Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: shxC7rpWwYGEy1eeFgFTWcKDaVKpPh6gKs1wMmqE8ZI=
Subject key identifier: 8B:70:95:22:B8:E5:11:3A:AE:69:E6:FB:14:20:13:31:46:A6:80:10
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 01A0C88F7463EF2E24153832884445B835E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 19AF
Signing time: Tue 22 Sep 2026 10:00:39 +0000
Manifest this update: Tue 22 Sep 2026 10:00:39 +0000
Manifest next update: Wed 23 Sep 2026 10:00:39 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: OJgsTamgsb86VUYvZd7+Cn/kU14eskGcUQ0P8BYFQhg=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:74:63:ef:2e:24:15:38:32:88:44:45:b8:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Sep 22 10:00:39 2026 GMT
Not After : Sep 23 10:00:39 2026 GMT
Subject: CN=8b709522b8e5113aae69e6fb1420133146a68010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:6f:34:1d:fa:14:23:cf:b3:ff:c9:43:61:
28:d7:6a:d6:ad:d6:87:10:2d:c0:7d:60:f6:0c:eb:
00:21:14:38:0c:f8:5a:d1:ba:37:d1:3d:03:c9:6a:
7c:cc:cc:e9:e2:fc:18:03:2f:c1:1a:7f:9a:6f:ab:
e7:06:8d:c9:1f:eb:53:d7:78:be:9d:42:18:99:86:
98:31:f9:42:5d:f9:61:00:2c:35:a2:b0:ab:c4:fc:
91:aa:c3:91:11:54:b9:a4:7e:e0:14:ea:3e:aa:42:
a6:e7:b3:c0:7a:6f:24:4c:29:c5:c7:0c:a6:ac:b5:
ca:0d:8c:e9:6c:06:d5:7c:6e:4c:56:75:d9:d5:d0:
9c:2c:87:c0:e6:09:d9:37:02:61:4d:1c:79:df:7e:
b2:bc:d8:15:1a:3e:fc:d4:dc:6a:17:95:d2:88:ea:
4d:65:cc:f7:68:9e:8d:d0:cd:47:31:7f:d9:c9:b8:
94:65:b4:93:ce:d2:10:09:d2:5b:ce:73:fa:ed:24:
99:ff:34:2c:af:71:94:a0:6f:d4:4a:7f:a5:63:d4:
1c:ff:35:2c:6b:15:40:44:e4:dd:1d:ac:af:8f:06:
c2:8b:cc:cb:ce:77:30:e6:9a:99:d1:8c:57:43:80:
55:ce:26:ed:44:76:bc:e0:c2:ee:81:de:7c:2f:cb:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:95:22:B8:E5:11:3A:AE:69:E6:FB:14:20:13:31:46:A6:80:10
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:06:5e:3f:f6:09:a3:03:91:c6:cd:3f:50:ec:2d:97:f3:c1:
44:2f:65:35:96:f0:fb:26:33:31:1a:dc:e5:34:f4:a3:d0:bf:
23:64:f6:30:38:04:21:8c:de:70:19:5a:f5:bd:a3:a3:e0:3f:
20:9c:4c:6e:09:e1:11:2f:20:90:19:4f:ab:9a:09:67:8d:f5:
49:da:ad:64:fb:01:02:43:ad:74:4b:d5:b2:0b:71:e1:f4:14:
b7:3e:26:61:54:93:30:b8:15:b2:3d:c2:ac:a3:64:ce:06:31:
39:8f:72:dd:cd:0d:aa:40:2e:e4:d1:00:f2:b2:d7:64:6d:79:
18:db:ff:ae:09:78:ef:46:ae:79:01:ae:97:d1:ae:18:d9:c6:
52:33:56:65:43:df:52:ff:14:52:86:19:50:1f:54:e3:7a:03:
65:06:92:fa:e1:a8:f6:42:55:7e:5b:5f:ed:5f:70:62:be:fa:
a1:48:03:64:a8:12:39:40:f5:45:6d:11:78:2a:dc:af:7a:86:
5f:4e:72:8c:4a:88:cf:b3:7b:59:5b:ee:db:20:49:78:9a:6c:
30:c8:fb:f6:df:0a:60:04:97:cb:f9:0c:8c:80:87:4d:a4:cd:
a8:32:0e:37:b3:34:4c:df:e3:92:10:cf:be:62:08:3a:88:af:
f8:59:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:31:24 2026 by rpki-client