Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: pxMbtcucfxdgaY5uj+RxpPWR+G/X8VH9E0kfR4e8cfg=
Subject key identifier: 15:97:89:6F:F2:7B:35:73:C9:9F:FB:41:49:DE:30:F6:48:4D:F5:68
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 01A11DF5DE5B80AC05F60106F8764278E079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 00:00:14 +0000
Manifest this update: Fri 09 Oct 2026 00:00:14 +0000
Manifest next update: Sat 10 Oct 2026 00:00:14 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: 3t2ZXSSodPrVWxFBIblq0Z7wu4ZtvOnyu+NQutBMBEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:f5:de:5b:80:ac:05:f6:01:06:f8:76:42:78:e0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Oct 9 00:00:14 2026 GMT
Not After : Oct 10 00:00:14 2026 GMT
Subject: CN=1597896ff27b3573c99ffb4149de30f6484df568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:8b:19:6e:a2:31:47:54:a6:6f:38:a6:1b:
39:d1:cd:5c:3c:98:74:8d:01:4e:05:b5:65:42:a7:
d3:58:86:95:1d:b6:30:b3:a8:24:a2:25:f4:e3:85:
6e:8b:dd:a0:e1:b1:d2:6c:17:87:dc:56:b1:fe:fe:
d9:a3:3b:dc:dd:7c:d9:45:32:d2:da:ff:f0:34:06:
29:88:8c:db:66:60:f7:9e:ee:4a:dd:66:28:f5:f5:
33:2a:d1:72:d5:9a:cf:37:58:39:0f:9d:9d:f1:80:
c2:1d:32:34:2e:bb:55:ca:18:8c:00:c8:52:43:26:
35:48:fd:b1:40:0e:e0:61:36:1b:c8:0d:60:dd:f7:
db:c5:da:b9:e9:43:a6:a1:c5:92:84:dc:02:0b:38:
7e:24:4a:d7:4c:47:c2:79:ae:74:3c:f0:c1:70:7d:
ae:2a:02:38:a8:47:90:0f:c0:19:35:fa:2a:6b:28:
0a:de:f4:6b:49:34:6d:0d:7e:88:d4:e5:1e:51:0b:
c4:06:9a:b4:28:88:12:6f:93:e1:67:f4:55:25:31:
8f:55:c4:28:1f:07:cd:3f:3b:bd:1c:fc:65:37:5b:
96:7e:53:30:9a:51:a0:cc:e5:79:4d:09:2a:26:2c:
ac:ae:89:d6:bd:d3:c2:bd:9b:b5:30:55:14:c8:a7:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:89:6F:F2:7B:35:73:C9:9F:FB:41:49:DE:30:F6:48:4D:F5:68
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:aa:b9:99:a7:e7:10:0e:b9:b5:2f:95:02:2b:7c:7a:5d:57:
09:63:b4:f0:9b:dd:4d:a1:13:3c:c1:85:98:28:ab:64:7b:78:
8b:3e:4b:1d:92:4a:3a:2a:d8:fc:54:d2:00:86:5a:7c:f8:ac:
8c:29:08:5b:66:f1:5b:c5:28:23:f2:fd:f4:b8:4c:86:a7:d7:
52:de:39:3b:bb:b8:34:5f:c3:49:0c:28:c1:1d:a3:f8:04:b4:
cc:f4:85:6a:fa:45:d1:36:cd:34:25:4a:11:27:28:c0:3d:73:
4e:65:37:9d:e3:8c:d2:51:30:c1:b5:df:73:ae:db:aa:c5:2d:
09:47:84:6c:d6:ae:74:15:03:36:51:a1:ac:c0:3a:61:27:d3:
9d:56:1b:52:3e:be:5e:61:8d:e8:b7:92:68:79:d7:02:ec:ad:
8e:ad:83:f6:f7:59:a3:b7:91:02:e4:f9:ca:be:76:07:53:e1:
c6:f6:2a:53:1d:0a:77:0e:e2:89:18:7f:75:cc:94:28:48:82:
99:bf:f9:b6:3b:c2:df:94:9d:2a:22:84:c7:6e:a5:72:17:51:
67:cf:3a:d0:f0:93:ca:51:cc:49:c4:a6:50:3b:ea:a2:60:f3:
a2:47:8c:b4:6b:5b:98:2b:59:ee:62:83:4d:25:42:a8:86:2e:
89:7e:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:38:42 2026 by rpki-client