Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: 5t6fT14xAdhe5/5fUMPuwAfN345TQCXc8bwtkK22DvA=
Subject key identifier: 6D:3F:83:79:07:57:77:D9:70:90:45:B9:F1:C7:D7:39:67:05:E4:2F
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019D2628A1F4644589130BE069018EAE3FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 18:01:30 +0000
Manifest this update: Wed 25 Mar 2026 18:01:30 +0000
Manifest next update: Thu 26 Mar 2026 18:01:30 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: qsTEWPM0Lgk0tsyCqRbo2y0l4sB5m6jsmYODwZKI7mE=)
2: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a1:f4:64:45:89:13:0b:e0:69:01:8e:ae:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Mar 25 18:01:30 2026 GMT
Not After : Mar 26 18:01:30 2026 GMT
Subject: CN=6d3f8379075777d9709045b9f1c7d7396705e42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4f:5d:f8:0a:e3:09:b9:ea:af:c3:de:c5:8c:
57:fa:f9:1a:c1:06:cd:33:82:41:ff:d5:4d:3d:9b:
0a:db:f4:e7:70:42:e9:7f:d0:4e:a1:db:3e:d3:9a:
e0:8f:6a:3b:d1:5c:ef:48:9e:16:5f:e4:79:c4:11:
4a:a2:7b:e0:b8:d4:53:af:25:32:cf:9a:68:b8:9a:
70:17:b6:9f:f8:0b:2d:21:55:62:e9:cd:79:ce:f1:
54:3f:16:18:db:38:48:c4:7b:06:f8:b4:90:f1:ea:
b8:8a:e1:b2:4d:5d:39:53:18:75:2d:c4:61:22:68:
4f:52:b5:dc:54:8a:b2:2c:31:f3:41:cb:94:cf:d7:
34:31:62:98:32:ae:4c:36:ec:de:9e:87:b6:78:92:
a6:bb:3d:f1:eb:c7:bc:47:16:a3:54:94:b9:4e:4f:
2e:50:bc:81:e8:f7:4b:aa:cb:f3:ef:63:8d:ac:6e:
b4:12:92:b4:2b:f4:11:e9:5f:5c:e0:d4:7c:e2:de:
32:a2:9b:f6:73:f8:34:43:cd:19:42:2a:fa:91:d7:
ae:c2:e6:ee:cf:30:a6:56:f6:33:83:5c:20:2f:ed:
2a:7d:9d:de:a4:b9:0d:ed:e1:e1:e3:b4:09:ac:2e:
25:48:c2:5f:70:aa:73:2a:6d:85:77:05:0a:47:18:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:83:79:07:57:77:D9:70:90:45:B9:F1:C7:D7:39:67:05:E4:2F
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:a2:a4:0b:2d:3d:44:af:ba:e9:24:83:db:dc:31:88:f1:
d2:64:e5:63:43:78:d3:90:a3:2b:a2:0d:55:74:b4:55:b0:32:
6e:2d:9a:df:e6:0a:1c:8b:20:12:5a:80:5e:b4:01:6a:e5:0f:
51:c2:4b:9d:d7:6e:42:d4:ce:6a:d7:ef:94:c2:54:26:30:00:
6f:5f:3c:e6:cd:05:0e:dd:2d:92:74:c6:d7:f6:ca:19:54:fd:
dc:03:09:6d:e6:1c:f8:a9:33:33:50:ac:75:a3:6c:ea:68:7a:
cd:b1:a1:94:d3:21:2b:62:eb:23:de:a2:6f:a6:09:9d:f9:e0:
2a:04:1e:4f:71:17:78:e2:98:ab:bc:2b:1a:6c:b8:68:1a:a7:
f5:e6:62:cb:e4:ce:75:92:c0:27:22:a7:62:1d:a4:36:81:79:
7e:b8:5c:c6:d4:b8:4b:3e:5f:c1:da:f2:65:3e:98:58:b0:7f:
b7:9e:a3:11:a0:07:09:8d:57:9b:88:80:dc:69:7e:b0:32:72:
88:4c:87:b8:2a:ef:de:82:a0:94:7b:70:40:87:6c:9f:c3:97:
95:90:0e:39:5b:0b:2b:00:82:37:98:7d:3a:c5:fc:ad:29:de:
c4:7f:68:41:d8:5a:65:72:f7:b5:c4:30:b4:02:36:62:04:52:
da:d9:f1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:45 2026 by rpki-client