
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier: QGxlV78bq106KdqBOn19mrSj2320VP6PH459JyEQ+UU=
Subject key identifier: B3:92:FD:64:F6:67:6F:E4:D3:E0:B9:49:F0:A9:92:0D:E1:8D:AC:E2
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019EBFFEF4CA3AB168483B3F59B70CD86568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number: 1969
Signing time: Sat 13 Jun 2026 08:00:17 +0000
Manifest this update: Sat 13 Jun 2026 08:00:17 +0000
Manifest next update: Sun 14 Jun 2026 08:00:17 +0000
Files and hashes: 1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=)
3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
6: 5qh2tODDhtwENDRfaT7pfg4gTVY.roa (hash: nwGFbxvUeZsX9HZPbhOrGCLXNcXayzcMWJpsTsh4e20=)
7: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
8: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: rnP/CF527yLmKyODb07VYsl6Ksxjz++BWxIossL+rhQ=)
9: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
10: EcVCYTCFbfuctisOnGpTpzze87E.roa (hash: AvUy4CNenHZ3+B409HhzJ1fMxMdjTbDHUphzokd1e30=)
11: HdGHnGCkN60BBCoXO82KCD8KQP8.roa (hash: z19vVo7hZRhugrpovSRveacrmaNy4ZTI7h7Sd6ab6rY=)
12: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
13: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
14: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
15: jHRwpwBbX-lEZAQUaNVhGoh4-38.roa (hash: 1wDI2XXXth808yD9Qxe5ic1fW+GBw0yvicdO69uEWKs=)
16: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
17: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
18: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
19: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
20: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
21: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
22: vYkoROpPCpTSAMpNJRxV38Xmb-0.roa (hash: IjyyO7EqFV9D2XeO1B6G5digiIuYSGK9sOSKLCrfBvA=)
23: vqM1TGLYbSuutfsH5sUFzk_Op_Y.roa (hash: JH4Y1aePxRVSkXzwEy2asQC4OWTRrATFM4PfgjHMeRk=)
24: xKPCZLn5NBwKOnGfN6Jfm7bqVhI.roa (hash: MULPMSCgu1soomGcBhyo6KncDRQ60sADMNncZpDFSk0=)
25: xikanlTZ0v14vJNsgTM-bs_TrVo.roa (hash: k8yL0zUwcHmo1s0l7jrHP/AK6MnJoFmCKEGJzsiquWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f4:ca:3a:b1:68:48:3b:3f:59:b7:0c:d8:65:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 13 08:00:17 2026 GMT
Not After : Jun 14 08:00:17 2026 GMT
Subject: CN=b392fd64f6676fe4d3e0b949f0a9920de18dace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:4b:99:8a:74:56:73:a1:e3:99:33:aa:7e:
a5:9f:4c:ee:2e:d0:81:8e:7b:15:62:23:a4:8a:72:
d3:0b:e6:76:5a:c5:07:0e:9f:37:98:f5:a3:bb:03:
1d:49:f3:a0:08:9b:46:2a:09:28:75:80:c9:87:a2:
2d:4d:30:38:80:20:de:f3:df:95:bf:eb:04:9a:98:
66:5d:df:38:14:0a:f8:cd:04:b9:f3:3d:5b:f8:39:
2f:fc:98:0a:3a:40:de:da:9a:e7:86:5a:0d:b1:70:
62:1c:4f:b4:fa:c1:21:4a:32:9b:9d:78:26:e5:84:
31:8d:62:f6:46:03:e3:a1:83:a8:26:dd:81:ac:03:
a2:3c:52:2a:97:71:da:bb:4c:80:99:ba:01:30:53:
71:d1:9e:74:ac:fc:f6:1e:93:25:c5:3c:52:95:cf:
b2:d2:02:60:8c:54:04:d5:72:1d:49:fd:da:4d:64:
fe:5d:61:3d:d5:30:23:3a:31:14:48:84:28:41:89:
c1:55:e4:1b:34:2c:81:c5:15:6b:c0:43:33:54:bc:
3e:7b:44:9d:db:56:c3:ef:0c:a7:e1:88:e1:21:b1:
e7:43:61:bb:1d:88:14:d1:aa:e1:69:92:dd:cc:39:
66:a5:ee:cc:69:d7:4f:c5:28:f5:e6:89:6f:e2:65:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:FD:64:F6:67:6F:E4:D3:E0:B9:49:F0:A9:92:0D:E1:8D:AC:E2
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:45:a0:d0:14:d0:0c:f9:73:f7:84:12:66:ab:02:4c:8f:99:
f9:b3:be:24:15:c1:76:ca:5d:97:6f:36:68:29:97:87:33:2b:
1b:f7:83:e3:42:3a:a3:52:33:ea:94:06:07:da:61:3a:b9:14:
c7:c7:10:7d:5d:ab:52:da:4d:f8:36:ac:63:5f:40:9f:f1:e2:
06:30:e6:a4:14:f8:1c:74:b3:c0:91:ee:e0:0f:d9:87:e0:a0:
48:55:35:ce:5d:bd:62:08:25:20:c9:17:a2:0f:d4:ca:47:12:
c7:cc:c5:25:57:6d:20:a0:8b:89:04:d6:f9:1e:b8:60:a9:cc:
1b:3b:98:31:ce:6e:1c:0e:df:cd:2f:20:41:88:bd:b2:02:58:
ad:9f:d5:51:d4:3e:5e:3b:7a:19:5c:42:4a:93:0a:c4:c5:8f:
3e:ed:15:8a:55:39:59:8a:f5:e5:bf:38:3d:c9:32:f2:9a:0a:
cd:2d:7d:92:00:21:6e:92:df:44:80:dd:6e:f0:76:b7:8e:7f:
e0:4b:6c:ad:18:8b:0b:09:6c:a5:15:5f:75:95:f6:53:96:61:
bc:2f:3e:0f:06:5e:c4:ab:1f:77:7d:05:bb:ea:55:e1:9e:3b:
1d:73:04:d9:93:9b:2c:fb:d1:b2:6f:4a:43:4d:8c:d0:9b:b2:
1e:65:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:33 2026 by rpki-client