Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: zfNSqUZQMX8trh4DHSFYookV7sMZq38vSqdmQKjFGJs=
Subject key identifier: 60:41:EC:71:F9:3F:01:DB:87:DE:0A:61:D9:E1:63:24:85:09:AB:7F
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 019EBF5B3D3106D5FDC840A714F9FBAE7756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 1877
Signing time: Sat 13 Jun 2026 05:01:27 +0000
Manifest this update: Sat 13 Jun 2026 05:01:27 +0000
Manifest next update: Sun 14 Jun 2026 05:01:27 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: P2mIQXm6IMHaPBcCZg1yTpkQIR4/009Z9CFsudPeBvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:3d:31:06:d5:fd:c8:40:a7:14:f9:fb:ae:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Jun 13 05:01:27 2026 GMT
Not After : Jun 14 05:01:27 2026 GMT
Subject: CN=6041ec71f93f01db87de0a61d9e163248509ab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:29:4e:65:59:cc:79:be:4a:6a:58:14:b5:
fa:8b:58:6d:b5:8f:be:5f:1a:8c:44:70:ab:05:64:
c3:91:19:d7:94:91:01:d3:71:47:9a:cd:07:c0:4b:
0c:c6:2e:29:4a:43:4c:ae:74:62:9e:18:ad:a4:5f:
bb:ee:40:fd:a0:af:1e:86:39:ac:a3:1b:0a:60:f3:
a9:bb:75:48:f6:23:a5:2f:91:ac:58:06:64:46:3c:
c3:5d:5f:a8:04:cd:44:8a:9e:4a:c1:df:8a:7b:ae:
fa:77:79:99:91:0c:37:3b:84:c2:a1:05:d3:bd:cb:
e8:18:1c:9e:25:fe:cc:dc:75:ff:6c:fb:a2:d1:90:
56:70:80:8d:35:83:c5:b8:51:13:c1:4e:67:c4:72:
9a:10:de:f5:b1:b2:fe:5b:e0:fc:1c:3d:15:56:3e:
d3:0f:95:ba:75:b2:d5:36:74:f6:3b:76:4d:8d:16:
bb:c9:30:27:c3:c4:0a:b1:23:ee:57:1e:74:63:0f:
82:6f:d6:a0:ef:d8:86:50:b9:69:7a:48:99:7d:01:
d2:4f:e4:3d:42:5c:de:21:35:36:a0:71:5f:a0:2b:
1a:a3:50:1e:bf:54:cc:f7:59:1f:a9:c6:16:18:e7:
5c:c8:b2:bd:e6:25:ed:a1:17:e2:47:e0:22:20:93:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:EC:71:F9:3F:01:DB:87:DE:0A:61:D9:E1:63:24:85:09:AB:7F
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:dd:16:e9:1e:42:19:1f:c7:f4:89:08:c9:5b:0a:87:4e:
a5:fa:bc:27:68:d2:81:58:f5:e2:85:b1:fd:d3:d3:cc:01:23:
52:41:92:70:29:d9:b0:f1:80:ec:c4:d8:b7:ab:1c:9c:ce:92:
9b:1a:6a:53:9d:b8:4a:e3:d6:8c:ae:33:31:18:d5:9e:d6:d1:
14:7f:d6:c5:f6:ae:6c:55:c9:57:a5:cb:7f:ea:c5:46:40:2e:
87:a4:29:bf:df:ec:35:7c:02:a1:bb:fa:06:6b:2a:3a:77:77:
1b:9a:18:eb:2d:90:c0:bb:8a:bb:74:9f:91:05:a6:58:0a:72:
b1:67:06:2d:5e:e8:f4:38:79:41:cf:0f:b9:4d:be:db:f4:bf:
f8:55:5e:48:b8:e3:0c:30:33:9d:63:4b:e5:ce:f8:c1:8b:bb:
84:bd:3e:cf:47:dd:35:7b:83:a1:d7:c9:16:07:8c:53:cc:70:
9e:c8:a1:87:f7:35:64:38:8e:71:f8:3c:e0:c6:39:4b:2b:8c:
17:5b:a3:40:b8:a5:93:f4:3b:54:ee:28:89:be:74:54:5b:00:
da:ee:64:83:f5:56:64:6f:3a:9a:72:6d:2c:bf:4a:91:70:25:
3b:68:86:42:25:03:9d:a7:f1:78:72:4b:d8:0a:5d:6c:12:4d:
6a:f7:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:32 2026 by rpki-client