Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: 1a9pG0pTW0af2ue5EEMaPdGS7yZD0iQjxrWA455ybs8=
Subject key identifier: 8E:22:7C:6E:42:73:18:07:B7:76:CB:F5:00:50:D5:4B:F1:75:70:22
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 01A0C2FB0E43C9E1D34AD38EEE40AE41D8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 1982
Signing time: Mon 21 Sep 2026 08:00:28 +0000
Manifest this update: Mon 21 Sep 2026 08:00:28 +0000
Manifest next update: Tue 22 Sep 2026 08:00:28 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: mIaqx0ww9OYK9YlhqMPsPdsb7h+S2qsRCBxXa3iNJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:0e:43:c9:e1:d3:4a:d3:8e:ee:40:ae:41:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Sep 21 08:00:28 2026 GMT
Not After : Sep 22 08:00:28 2026 GMT
Subject: CN=8e227c6e42731807b776cbf50050d54bf1757022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:1c:12:d0:2b:84:59:b5:2b:4e:36:a9:ed:
f8:5d:47:49:82:bf:7b:77:41:f0:cb:c5:7b:9a:f7:
78:7f:32:c9:3d:ff:3b:6f:4c:9c:89:d9:67:74:cf:
dd:93:d0:fb:b9:6e:d8:fe:39:7d:d3:88:4a:c4:74:
ad:51:76:43:32:25:a2:81:77:0c:a0:8d:70:87:59:
e9:f7:5d:77:84:cc:82:d1:23:3e:fa:49:b1:13:48:
e4:c2:62:d9:d0:cc:15:36:5e:82:25:1e:b8:d0:91:
92:23:ef:07:67:37:50:17:96:b7:a0:67:82:e0:42:
91:08:e8:18:4a:4c:e4:df:3c:9d:6c:28:1b:9d:98:
93:63:b9:6a:b9:02:13:c5:bf:be:41:7f:41:2c:1e:
cb:ec:7e:93:fd:ac:1f:dc:33:d9:5a:51:18:d8:39:
a1:fd:49:a9:cd:a1:c9:a6:08:50:3f:4b:04:26:9e:
0f:51:d2:cd:4b:e6:b6:37:7e:86:fd:eb:d1:2d:90:
15:0b:93:d4:c9:98:cf:55:a3:1c:4f:cf:a8:09:3e:
e5:92:8e:bd:79:77:12:b8:3b:3a:00:02:85:22:7a:
5e:19:df:c4:3e:d0:14:35:ef:5b:1f:3f:66:cf:3d:
0c:62:10:06:72:fd:f8:f3:93:85:3e:57:b2:a5:d9:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:7C:6E:42:73:18:07:B7:76:CB:F5:00:50:D5:4B:F1:75:70:22
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f3:3a:29:12:34:c3:a8:11:cb:e6:d0:f6:b6:03:1e:c2:a8:
80:96:12:61:1e:7f:ef:d2:e2:f5:35:3e:5e:5f:d0:7d:d2:a0:
76:25:2f:3c:9d:93:b1:8d:28:5d:14:9c:d4:83:a8:3d:4c:3b:
27:88:5c:98:31:4d:84:08:38:e2:e0:37:62:1d:95:74:d1:6d:
ec:7a:e1:a3:2b:fc:50:1d:95:19:ae:60:3e:2a:de:84:f1:a8:
87:a1:2d:0f:26:59:f8:51:f1:b5:59:e7:13:02:dd:5e:01:84:
50:17:25:65:42:a2:2a:54:04:e9:9b:73:48:7c:54:4e:a1:d0:
ea:36:33:76:4d:d2:db:66:2f:b0:30:40:ba:a1:e4:67:49:c6:
17:2e:ba:ca:c7:a4:b2:23:3c:67:09:80:6c:df:68:c1:cf:6c:
63:04:55:0d:4f:4b:42:87:56:e3:a4:4e:0e:0a:9b:df:e3:bb:
db:eb:a7:06:07:3d:41:e9:18:98:07:73:fc:0e:c2:77:6a:e9:
0b:1e:04:6e:e7:95:a2:7d:aa:c1:e2:21:85:d9:f6:d4:4d:c9:
43:7e:45:b4:30:11:69:fa:1d:a0:3b:e9:ed:15:5a:b0:8c:14:
02:06:bb:55:a8:b6:c0:8c:66:69:69:95:bd:41:ea:5d:fa:b6:
c8:db:db:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:50:49 2026 by rpki-client