Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: wh5HGe8QIUBF0wpSUXAi4nToYfvjEalCs88xYAX87+Y=
Subject key identifier: 5C:77:FD:41:BD:FD:4E:1E:CA:05:59:71:6B:2E:78:7E:B1:7E:F7:6D
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019EBF23DF9EC04BE819214105E777F48BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 18A1
Signing time: Sat 13 Jun 2026 04:00:59 +0000
Manifest this update: Sat 13 Jun 2026 04:00:59 +0000
Manifest next update: Sun 14 Jun 2026 04:00:59 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: 2zZHf5zW95AQb7DwtsvXotoPxafNEpSxeSM/SeRTgc8=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:df:9e:c0:4b:e8:19:21:41:05:e7:77:f4:8b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jun 13 04:00:59 2026 GMT
Not After : Jun 14 04:00:59 2026 GMT
Subject: CN=5c77fd41bdfd4e1eca0559716b2e787eb17ef76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:f5:5b:66:38:95:07:0e:66:11:12:18:38:
76:bd:ac:2f:f5:6d:1a:43:49:ef:90:99:03:55:49:
8e:12:9e:fd:ef:4d:16:e9:d6:b4:80:5a:47:c5:4f:
33:01:18:e9:aa:77:13:ca:be:6b:f5:55:58:a4:c6:
fb:bd:32:14:b9:cf:f3:d8:dc:ec:91:17:28:0f:19:
b7:2c:f0:e3:47:ec:c7:ee:f7:9d:5b:cc:d7:e1:fc:
08:61:bf:ea:53:10:d8:0f:9f:5e:d0:1b:63:ef:8f:
b7:24:3c:de:00:86:75:74:8e:b0:6f:5a:06:4c:30:
f0:91:3c:01:49:a9:c5:94:17:87:01:d4:22:0b:37:
83:11:98:9f:eb:28:83:73:bb:83:a0:f4:a9:3b:28:
fc:14:07:83:02:d9:3c:ee:07:9a:23:bd:53:76:6f:
2e:1d:9c:a0:ae:f3:37:e9:19:c5:a6:af:38:21:a8:
cb:07:45:e2:9d:13:66:82:21:57:a5:4a:16:4d:92:
5b:29:8c:19:5e:d2:71:4a:00:26:57:2c:ce:fa:1a:
e1:ed:69:94:63:1e:16:0b:cc:85:7c:51:39:53:ab:
f3:dd:5b:7a:ba:9d:21:1a:e6:92:5f:d1:3d:c5:be:
e0:39:8e:d4:92:28:8b:18:99:a4:24:c0:c4:05:12:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:77:FD:41:BD:FD:4E:1E:CA:05:59:71:6B:2E:78:7E:B1:7E:F7:6D
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dd:1e:80:6f:a0:d1:b2:5a:e7:3d:22:54:b6:a8:fb:85:8d:
7b:26:a2:45:08:03:05:3c:b4:0d:85:27:10:aa:1a:c9:f3:5d:
63:59:c4:7c:48:6b:93:6c:1b:70:98:29:4c:e0:26:57:82:eb:
d0:b2:a7:98:0d:52:41:b0:74:2f:ab:d4:38:c3:97:d2:40:36:
8f:68:d8:68:97:4e:80:ad:1e:09:9b:90:55:da:bb:7b:9a:7f:
49:72:57:17:5f:7b:b3:aa:79:f4:6f:84:d3:6c:01:72:37:af:
21:9a:a2:ec:14:eb:99:a8:4b:f5:d2:55:ab:96:e7:26:31:1a:
76:95:e3:31:42:fa:38:4f:ea:0f:4b:ef:64:4c:db:1c:ef:de:
b0:c2:6d:ff:4f:eb:3e:cb:8b:49:16:65:a9:91:2b:5d:34:ea:
76:81:6f:7b:dc:8d:e5:7c:c8:c4:01:9c:f1:98:6d:82:a1:5d:
a8:ee:54:f2:da:1c:57:38:bc:7d:cd:b8:20:11:b1:f0:d5:5d:
0b:4d:c5:bd:01:02:cb:21:28:5d:a9:e2:60:e0:97:cc:ed:89:
70:be:93:93:1e:35:5e:f7:18:87:f3:66:b4:e3:b4:2e:f8:f2:
7c:f3:06:f2:72:66:d9:18:de:cb:85:e3:56:0c:aa:bd:68:95:
06:c9:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:24 2026 by rpki-client