Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: NLsZxxoFDDREw4ATAVpdvenOap9PjgF5cnjyvhhS7RY=
Subject key identifier: BA:93:96:AB:B2:BB:2D:C4:C5:07:F2:FF:3C:42:24:75:AB:98:9A:4B
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019F9135BDC250712FBAAB92BD6A8D13A6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 23:00:46 +0000
Manifest this update: Thu 23 Jul 2026 23:00:46 +0000
Manifest next update: Fri 24 Jul 2026 23:00:46 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: wmhGb03nX1lWB5b1jWWUeWA0sRYDX/qiXvGafxwSlv0=)
2: RRml_hYYRV_uh2tH4MKlyEdnOfU.roa (hash: j9pqLSMOpk42y3UflLLzJCKLgosgbaeUgLKU1+ncNBI=)
3: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:bd:c2:50:71:2f:ba:ab:92:bd:6a:8d:13:a6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jul 23 23:00:46 2026 GMT
Not After : Jul 24 23:00:46 2026 GMT
Subject: CN=ba9396abb2bb2dc4c507f2ff3c422475ab989a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:b2:4b:99:b3:28:b3:3f:d7:67:41:fb:17:
85:5d:89:fd:fe:23:2a:c9:c9:43:a5:9b:80:85:34:
ce:72:2e:82:d7:d2:e9:02:30:03:a0:c9:ae:68:f4:
38:45:5e:4d:76:f0:f6:22:b7:36:e5:f8:23:4c:1a:
d0:e1:b8:dc:f9:3e:e2:03:a7:d7:fd:13:d6:e7:c4:
40:10:e7:ff:61:06:a1:a2:6f:f0:34:f3:6e:71:dc:
07:ce:16:25:3b:9f:3e:15:0a:d9:9f:9a:ed:23:ee:
24:77:fb:71:4f:37:16:be:11:d9:42:04:22:30:68:
8d:cd:01:a9:0f:1d:fd:7c:24:99:11:c2:68:65:d6:
db:a1:e5:89:a6:35:03:18:e8:02:17:6a:1b:9d:86:
e9:3e:2d:69:84:5e:6b:35:00:67:1a:7d:49:03:d9:
d8:ec:09:d0:7e:d6:d0:97:7b:de:62:41:df:c2:0c:
20:62:5e:d9:b2:15:17:f1:5a:37:87:e7:14:f3:0e:
4d:15:f6:65:b4:ab:7c:b9:00:a3:11:4a:a5:2e:70:
80:0a:08:23:55:2a:38:08:7e:71:4f:33:e8:c5:4c:
fe:5c:25:3e:40:02:ec:cf:7b:61:f2:74:43:7a:45:
1f:d4:07:70:31:a8:f2:b8:f5:b4:15:d1:15:19:f8:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:96:AB:B2:BB:2D:C4:C5:07:F2:FF:3C:42:24:75:AB:98:9A:4B
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:61:33:a3:73:e2:e1:34:0c:3f:68:8a:70:7b:a5:e8:83:
2e:82:99:26:8a:3e:6c:12:ee:b3:3d:3f:82:37:ca:74:45:4d:
de:76:84:05:27:c6:0d:84:15:7d:33:b2:17:30:6c:a3:b8:77:
91:e7:7e:4b:cc:f0:8b:6a:ca:8c:1a:81:f0:12:0a:e3:4e:9c:
2b:b3:eb:3b:71:c7:49:b9:f9:9b:fc:64:47:f7:5a:c0:ee:5a:
26:75:f2:ff:90:9b:ec:bc:52:91:7f:55:2f:33:8f:ba:3b:bc:
13:5a:b2:d7:59:ef:c8:f9:1f:d4:b2:6a:2b:40:a3:55:3d:a2:
17:9c:e9:0b:4d:07:6a:38:9c:9c:0c:17:00:30:94:9c:4a:c7:
f5:4b:f2:4f:2e:73:e7:23:ea:42:75:65:80:f3:a0:61:58:c5:
44:36:96:2a:c5:91:13:49:26:80:93:c4:1d:db:45:ef:48:d4:
97:44:50:3a:56:6b:9b:0c:a8:f0:ea:2a:1c:c6:77:e4:5c:d5:
f8:21:cd:c9:41:50:ac:05:8b:50:10:23:62:13:a2:bc:cd:9c:
2a:0a:65:67:0a:3a:fe:bc:57:82:20:dc:36:29:4a:3a:f2:dc:
f2:16:00:24:39:3a:00:7f:75:e7:3e:c7:26:68:00:69:35:5e:
4e:bc:3b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:49 2026 by rpki-client