Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: /4h9b3EW3zp7MTcrAkcoZLMgXxD5F42L5823ZWHKGUg=
Subject key identifier: 33:6C:38:1A:E5:FD:47:F3:BF:A4:14:81:F3:1C:CE:28:96:74:87:2F
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 019F95EDD45FE1587DAFB77A8C296D7AD301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 21:00:19 +0000
Manifest this update: Fri 24 Jul 2026 21:00:19 +0000
Manifest next update: Sat 25 Jul 2026 21:00:19 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: Cbtblg5Rwh68ytYvzMJ5QNmiDeCXLP1/zrr/U7zHrEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:d4:5f:e1:58:7d:af:b7:7a:8c:29:6d:7a:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Jul 24 21:00:19 2026 GMT
Not After : Jul 25 21:00:19 2026 GMT
Subject: CN=336c381ae5fd47f3bfa41481f31cce289674872f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:0d:c8:e3:77:a6:1f:84:a7:7c:55:44:92:
9f:eb:e7:9b:f0:1c:20:4c:e3:ce:39:eb:da:72:08:
70:b6:e2:2f:ec:ad:6e:55:9b:41:b0:cb:72:6a:dc:
08:4f:57:02:4a:7a:b5:87:6b:0c:82:56:fc:21:29:
76:a9:33:78:cf:a8:b7:62:8c:57:c6:a4:cb:6d:2f:
b6:bc:45:fe:ec:32:87:2e:49:f7:62:35:94:10:e4:
f0:58:c8:af:a8:f3:de:66:2e:45:13:e5:3b:c1:f2:
2a:29:8f:36:84:0b:8e:31:02:82:59:e3:74:89:dd:
9c:2b:68:c5:4e:13:72:d2:c1:e5:f8:99:c5:ba:22:
5c:19:76:d2:6e:e8:f6:82:a5:1b:ad:43:df:1b:1b:
66:5a:7e:46:04:10:2c:a1:34:ae:19:19:c6:58:90:
e9:a9:3d:aa:44:9b:bd:c8:d0:9e:96:94:33:c3:49:
c0:46:33:a6:f3:d0:a6:21:7c:87:c7:ca:24:39:46:
59:26:67:17:1a:e4:85:52:1b:17:19:55:ac:9a:dd:
4c:0d:78:3b:7f:20:fd:1f:3e:89:4b:e6:56:1c:d8:
b0:a3:4b:75:f2:ca:d7:ed:48:6a:d6:95:67:82:8d:
5b:10:2f:a3:1b:0b:79:a8:28:25:a1:42:14:01:7e:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6C:38:1A:E5:FD:47:F3:BF:A4:14:81:F3:1C:CE:28:96:74:87:2F
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:39:d7:98:c9:89:b8:80:86:21:e9:30:e8:70:a4:12:16:
39:63:09:81:28:3c:19:94:41:a5:e4:ea:95:85:6d:ac:e7:fc:
78:64:01:5f:45:31:9a:9a:62:55:a3:e1:f7:90:69:33:89:d7:
07:89:56:9b:c9:e0:5b:aa:87:85:41:44:02:2e:d9:b4:ef:c6:
51:52:83:e6:03:75:f2:dc:c4:05:9d:24:5f:3b:9a:13:df:ec:
ca:17:0b:e0:4e:e3:b4:16:fd:7d:19:95:b4:cd:be:24:ae:2b:
89:70:14:80:0f:c7:f2:69:fa:01:69:bb:4a:f4:f2:8d:a6:4f:
18:9d:3c:d4:da:23:6d:a1:fa:f3:74:76:c5:8a:5f:50:27:0b:
66:40:2c:15:e2:0e:38:a3:32:a3:c0:07:98:c5:d0:b1:23:6c:
e1:10:7f:41:88:f2:73:29:a7:d0:17:6f:47:a2:55:80:8f:2f:
f0:b1:02:8a:b6:b3:31:55:82:f5:40:6b:a0:d8:34:5c:ea:91:
5a:87:13:84:40:29:8a:76:8c:ef:2e:a5:08:3b:60:19:92:05:
b7:7e:ea:48:2f:e8:80:87:e1:59:44:c8:b6:44:99:e4:6d:74:
61:65:2d:78:24:f4:11:9c:d9:14:c3:78:35:73:b7:af:2b:28:
9a:87:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:35 2026 by rpki-client