:78:d6:a6:66:10:
5f:43:30:a6:8c:f1:21:de:73:df:d0:61:e2:90:a0:
77:79:cc:1b:55:1e:04:aa:29:23:f5:fa:13:a4:fe:
a6:19:da:59:88:55:45:29:a9:96:25:94:93:e1:39:
b3:91:f0:0d:4b:09:cc:70:44:2e:ff:28:dc:11:8d:
15:1d:ad:90:da:0c:a5:9f:af:a7:00:69:81:ee:7e:
13:33:5f:ed:b8:d1:a6:e3:54:7d:f3:f8:8a:63:92:
5c:58:a2:ea:9e:1c:67:f9:ed:e5:2d:ff:55:06:10:
1c:3d:ff:db:68:2b:63:b0:51:c7:3e:e7:14:18:b8:
2b:1c:76:0b:d1:63:f7:5a:3a:d5:ea:1f:4b:c9:9b:
5d:26:a9:40:4b:9d:78:c3:0e:ea:1f:3b:fc:e8:44:
4f:5d:40:cf:aa:c9:c4:1c:48:8d:d9:35:99:90:16:
98:f6:7d:29:f0:a7:05:b5:47:2f:05:ab:6f:f5:1e:
bd:50:ae:27:f0:01:d2:25:7b:f5:2e:9b:dd:e2:05:
d8:96:76:2d:65:c7:82:5e:c5:0f:62:dd:cb:25:91:
45:13:07:ef:44:3c:e0:17:ee:8b:89:ec:08:24:86:
24:0b:85:aa:6f:43:e5:91:f9:fa:e1:63:c5:e8:50:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:30:E9:D7:F2:04:52:55:D5:68:7F:BE:8A:BB:A0:00:10:BD:B2
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ea:a1:0e:49:5b:31:b3:37:70:88:6c:48:af:da:6c:56:3a:
19:4a:37:ac:f0:d9:df:85:86:77:b1:a8:9a:a2:a5:3b:29:e9:
62:a5:2d:33:d3:7e:c5:fd:40:5b:fa:f4:4a:57:8c:63:10:98:
f8:e2:43:47:ac:e9:3b:c3:52:c6:00:f6:60:3f:71:3b:1d:c0:
9b:40:cc:58:92:8d:d5:bc:fe:e9:65:1b:3e:c3:45:ae:6f:c8:
e3:3d:c2:ef:a3:72:06:13:2e:ba:3c:83:7b:83:66:d4:05:83:
3c:50:21:a1:ea:78:4b:7f:4d:ce:51:6f:0f:e7:1f:44:c7:6d:
ff:3b:83:dc:d1:aa:04:23:7d:fe:b0:07:6a:0f:57:50:c4:44:
92:b2:c6:69:ab:90:43:1b:e3:17:37:70:4e:25:d2:28:19:fd:
d5:90:51:24:cd:a4:95:9e:67:28:5a:5f:24:9c:53:92:20:4a:
26:89:0a:4f:fb:29:41:52:a7:a8:9f:3d:91:60:6f:ca:66:de:
b4:7b:79:6d:f2:db:0a:5d:dd:7d:a5:9e:a8:2c:0a:d7:34:b7:
7b:ba:34:cd:aa:97:96:81:2e:44:53:64:51:b5:1b:a2:43:90:
e2:ee:44:57:20:22:fe:74:66:24:20:e5:2f:99:da:74:7b:59:
19:56:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:41 2026 by rpki-client