Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: xvdxtmpNg1zUyjXGZdpvvtTxfDR34crrJXhtWV8z7M4=
Subject key identifier: FD:CF:B2:2A:07:E9:CF:8D:20:5F:84:C8:BF:32:F9:04:1F:7D:A9:C5
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019CAA21957528272D892127709F82B6EFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 178D
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: EUbS/uKlfOEEJohG0ggxo4bWs9MFdU7N8C+cUf+ARds=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:95:75:28:27:2d:89:21:27:70:9f:82:b6:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=fdcfb22a07e9cf8d205f84c8bf32f9041f7da9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:8a:b9:b3:61:8e:fc:b2:90:95:27:46:99:
96:0c:c6:e2:6d:25:7c:5a:81:cc:0f:8f:77:0d:09:
b5:e0:fc:78:88:1d:57:74:75:b6:21:33:de:1d:54:
a9:d7:fc:0f:51:74:5d:d6:68:29:30:2a:45:20:84:
e3:3c:8c:9e:89:d3:86:a7:a0:71:96:cf:fe:31:fa:
9b:79:cd:8b:48:25:bc:e5:91:36:98:59:17:a9:23:
3e:8d:7c:15:8e:5c:27:d1:66:ab:44:e4:ad:2f:d3:
e3:d1:63:f3:d1:ed:75:df:b2:ce:d7:f0:95:29:0e:
13:d9:bd:1c:ef:a0:21:bf:92:62:ac:61:0d:0d:31:
f8:31:15:f4:14:ac:49:ea:12:ea:7a:87:e3:c0:54:
56:8e:0e:f9:40:0b:6d:0b:d4:6e:8a:17:88:6f:61:
30:0a:48:76:ad:6b:dc:70:26:fa:45:51:dd:82:77:
a9:8b:6b:50:db:8a:56:f8:d3:57:0c:2d:0a:a1:f8:
0e:1a:00:c9:ba:d5:04:da:fd:81:82:73:2a:71:f6:
58:93:c1:ef:1d:38:fb:9a:d0:22:79:87:dd:a6:5a:
0d:da:d0:4f:6c:22:c6:ac:31:ba:01:47:b8:cb:dd:
29:52:b8:27:1d:4b:41:55:ef:80:c7:fb:45:3e:03:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:B2:2A:07:E9:CF:8D:20:5F:84:C8:BF:32:F9:04:1F:7D:A9:C5
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:61:91:91:82:af:23:74:f4:3b:10:c0:51:e3:d7:2b:cd:
96:3c:0a:3c:01:b0:6c:07:78:e9:84:13:c5:74:cd:94:f6:af:
a0:e2:d1:d2:73:ef:5b:b9:00:5e:31:76:3c:fe:9b:84:24:db:
79:52:c2:2a:48:82:b7:1c:4d:ef:61:e0:44:02:18:21:20:59:
10:48:45:87:26:aa:43:48:73:ea:e9:f6:1d:b8:fe:2a:08:52:
14:41:1d:98:d8:f6:45:29:15:7f:be:a4:4e:50:70:c3:bb:d6:
6f:9d:38:7a:14:cc:c9:bd:82:0a:7e:9a:b6:7c:e9:96:b4:d1:
9a:f6:95:53:07:c7:08:92:51:1f:14:ea:44:ea:ff:ed:0f:94:
32:de:46:66:8d:55:83:9d:9a:84:fd:ed:34:70:ff:72:c3:e1:
a5:e4:81:89:89:04:7c:5c:ba:02:1a:8d:76:a3:bb:a9:cb:db:
3f:39:3d:59:9b:55:e5:c1:a0:cc:82:68:38:1c:70:e2:bd:83:
ca:ea:25:48:f0:24:09:63:53:e9:18:81:90:1c:8c:5a:d5:46:
f6:da:db:f7:8d:b1:51:f7:bd:b8:d7:1d:c2:3e:55:e2:1e:81:
e0:24:e7:99:0a:3c:50:0b:64:1b:5d:0a:2c:06:e7:10:f2:0d:
cf:a1:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:31 2026 by rpki-client