Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: 0a0bzTBMLYgb7JynSwFAKnH1H+ZSl0mlZd0LZ68du6g=
Subject key identifier: CF:B1:01:45:41:3D:F9:F1:3E:4F:FA:83:39:79:85:F0:37:F1:01:08
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 019CAA590A2EFB601AAC4DB48C4673C802ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 1763
Signing time: Sun 01 Mar 2026 17:01:27 +0000
Manifest this update: Sun 01 Mar 2026 17:01:27 +0000
Manifest next update: Mon 02 Mar 2026 17:01:27 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: raplSmV5sTHK8TtPN5yNF96broCOps+jDzaWlH33+60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0a:2e:fb:60:1a:ac:4d:b4:8c:46:73:c8:02:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Mar 1 17:01:27 2026 GMT
Not After : Mar 2 17:01:27 2026 GMT
Subject: CN=cfb10145413df9f13e4ffa83397985f037f10108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:59:59:4e:e7:7f:02:1d:9b:ba:49:2f:0e:
f0:8a:93:2a:9c:3b:44:f0:ac:c6:27:3a:d4:da:f4:
1c:33:7f:03:f4:51:10:2d:d3:27:3d:7d:b9:07:33:
10:79:58:1c:9f:1d:f1:da:87:d7:bd:b7:6f:38:77:
54:19:76:04:19:9d:4e:ae:87:cf:9f:3e:9d:bf:9b:
7f:b0:f1:a9:85:28:21:4b:0e:0b:b4:13:fd:28:6d:
fa:da:d0:91:20:07:38:92:a6:fa:53:fb:c2:d0:8a:
1e:60:b6:1c:82:59:c6:a2:3e:e7:fb:43:5e:15:2f:
8c:9d:9b:db:2d:59:cd:28:90:a5:6f:8d:72:af:c6:
58:9e:6a:0a:08:aa:2f:6a:b9:f2:0a:bb:4e:7a:7e:
6e:0e:22:b6:9f:13:c5:9b:1d:e6:65:41:94:eb:55:
d8:22:e7:0f:55:6e:58:54:26:9c:c1:72:d1:9d:81:
1d:65:42:c7:92:23:b9:4c:45:ad:07:2c:6a:4c:13:
b6:a7:76:cc:49:8e:ed:b3:5d:2c:49:43:f6:b8:dc:
90:c4:97:82:56:e1:c8:89:d2:6f:b9:91:4a:f0:c7:
b1:f3:22:a3:db:d3:72:60:f2:79:42:b2:60:bd:89:
f4:26:57:69:4d:62:43:36:d7:36:5f:9d:cd:69:73:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B1:01:45:41:3D:F9:F1:3E:4F:FA:83:39:79:85:F0:37:F1:01:08
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e1:94:9b:c5:e0:e4:36:31:04:39:19:7b:d9:45:d3:62:ad:
19:4d:ae:02:67:ff:38:10:4d:a0:35:ae:b0:7c:47:8e:ba:2d:
84:ce:f3:65:77:4a:42:10:bc:cc:f6:23:0c:3c:2b:1c:28:2a:
89:76:42:d0:2f:3c:50:8e:4d:00:f4:a1:a1:e3:f6:34:93:d6:
a8:4c:48:e9:42:25:ee:41:4e:69:e0:45:8d:41:ab:b6:1a:d6:
bb:3f:98:b6:1a:9b:8e:ea:06:b7:cc:b2:ef:71:57:03:47:4c:
e8:0a:cd:60:90:e5:2e:2e:3a:bf:fd:98:12:31:e4:89:d2:9a:
ff:25:07:d8:8f:68:6f:05:0d:43:d9:d2:6e:5f:62:d9:5b:85:
f0:5a:f8:c4:46:92:14:e0:d5:4e:2d:f4:96:23:93:ea:dc:d3:
02:85:bc:bf:1b:aa:fb:fb:75:c4:8b:21:23:a3:73:8b:e9:5b:
50:26:c9:87:6d:d8:18:44:04:29:5c:07:96:87:de:37:f5:bf:
f9:55:0b:61:bc:1e:e9:d4:11:44:31:1f:c9:74:0e:6e:9f:9f:
eb:5f:f0:c5:f0:d8:13:3d:27:5f:3c:9a:1d:18:d4:a3:0f:a1:
3a:cf:25:75:2c:39:1b:fb:1b:36:2a:cc:42:37:55:8f:7b:4e:
5c:10:b0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWQou+2AarE20jEZzyALtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjU5YWVkYzI4Mjk2ZTI5MTcyNGY3OTM3ZGU3ODhlMjcy
MTY0MDgwHhcNMjYwMzAxMTcwMTI3WhcNMjYwMzAyMTcwMTI3WjAzMTEwLwYDVQQD
EyhjZmIxMDE0NTQxM2RmOWYxM2U0ZmZhODMzOTc5ODVmMDM3ZjEwMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkRZWU7nfwIdm7pJLw7wipMqnDtE
8KzGJzrU2vQcM38D9FEQLdMnPX25BzMQeVgcnx3x2ofXvbdvOHdUGXYEGZ1OrofP
nz6dv5t/sPGphSghSw4LtBP9KG362tCRIAc4kqb6U/vC0IoeYLYcglnGoj7n+0Ne
FS+MnZvbLVnNKJClb41yr8ZYnmoKCKovarnyCrtOen5uDiK2nxPFmx3mZUGU61XY
IucPVW5YVCacwXLRnYEdZULHkiO5TEWtByxqTBO2p3bMSY7ts10sSUP2uNyQxJeC
VuHIidJvuZFK8Mex8yKj29NyYPJ5QrJgvYn0JldpTWJDNtc2X53NaXO2YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+xAUVBPfnxPk/6gzl5hfA38QEIMB8GA1UdIwQY
MBaAFAX1mu3CgpbikXJPeTfeeI4nIWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2Mt
ZDY0MzY4MjA4MTMxLzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2MtZDY0MzY4MjA4MTMx
LzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeGUm8Xg
5DYxBDkZe9lF02KtGU2uAmf/OBBNoDWusHxHjrothM7zZXdKQhC8zPYjDDwrHCgq
iXZC0C88UI5NAPShoeP2NJPWqExI6UIl7kFOaeBFjUGrthrWuz+YthqbjuoGt8yy
73FXA0dM6ArNYJDlLi46v/2YEjHkidKa/yUH2I9obwUNQ9nSbl9i2VuF8Fr4xEaS
FODVTi30liOT6tzTAoW8vxuq+/t1xIshI6Nzi+lbUCbJh23YGEQEKVwHlofeN/W/
+VULYbwe6dQRRDEfyXQObp+f61/wxfDYEz0nXzyaHRjUow+hOs8ldSw5G/sbNirM
QjdVj3tOXBCwWw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:41 2026 by rpki-client