Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: yG4SCfoaCmtp3UtzNqWZgZA+2gJVgcaT8yFi/P3TQPU=
Subject key identifier: B8:27:88:D4:C8:F6:02:6C:BC:AE:05:F7:7C:6A:96:96:64:DD:AC:41
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 019FAAF59DBC75DE0753839F978F5784AC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 18F1
Signing time: Tue 28 Jul 2026 23:00:51 +0000
Manifest this update: Tue 28 Jul 2026 23:00:51 +0000
Manifest next update: Wed 29 Jul 2026 23:00:51 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: jFbfPi3WItnjC20c2XxXkPBKFYNMAs0LvJiNzyh005A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:9d:bc:75:de:07:53:83:9f:97:8f:57:84:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Jul 28 23:00:51 2026 GMT
Not After : Jul 29 23:00:51 2026 GMT
Subject: CN=b82788d4c8f6026cbcae05f77c6a969664ddac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:2f:58:a6:e4:9a:70:e8:b3:df:70:ad:a0:
0e:bd:0c:e8:cc:d7:38:55:e9:cc:d4:38:6d:7e:44:
c5:bf:b9:12:20:13:c1:d8:74:37:78:b1:f6:d6:f6:
bc:72:db:2d:5d:86:62:29:82:9b:ef:9f:66:1d:f4:
0d:31:10:31:5c:51:e6:c6:ff:1b:e0:1b:79:be:b7:
25:7e:92:a1:3a:0a:b7:ec:c5:f1:f1:4d:b7:45:83:
4a:6a:35:8f:a0:ec:15:72:4f:86:88:c8:86:2b:01:
b9:16:23:ea:37:e2:51:53:cc:56:6a:eb:be:07:fb:
4d:94:f5:3d:f0:92:bb:dd:c6:2e:e1:52:56:71:7f:
3f:89:03:05:72:32:bf:2a:f0:c9:34:56:5a:68:54:
ef:e9:14:7b:27:d7:88:41:72:5f:66:98:3c:d7:44:
73:59:44:50:e1:4b:eb:14:a5:73:28:d4:db:4a:26:
21:c6:48:d6:af:ec:d1:98:36:bd:18:35:e1:b9:09:
19:07:73:73:3e:56:84:52:9e:19:31:85:32:b7:3b:
4f:a9:25:8f:1c:96:22:41:4e:5f:ae:5b:48:30:9b:
cb:72:1c:07:ae:f1:03:a4:50:7c:8a:5c:14:7d:d4:
e4:a3:f3:c8:a4:ba:2e:91:9d:18:22:b3:dc:fa:38:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:88:D4:C8:F6:02:6C:BC:AE:05:F7:7C:6A:96:96:64:DD:AC:41
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e1:78:37:e6:91:be:1d:eb:c8:f7:3a:d5:d2:96:7a:3b:cf:
1d:3e:39:f0:91:95:e1:7a:87:ae:11:2c:d4:1b:3d:2a:b4:d5:
3d:a9:e3:b1:96:6c:40:2d:68:57:2e:0a:58:d2:e3:fd:88:25:
4d:96:22:5d:6b:d9:ca:8a:4c:44:cb:c7:e6:5a:39:53:8e:b7:
58:30:4b:6d:5b:a2:3c:0f:f4:e7:7e:f4:c0:64:0f:b4:87:20:
a9:c6:95:8f:ac:a7:56:ef:4b:e4:d6:5f:38:2f:bc:fe:19:f0:
4d:2b:fb:96:5f:28:da:19:b4:5d:68:0a:9b:fa:8d:39:0d:ee:
2b:a9:b5:b0:e2:7a:aa:7c:04:15:d3:01:09:33:d1:5a:b3:2b:
98:76:b6:ac:09:1d:c4:93:d6:89:26:cd:56:e1:5d:1f:db:93:
04:6e:08:f7:dd:44:f8:cc:20:98:32:c9:f6:74:b0:19:cd:58:
9a:0e:c0:2c:98:c1:b9:9a:e5:ee:88:a6:ce:3b:6f:ee:0e:da:
5c:ca:20:20:d1:f5:6e:ae:c2:f7:73:d7:32:87:d7:bc:99:ef:
c8:a0:60:9e:0c:10:d4:80:cf:0a:b1:61:21:65:b8:c9:85:c6:
34:d6:c8:93:69:66:e2:ce:9d:db:c7:b3:df:4d:b6:26:f3:24:
50:da:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:49 2026 by rpki-client