Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: sc6diGbgQc9Ke83Fj6Ah9NkV+raeI9cKJ57nSHXh+lU=
Subject key identifier: 61:F1:2F:B3:11:04:CB:73:86:E8:6A:2C:92:96:56:14:25:23:0F:F5
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 019D97E1BB30B6AE2BC313B573F007D42FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 17DE
Signing time: Thu 16 Apr 2026 20:00:46 +0000
Manifest this update: Thu 16 Apr 2026 20:00:46 +0000
Manifest next update: Fri 17 Apr 2026 20:00:46 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: yjFT6iwgTiQBUXRwTUIjSmHjNrvtQd3iZnJ4DSKBZ9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:bb:30:b6:ae:2b:c3:13:b5:73:f0:07:d4:2f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Apr 16 20:00:46 2026 GMT
Not After : Apr 17 20:00:46 2026 GMT
Subject: CN=61f12fb31104cb7386e86a2c9296561425230ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:da:1c:68:38:2a:79:de:be:0c:40:02:a2:
d9:14:2d:d3:e8:04:c0:8f:6a:c2:bc:0d:71:58:b0:
89:ff:e7:ba:31:17:19:df:06:4e:bd:56:66:60:71:
9f:76:14:81:56:e2:a7:a2:63:15:b5:fb:6a:a9:78:
47:66:f8:f7:8d:64:d3:c0:22:7b:35:6a:d4:7f:db:
97:e8:c7:ee:4c:0d:47:52:62:e8:df:6e:db:6d:fb:
50:cc:bd:fb:d7:c3:2a:a3:a5:3d:e6:7a:da:45:40:
97:df:d5:55:e5:e9:00:13:b3:91:bd:ca:3d:2c:98:
65:27:a2:61:97:d0:32:d9:37:23:eb:d5:37:b0:90:
ea:59:c3:83:a4:be:ad:35:68:a5:2c:96:eb:ed:47:
f2:83:92:ba:af:da:90:22:f3:70:1c:49:5e:e6:6f:
37:c2:d0:a4:bb:8e:c4:5c:a6:c9:12:7e:77:a1:ab:
70:ce:78:b6:f0:ac:8a:f3:3d:f7:4d:11:07:a0:2f:
cb:a9:46:f2:82:d9:49:97:49:55:1c:f5:ed:2b:b0:
83:62:7e:5a:b6:fd:31:3a:00:60:46:4b:72:e1:4c:
47:38:d2:f4:d7:c7:05:9b:8d:f8:5e:8d:0f:f5:e8:
37:86:84:86:73:18:1b:33:38:6c:5e:b5:ab:0d:6a:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:2F:B3:11:04:CB:73:86:E8:6A:2C:92:96:56:14:25:23:0F:F5
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:94:ad:a5:9b:7f:5e:91:e4:37:5e:ea:01:4a:26:18:97:
40:3c:e6:fa:15:97:9c:e2:f9:fb:e2:23:48:1d:de:d7:32:ae:
66:73:23:f2:42:53:f9:0b:71:05:d2:0d:7c:16:09:fe:66:1a:
e3:ce:cd:3e:b5:6e:5f:2c:56:4b:d6:19:30:03:a6:b0:5f:8d:
b7:94:47:65:07:6e:4a:6c:d6:0a:d4:e2:f2:b1:1c:77:3d:3b:
66:c3:dc:9e:51:a1:84:3f:3a:94:b5:c1:d0:d6:df:b3:bb:38:
98:b9:75:86:a1:ed:8d:a2:8c:eb:2f:51:fb:17:a2:b5:a1:d8:
ff:d2:80:66:53:78:d5:19:23:65:ca:46:55:70:14:09:f4:42:
85:e2:36:38:d3:94:7e:09:6f:ed:5d:7d:82:48:e0:ee:20:73:
35:ea:a8:62:41:49:3f:74:c2:95:42:b4:0b:d8:ce:72:36:cf:
bc:8a:5e:70:ab:dc:f6:6f:89:20:fd:f2:a5:35:67:b5:e6:fe:
fd:75:6e:ea:2c:3a:48:aa:01:46:f9:00:89:05:d2:9a:4a:35:
46:57:28:ab:08:1f:f1:71:01:54:ab:63:e1:5e:31:4a:eb:e9:
cc:ef:d1:c8:7f:3f:3d:57:9e:1b:4e:3e:fd:1f:49:41:fb:02:
01:70:77:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4bswtq4rwxO1c/AH1C+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjU5YWVkYzI4Mjk2ZTI5MTcyNGY3OTM3ZGU3ODhlMjcy
MTY0MDgwHhcNMjYwNDE2MjAwMDQ2WhcNMjYwNDE3MjAwMDQ2WjAzMTEwLwYDVQQD
Eyg2MWYxMmZiMzExMDRjYjczODZlODZhMmM5Mjk2NTYxNDI1MjMwZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3PaHGg4KnnevgxAAqLZFC3T6ATA
j2rCvA1xWLCJ/+e6MRcZ3wZOvVZmYHGfdhSBVuKnomMVtftqqXhHZvj3jWTTwCJ7
NWrUf9uX6MfuTA1HUmLo327bbftQzL3718Mqo6U95nraRUCX39VV5ekAE7ORvco9
LJhlJ6Jhl9Ay2Tcj69U3sJDqWcODpL6tNWilLJbr7Ufyg5K6r9qQIvNwHEle5m83
wtCku47EXKbJEn53oatwzni28KyK8z33TREHoC/LqUbygtlJl0lVHPXtK7CDYn5a
tv0xOgBgRkty4UxHONL018cFm434Xo0P9eg3hoSGcxgbMzhsXrWrDWqXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHxL7MRBMtzhuhqLJKWVhQlIw/1MB8GA1UdIwQY
MBaAFAX1mu3CgpbikXJPeTfeeI4nIWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2Mt
ZDY0MzY4MjA4MTMxLzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2MtZDY0MzY4MjA4MTMx
LzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGj6UraWb
f16R5Dde6gFKJhiXQDzm+hWXnOL5++IjSB3e1zKuZnMj8kJT+QtxBdINfBYJ/mYa
487NPrVuXyxWS9YZMAOmsF+Nt5RHZQduSmzWCtTi8rEcdz07ZsPcnlGhhD86lLXB
0Nbfs7s4mLl1hqHtjaKM6y9R+xeitaHY/9KAZlN41RkjZcpGVXAUCfRCheI2ONOU
fglv7V19gkjg7iBzNeqoYkFJP3TClUK0C9jOcjbPvIpecKvc9m+JIP3ypTVnteb+
/XVu6iw6SKoBRvkAiQXSmko1Rlcoqwgf8XEBVKtj4V4xSuvpzO/RyH8/PVeeG04+
/R9JQfsCAXB3qQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:09 2026 by rpki-client