Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: Q3dYKZYxQ7FRXH+qPMWte4N+9ugDPBgTJ9Hi3JwrDDM=
Subject key identifier: B8:4B:D7:25:B5:0E:55:A6:89:E4:F7:9D:F2:86:A2:66:16:CD:4A:D4
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 019FAA8888EDDC12A1B4FB4DEA723C92B33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0C1E
Signing time: Tue 28 Jul 2026 21:01:42 +0000
Manifest this update: Tue 28 Jul 2026 21:01:42 +0000
Manifest next update: Wed 29 Jul 2026 21:01:42 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: ShcQxta3rwQPTSlx5KK5cb3YAKPaZiyzTGCsxvbL+Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:88:ed:dc:12:a1:b4:fb:4d:ea:72:3c:92:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Jul 28 21:01:42 2026 GMT
Not After : Jul 29 21:01:42 2026 GMT
Subject: CN=b84bd725b50e55a689e4f79df286a26616cd4ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:74:56:1d:e6:5c:bb:76:25:74:00:a3:81:
4a:a2:79:9c:d4:40:8d:6f:2b:69:8a:e1:bb:73:ac:
21:ae:98:25:4c:e7:89:64:2b:03:dc:e5:ea:aa:58:
b0:67:61:3f:99:16:b6:d0:b5:c2:84:4a:3f:42:5e:
26:62:8d:be:cc:07:26:36:cd:da:77:6f:a7:4e:2f:
4e:3c:2d:5b:e4:fa:a6:f6:0a:32:cc:38:c4:9e:c2:
71:1d:30:65:48:96:45:9d:8e:ff:82:d5:eb:1c:81:
e8:36:0e:8a:eb:5b:81:04:87:4e:1d:69:d7:f7:2c:
e9:1e:db:35:44:b9:17:0a:5b:b1:c3:ab:1f:04:4c:
26:9c:f4:34:40:9a:a2:ba:35:05:ec:41:07:b1:90:
e8:78:df:ce:ad:f5:a9:ed:72:74:e4:4e:25:13:6f:
af:70:15:86:22:13:ad:fe:44:46:35:a7:ed:0e:86:
de:ca:73:23:56:5f:1b:fe:62:97:a7:68:dd:11:c0:
16:95:37:87:d6:45:3a:d7:b1:be:bc:fe:8b:dd:f5:
96:fd:8a:64:2c:d5:1e:d9:9d:5b:00:07:e8:b5:e1:
19:97:02:ce:94:86:e6:63:c8:47:ed:4d:1d:a8:e2:
fb:a2:0b:c4:b2:4f:7f:fa:a0:a3:fc:96:37:3f:83:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:D7:25:B5:0E:55:A6:89:E4:F7:9D:F2:86:A2:66:16:CD:4A:D4
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:11:79:a9:a5:74:d0:02:c4:fe:a3:6e:93:ba:8d:61:68:
cb:bd:b2:41:f2:fa:a3:da:e1:4f:f9:8d:79:36:b6:e5:c6:70:
78:5e:0f:8c:15:5b:10:52:1f:6e:c0:35:38:16:9e:fa:28:84:
39:30:80:6b:15:25:13:1c:4a:e4:47:1c:b3:d1:54:4d:30:a3:
ad:78:09:29:81:04:22:cf:9d:67:5c:0b:9a:24:c8:8d:7f:da:
9f:df:47:31:d8:79:d6:51:b1:c3:b0:cd:cc:34:aa:40:f8:46:
67:33:e3:7e:15:b1:88:42:65:43:a4:2d:a9:a7:74:d7:70:d0:
ae:e5:3c:dd:a9:fe:cd:29:2d:e9:27:8a:8b:d7:57:c6:f7:20:
14:1f:60:25:e1:0a:f4:70:48:2c:b3:62:74:17:a8:ca:bb:c8:
31:d0:1f:a3:b6:93:ad:6b:a5:d7:4c:ac:63:88:80:75:8e:da:
ff:81:d8:4a:92:65:5a:e2:da:4a:93:1f:e8:db:08:fa:e8:f2:
7b:66:4a:35:66:3d:16:de:02:e7:e8:1a:fe:1c:8c:75:31:dd:
66:70:c1:29:3f:4d:c3:dc:71:fb:b2:fc:30:18:3e:5a:95:19:
a7:12:48:52:bd:4f:93:02:ec:47:73:57:f5:7d:2e:fc:a3:ea:
65:a1:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:50 2026 by rpki-client