Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: /oZtfGoO7k3ARXakzHbekpiKswCUKcvtHFIdbqSEb64=
Subject key identifier: 26:C7:9B:33:24:50:1E:D2:72:D1:23:87:48:47:95:C5:B4:EF:0B:3A
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019D999932AF7FD1F24B70388FB7E5939964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 1809
Signing time: Fri 17 Apr 2026 04:00:47 +0000
Manifest this update: Fri 17 Apr 2026 04:00:47 +0000
Manifest next update: Sat 18 Apr 2026 04:00:47 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: ZOLKdtKlF6CT/oQOpd6dAWkgd3BtvnY/6ZBbJgB/q2w=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:32:af:7f:d1:f2:4b:70:38:8f:b7:e5:93:99:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Apr 17 04:00:47 2026 GMT
Not After : Apr 18 04:00:47 2026 GMT
Subject: CN=26c79b3324501ed272d12387484795c5b4ef0b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:21:67:3e:a8:30:9c:97:a2:68:76:6f:d0:
ef:82:c8:ac:e2:61:2d:c6:cf:b2:4f:f1:99:70:be:
df:85:ca:9f:36:99:ee:b2:c0:a1:2b:3b:f4:52:da:
ea:a2:ba:ed:54:8a:8d:7d:7d:95:c2:a7:58:f5:cf:
73:75:ec:b3:cd:b1:a9:5f:d5:31:a0:33:53:2b:e5:
e2:8a:d5:ea:2e:69:cb:39:58:b6:1b:0d:88:1f:a3:
97:4a:3d:10:6d:7d:bb:4d:65:02:ed:ce:6d:06:b2:
f1:70:99:f5:99:78:1d:93:66:eb:44:23:10:e5:bc:
09:29:4e:19:0e:9a:51:13:64:6c:ef:8a:d8:9b:8c:
4f:68:de:45:77:78:e1:46:4a:23:02:53:a4:c0:9d:
d6:be:c4:5b:a5:2a:2c:23:2d:cc:eb:1f:5f:27:f1:
85:20:3d:e3:6a:c4:0e:b1:24:e0:25:3b:3c:19:53:
7d:d4:d0:71:94:ea:bb:0a:d2:3a:3a:8b:0f:fa:b2:
f5:69:92:78:6e:8e:80:b1:c9:aa:37:6f:5c:6c:33:
c3:30:0b:25:ca:69:03:80:7d:f2:d9:92:96:0f:aa:
c0:1b:24:9b:f9:6f:68:91:30:6a:a0:e4:4d:61:62:
49:ec:e5:14:f6:e9:1b:6c:42:ce:07:a8:46:64:1f:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C7:9B:33:24:50:1E:D2:72:D1:23:87:48:47:95:C5:B4:EF:0B:3A
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d7:93:9e:8b:0d:44:67:4f:21:d9:d7:2c:3c:02:a2:d7:40:
de:9f:fa:fa:64:f1:80:69:a5:95:51:84:55:6d:28:32:4f:a6:
d4:f1:e7:1c:04:b7:26:02:dc:70:b1:db:d5:24:50:a5:42:83:
11:1c:4a:c2:d8:ff:a6:fa:dc:ac:2b:7e:b2:1a:8e:ac:04:b6:
93:d7:fd:4a:8a:77:17:0d:24:d0:13:44:6c:87:7b:31:77:3a:
63:34:d2:20:e6:62:ad:9a:fd:c1:53:30:0c:dd:66:58:81:d7:
aa:d1:19:6c:ae:fc:93:68:f6:19:6b:0f:80:e5:ce:36:a4:67:
69:43:ce:1a:4b:51:b3:e4:07:6b:d2:be:9f:00:60:a0:28:c3:
a1:0d:65:9b:11:f8:a0:4f:5a:59:c9:ed:bc:4a:0d:eb:f6:5d:
0c:51:33:47:35:a5:e8:eb:9e:40:1a:65:91:81:bf:c1:b7:f5:
cf:1e:45:86:28:74:66:a5:73:8d:b3:f0:65:44:14:3b:bb:24:
c5:58:4b:fa:43:69:9d:c4:c8:78:85:73:11:9b:46:a8:7c:4a:
85:b1:a0:dc:8b:06:87:65:2c:2e:65:7e:9d:19:b5:2c:9c:27:
c7:64:59:c7:a8:43:ac:1b:44:83:9b:6a:27:15:f1:22:1a:4f:
16:7f:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:15 2026 by rpki-client