Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
File: BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft (raw, json)
Hash identifier: 1yobyP6p1JnFTEHmtsZ4jWjhj9Xc7+R0YA0rPA6cWKc=
Subject key identifier: 9C:D8:9B:6C:3E:A8:2F:45:7F:FA:F7:09:EC:09:0F:4D:BE:22:23:70
Authority key identifier: 04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
Certificate issuer: /CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Certificate serial: 01A0D3F03DBA7919A43F68C557B874807B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:11 +0000
Manifest this update: Thu 24 Sep 2026 15:02:11 +0000
Manifest next update: Fri 25 Sep 2026 15:02:11 +0000
Files and hashes: 1: BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl (hash: t8LSVrNRu3jGodlDmaRM04fmM/j1Lijk9Tm42Gg4PUk=)
2: u1twKMliTmOOofk7S5b_JmE32QM.roa (hash: YWILxFaDWAVRhnQigHWpWfe9/0YdhpATbHUYSduVmYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:3d:ba:79:19:a4:3f:68:c5:57:b8:74:80:7b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Validity
Not Before: Sep 24 15:02:11 2026 GMT
Not After : Sep 25 15:02:11 2026 GMT
Subject: CN=9cd89b6c3ea82f457ffaf709ec090f4dbe222370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:87:85:12:08:8b:43:d1:b2:84:19:3e:39:
ce:03:5b:33:e8:0a:d5:b9:f5:c9:85:e2:f3:5b:09:
69:ed:c1:30:0d:7a:e1:09:60:96:09:38:14:8c:cc:
2d:ee:da:7e:2f:4e:ce:44:9a:13:d5:a6:b4:4b:1d:
8c:e3:04:21:a9:ef:c0:da:1c:ac:ac:05:cf:fb:d1:
2d:76:d0:d6:bb:6b:f8:08:ce:88:d4:b0:38:7c:44:
bf:72:58:48:a0:28:78:b8:11:40:47:97:e4:8b:81:
84:b5:5f:e0:6f:2b:d4:f0:84:6f:6b:cd:64:b2:a1:
be:67:7c:37:e3:e5:a6:38:62:dd:73:b5:8d:83:dd:
4e:72:64:d2:86:fc:46:94:89:42:83:6b:93:89:90:
c0:24:22:8f:e9:04:59:c8:eb:68:d6:b3:51:38:dd:
2b:ff:37:bb:e1:96:8e:41:b1:65:f8:f5:63:fe:8a:
6e:d0:b9:6a:12:b7:67:e4:3b:5f:c9:d1:47:9f:61:
c0:09:8b:bd:cb:85:5a:5a:c0:86:96:69:50:dc:75:
16:d6:97:05:47:aa:90:5e:77:e4:7d:d0:93:57:84:
75:2e:cc:ce:85:7e:d6:67:72:04:5f:a8:6f:06:eb:
a8:47:95:6c:7c:91:44:66:9d:3e:a3:ee:ef:d4:9f:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D8:9B:6C:3E:A8:2F:45:7F:FA:F7:09:EC:09:0F:4D:BE:22:23:70
X509v3 Authority Key Identifier:
keyid:04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8a:eb:7c:a1:8a:6b:eb:d1:f8:06:6c:cc:ef:4d:b2:5d:4c:
d2:59:59:d8:ea:58:f2:1b:08:57:67:60:98:af:91:07:91:b9:
a9:7f:93:10:8a:4d:4e:02:0c:41:69:83:05:20:d1:8c:81:f6:
af:21:4c:6e:5c:3d:d2:94:ea:2f:92:4a:8b:97:89:40:5b:05:
95:e0:aa:58:1b:e9:53:ea:af:fc:26:a8:75:bf:9e:ee:4e:fb:
37:09:0a:0f:8d:ef:3b:9a:a1:78:78:fd:5f:33:28:16:73:01:
8c:0b:17:fa:5d:b1:62:04:e1:28:80:42:7f:6b:20:b9:da:5b:
b2:47:b2:d1:31:f3:30:56:46:7b:42:5d:66:ea:26:a1:07:7a:
88:ac:31:ce:db:92:25:9d:78:d9:93:e5:ce:38:b9:2c:65:42:
37:c3:3e:57:d1:31:46:af:24:5a:e3:16:69:83:78:3a:e6:af:
c5:39:00:2a:71:bc:5e:b6:71:2f:65:98:a4:27:d2:e9:c5:b4:
fb:f8:25:74:5a:90:df:13:75:31:23:a4:ec:92:0b:14:20:f5:
86:34:10:32:af:0d:86:b7:5d:fa:e3:39:74:f9:35:5b:6a:b5:
b5:14:b2:6a:47:d5:db:7d:54:0f:18:a4:0a:a1:91:95:c4:77:
35:ae:44:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8D26eRmkP2jFV7h0gHsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NWI4ZGY0NGU5ZTkwYjJkYzgwM2NkNDM0MTUyNDJhNGRi
MzhlN2YwHhcNMjYwOTI0MTUwMjExWhcNMjYwOTI1MTUwMjExWjAzMTEwLwYDVQQD
Eyg5Y2Q4OWI2YzNlYTgyZjQ1N2ZmYWY3MDllYzA5MGY0ZGJlMjIyMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7eHhRIIi0PRsoQZPjnOA1sz6ArV
ufXJheLzWwlp7cEwDXrhCWCWCTgUjMwt7tp+L07ORJoT1aa0Sx2M4wQhqe/A2hys
rAXP+9EtdtDWu2v4CM6I1LA4fES/clhIoCh4uBFAR5fki4GEtV/gbyvU8IRva81k
sqG+Z3w34+WmOGLdc7WNg91OcmTShvxGlIlCg2uTiZDAJCKP6QRZyOto1rNRON0r
/ze74ZaOQbFl+PVj/opu0LlqErdn5DtfydFHn2HACYu9y4VaWsCGlmlQ3HUW1pcF
R6qQXnfkfdCTV4R1LszOhX7WZ3IEX6hvBuuoR5VsfJFEZp0+o+7v1J/lOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzYm2w+qC9Ff/r3CewJD02+IiNwMB8GA1UdIwQY
MBaAFARbjfROnpCy3IA81DQVJCpNs45/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZ1TjlFNmVrTExjZ0R6VU5CVWtLazJ6am44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNGUwNTctYzY5OC00OTMzLTlkMDUt
N2MwYTk0YWUxNzE5LzEvQkZ1TjlFNmVrTExjZ0R6VU5CVWtLazJ6am44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNGUwNTctYzY5OC00OTMzLTlkMDUtN2MwYTk0YWUxNzE5
LzEvQkZ1TjlFNmVrTExjZ0R6VU5CVWtLazJ6am44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4rrfKGK
a+vR+AZszO9Nsl1M0llZ2OpY8hsIV2dgmK+RB5G5qX+TEIpNTgIMQWmDBSDRjIH2
ryFMblw90pTqL5JKi5eJQFsFleCqWBvpU+qv/Caodb+e7k77NwkKD43vO5qheHj9
XzMoFnMBjAsX+l2xYgThKIBCf2sgudpbskey0THzMFZGe0JdZuomoQd6iKwxztuS
JZ142ZPlzji5LGVCN8M+V9ExRq8kWuMWaYN4OuavxTkAKnG8XrZxL2WYpCfS6cW0
+/gldFqQ3xN1MSOk7JILFCD1hjQQMq8Nhrdd+uM5dPk1W2q1tRSyakfV231UDxik
CqGRlcR3Na5E6w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:50:19 2026 by rpki-client