Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: /VYRkJFG6Ih6c+9VidCo1/1qGJaIBVvzsJcIVQRTR/A=
Subject key identifier: 62:0B:E2:91:3A:58:67:20:8B:37:FE:11:62:59:FA:00:8C:30:BE:3F
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 01A0CBFE85F4013EA9DF101D8E2108DE0588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 02:00:50 +0000
Manifest this update: Wed 23 Sep 2026 02:00:50 +0000
Manifest next update: Thu 24 Sep 2026 02:00:50 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: PlYvfdzHbhw8EMkzfS89JjVNMMVm8bNY5M1o0zXlaUo=)
2: RRml_hYYRV_uh2tH4MKlyEdnOfU.roa (hash: j9pqLSMOpk42y3UflLLzJCKLgosgbaeUgLKU1+ncNBI=)
3: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:85:f4:01:3e:a9:df:10:1d:8e:21:08:de:05:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Sep 23 02:00:50 2026 GMT
Not After : Sep 24 02:00:50 2026 GMT
Subject: CN=620be2913a5867208b37fe116259fa008c30be3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:d6:6b:2f:f3:df:a7:4d:43:60:b6:a4:7c:
05:07:a3:e8:a9:07:c3:65:44:69:96:9b:20:88:e1:
97:b4:9b:8a:0c:9f:d2:cd:5a:13:d8:57:79:41:41:
3d:59:81:eb:e3:2b:46:df:96:cb:08:61:f5:a4:53:
05:8d:d5:d5:43:db:25:26:a9:52:03:83:09:b2:55:
31:f8:5f:8a:4e:bc:63:18:46:f8:ba:5b:3e:32:7e:
67:43:5f:80:e6:2e:c1:8f:02:bf:f6:0a:66:16:c4:
47:91:2f:21:cc:e5:4a:8e:eb:e9:f7:0e:73:41:57:
6e:f2:b7:7b:62:db:c4:fc:47:23:f1:ac:3a:6d:04:
c2:4f:2d:1c:ae:2c:0a:72:c2:08:e7:4e:a4:ad:96:
c2:c1:7b:d9:c8:09:d1:d3:24:57:7a:ba:55:7b:d5:
21:bd:48:d2:1b:ca:ea:e3:d1:2d:e4:ae:8c:4e:74:
dc:94:58:3a:2c:e9:fc:f1:a5:88:e7:d2:f5:3d:43:
85:92:99:9f:83:e7:50:4b:2f:01:ef:77:38:63:78:
d3:43:89:14:91:7b:e9:12:d6:b3:5a:91:84:a8:99:
02:04:7c:35:c1:e2:3d:aa:d8:dc:82:a4:59:cf:3f:
5e:39:b9:bd:bf:27:1b:4a:64:b1:b4:9c:6e:07:23:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:E2:91:3A:58:67:20:8B:37:FE:11:62:59:FA:00:8C:30:BE:3F
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:df:03:27:fe:5e:79:5c:8a:95:63:d8:2a:6b:85:b1:13:c0:
23:5a:3e:bd:e9:2c:2e:55:e6:d0:98:73:a8:57:86:16:6a:d3:
57:f0:93:2f:47:5f:0a:18:4c:40:35:b1:60:e9:c4:bb:8a:3d:
8d:f9:9d:30:ef:48:3c:d7:66:11:9b:32:01:e9:cb:45:32:99:
5d:7d:9c:d6:58:57:41:34:de:d8:f9:a3:af:15:d3:86:db:1a:
27:2d:40:0e:b4:b0:30:df:2f:d2:1a:ca:d4:02:0d:53:79:36:
1e:b6:83:1d:b0:f5:44:0f:b6:fc:f3:de:51:78:72:c7:c4:39:
93:00:a4:53:7b:f2:4c:6d:60:70:39:20:9a:1b:6f:dc:56:a8:
66:de:79:e6:fe:a6:93:99:52:14:da:ff:79:b7:e3:ea:d3:9e:
bf:7d:1f:1a:a2:e7:d5:5c:d1:24:b6:59:1a:d5:85:5b:df:d8:
cf:d8:23:2b:c1:b9:a4:d3:93:53:40:1b:1d:cc:ae:a4:dc:cb:
d4:cc:75:ed:c6:88:5e:1a:f5:ab:27:09:9e:90:39:15:91:9f:
15:85:80:9c:fe:3c:9f:5c:df:b7:42:24:6e:84:f8:e4:27:18:
6f:f8:61:73:6a:78:7c:29:51:fa:e0:8d:14:c5:50:1b:8b:32:
1c:81:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:03:24 2026 by rpki-client