Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: tNCuFkLMZ89J5u5vHD8T/GvRyARvQR903mt8aqttgus=
Subject key identifier: E5:35:7D:B3:5A:60:F3:98:50:E2:C4:14:A9:34:47:31:1E:89:2C:83
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019FAABE6FFA31A3A86A9D913FE9BED6E369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 191B
Signing time: Tue 28 Jul 2026 22:00:34 +0000
Manifest this update: Tue 28 Jul 2026 22:00:34 +0000
Manifest next update: Wed 29 Jul 2026 22:00:34 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: RZqedyz+vJsnrZ9Y4WJwNRPzyoGK3II8r8K7XMD/h4Y=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:6f:fa:31:a3:a8:6a:9d:91:3f:e9:be:d6:e3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jul 28 22:00:34 2026 GMT
Not After : Jul 29 22:00:34 2026 GMT
Subject: CN=e5357db35a60f39850e2c414a93447311e892c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:77:fc:84:a3:44:f1:30:c8:49:b3:46:92:
bf:7f:69:f8:54:07:67:8e:37:3e:c6:db:8b:bd:d1:
2a:f3:7a:9e:f6:d0:06:f9:7d:af:40:80:f2:3c:32:
e9:a4:29:f8:39:13:d5:ba:f4:41:09:f4:51:75:a7:
19:ab:7c:a7:9a:37:1d:cb:d3:05:96:c0:d5:06:35:
15:cb:d3:b6:ae:a0:a8:41:76:95:12:90:08:48:d7:
d4:da:eb:69:4d:f2:6d:42:b5:61:24:07:70:6d:df:
23:90:87:a4:bf:31:bf:d0:81:9b:23:9f:4e:d3:41:
7c:dc:9f:df:9a:bd:12:f3:14:c3:93:ce:89:a4:64:
ae:9d:17:94:8f:98:23:ca:18:b0:86:3d:43:8f:81:
44:e1:98:36:bb:e3:50:13:7c:c8:c1:c7:41:01:e4:
cc:2f:86:40:b0:37:eb:6f:f7:5e:06:7c:01:ea:2e:
25:72:6e:c1:d9:3e:ab:b5:90:41:32:27:cb:6f:7d:
c5:33:dd:bf:0f:55:cb:f8:8c:6a:b2:b1:f0:e8:b5:
d7:dd:9d:f7:4d:79:cd:89:c2:86:e5:a9:48:d8:1d:
cb:cc:a7:7a:36:68:a8:ad:12:91:64:c5:c4:69:5b:
d7:40:e9:90:5c:12:42:8a:90:33:4c:ec:83:ac:0e:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:7D:B3:5A:60:F3:98:50:E2:C4:14:A9:34:47:31:1E:89:2C:83
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e1:2d:e8:3c:72:39:69:1f:fa:39:ec:fe:3b:3b:52:01:31:
5a:b3:8d:fd:b1:47:1a:36:5b:fa:1c:f9:64:d7:2f:55:44:8b:
f6:76:83:da:8f:90:c0:5d:a6:5e:8b:c6:52:d6:f2:9d:fc:40:
8f:3c:cf:ff:d1:07:ce:25:07:95:69:2e:12:23:89:b8:0c:51:
1a:a9:5d:a0:a5:2c:06:bd:c6:b8:4f:7f:12:9e:d6:09:95:fe:
c9:b0:a2:f8:87:fe:24:7e:4c:e3:7b:29:dd:d4:50:8e:34:e3:
b8:08:2e:25:2b:18:2d:80:b0:f5:3b:89:99:2d:cf:00:27:b3:
37:dc:7f:c3:28:ff:f4:7c:cf:b6:e9:37:dd:32:b3:5a:7e:d1:
30:08:9e:46:8d:f6:45:3b:8c:8b:7b:67:5b:43:ca:20:7c:8c:
b2:cf:07:88:6f:1e:2b:7d:2d:5b:ef:cb:7b:23:a0:ad:d6:35:
a1:ea:3d:60:31:b6:da:d1:a5:79:2c:b3:26:2f:94:70:48:54:
f6:d2:13:41:97:15:1d:b1:a4:9c:db:a9:3b:5b:bc:d8:c4:5d:
04:51:b0:30:e4:27:c2:77:82:fc:8f:f8:9e:ef:7c:67:6e:c7:
9c:7b:18:38:fb:92:24:90:ff:5a:02:e4:ae:5b:42:ad:f3:8b:
cd:4b:32:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:07 2026 by rpki-client