Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: RPzzqwjZNW2y7iEdAzql1/ynWHMP5StH7Qngri0TRVM=
Subject key identifier: B8:B7:7C:42:61:CA:8D:07:C0:6A:5A:5B:F2:26:63:CB:77:A4:7A:78
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019E1D593217A0B91F481FADC78FFD457BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 18:00:45 +0000
Manifest this update: Tue 12 May 2026 18:00:45 +0000
Manifest next update: Wed 13 May 2026 18:00:45 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: XBHM1WSVsZcAPThRLWqzKURK5VgsrTQ9E+MwKN14TEs=)
2: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:32:17:a0:b9:1f:48:1f:ad:c7:8f:fd:45:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: May 12 18:00:45 2026 GMT
Not After : May 13 18:00:45 2026 GMT
Subject: CN=b8b77c4261ca8d07c06a5a5bf22663cb77a47a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:d5:07:14:05:2f:a9:06:5e:20:d1:49:32:
87:26:61:15:57:28:61:fa:96:f6:25:1d:a9:2d:8b:
65:cf:0a:04:9a:d3:02:09:e1:73:c1:30:b4:16:dc:
a6:24:bb:f6:46:5b:2a:2b:12:10:6a:ae:e8:03:61:
2d:76:67:4b:96:48:12:e1:51:d7:df:36:1c:7b:ea:
b6:09:dc:29:62:a8:5f:31:96:a7:62:4c:e9:f1:c9:
57:f3:da:d2:0d:7c:39:87:f4:66:37:e5:c1:9e:be:
c3:7e:96:a0:ac:6a:0c:e1:e7:df:ae:1a:17:01:3c:
e0:f2:71:f4:f0:7b:e9:1f:c7:38:5b:57:c4:9f:ad:
4a:7c:d2:fc:8a:9e:9a:f5:1e:51:10:79:00:8e:f7:
10:e6:30:a6:7a:90:76:34:1f:84:dd:5d:8d:20:81:
b4:25:ad:22:b5:aa:38:b3:68:aa:dc:1d:6f:27:19:
bb:00:e7:c2:12:b5:46:ef:27:f4:39:e4:6e:15:7c:
ff:6d:10:24:cb:a1:d3:cb:11:e7:c6:71:57:87:fe:
2a:6b:7d:f4:65:f1:83:d1:34:05:72:3b:cd:b1:39:
05:c6:a0:1b:5a:af:85:ab:b2:fd:c8:fe:e2:21:21:
62:0f:7b:62:e7:09:8b:5b:c8:61:cf:52:dd:b9:dd:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:7C:42:61:CA:8D:07:C0:6A:5A:5B:F2:26:63:CB:77:A4:7A:78
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:70:10:53:15:dc:72:57:ea:ec:74:81:cb:97:d5:46:de:cb:
26:81:63:95:28:e8:a2:16:26:a7:d6:26:71:25:2f:fe:40:41:
80:84:f6:a5:d1:86:aa:6f:01:99:39:f1:42:a7:75:d9:3e:f7:
f5:b3:2a:5e:79:93:cd:bd:7c:de:2e:28:b1:97:f9:4b:30:68:
02:12:bc:52:f1:b9:67:5b:d8:ed:fc:2d:fe:8f:db:fc:66:1d:
57:0e:81:28:08:d4:0f:51:37:38:93:eb:ae:f8:88:d2:91:b8:
36:b8:b5:28:fb:44:8a:be:d1:30:e7:5a:bc:ea:83:10:79:73:
ea:69:2a:bc:8b:e2:09:20:c2:96:fa:e6:29:56:ec:94:94:da:
83:d3:88:10:40:bf:b2:f1:ff:d4:be:52:0b:ba:82:d3:b2:30:
b7:d0:7c:d0:e3:2b:72:2d:9d:5d:ee:23:d2:62:18:35:ff:44:
5a:32:3a:98:b2:c7:4f:79:f1:46:cc:e6:44:74:4f:04:d9:a0:
bd:f3:7e:be:82:a1:68:89:b1:d5:c6:33:2c:7e:d8:4b:d0:f4:
c6:d8:25:39:2d:9b:e6:a7:84:7a:4d:d7:5b:9e:40:f8:eb:14:
56:87:7d:54:65:3b:20:7c:d9:7d:fd:e8:0d:27:bb:9e:23:2d:
f1:5f:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:15 2026 by rpki-client