Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: rDSagtjZy0+LdH2w+iRCP54+9EvZVprbsq7FaomFCHc=
Subject key identifier: A8:45:6E:28:DC:83:05:D0:4E:F6:45:DD:49:40:3B:22:92:D2:DE:06
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 019E1C46D35B467322AB82D2A1C260388B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 1387
Signing time: Tue 12 May 2026 13:01:04 +0000
Manifest this update: Tue 12 May 2026 13:01:04 +0000
Manifest next update: Wed 13 May 2026 13:01:04 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: Vi8/gI+hyHf6ogMWhEXQOYGcGgRO+lOHpyKgS9fBYBc=)
2: z5T8Jeg-KRSBVrpJUiY8WPEbWHc.asa (hash: zIR+Jq1Supq4I4d8NJWheupQs8oviXsGrFqUkRsxnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:d3:5b:46:73:22:ab:82:d2:a1:c2:60:38:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: May 12 13:01:04 2026 GMT
Not After : May 13 13:01:04 2026 GMT
Subject: CN=a8456e28dc8305d04ef645dd49403b2292d2de06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:ca:f1:47:3d:ae:12:80:f5:ff:e1:c9:f5:
7a:11:7d:d7:55:71:c5:0e:a0:2f:90:e0:33:0d:62:
9a:db:64:11:22:db:a5:79:b6:f6:47:d2:6f:c2:67:
25:97:cd:8c:75:38:c7:f1:03:68:ae:35:b9:4d:2b:
7d:dd:09:35:59:c4:b7:96:9e:dd:6d:5e:18:f3:5e:
3d:26:0d:5a:b6:8c:f6:0d:9d:ec:d1:55:41:7e:69:
d6:a1:73:3b:23:72:e4:f5:5b:72:57:1b:ca:01:c9:
56:ae:0e:b0:56:4d:6a:2f:be:fa:b9:12:88:8d:26:
ad:f1:b8:3f:ef:d7:30:50:e9:72:b0:09:e9:56:d8:
51:36:a3:be:b8:56:9e:cb:60:a2:08:62:c1:e9:ef:
04:74:cb:8f:95:10:df:5a:80:5f:1e:d6:38:a8:02:
00:d1:db:fc:b9:5e:50:97:41:0b:ae:e9:43:9c:d4:
2c:22:0a:5f:84:82:09:d0:1f:d0:6d:e9:d3:d9:37:
d6:11:b3:53:13:aa:33:a2:95:51:be:47:e1:47:aa:
a6:7b:b0:ac:c3:bb:6f:e6:46:20:8d:fc:4b:fd:ce:
38:50:d5:e7:d5:b8:2c:fb:e2:1f:1a:c8:4a:59:3c:
b4:d8:c4:b9:3a:93:0a:33:26:e7:0f:42:cb:51:bd:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:6E:28:DC:83:05:D0:4E:F6:45:DD:49:40:3B:22:92:D2:DE:06
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:63:f5:07:b8:7d:d9:1d:cb:8b:f3:c7:81:77:8f:9a:30:04:
02:e5:10:8b:b4:25:16:d8:c8:4a:5d:a1:76:2e:fd:bf:c1:5a:
e2:f3:1e:38:97:ce:e7:5d:9a:29:6c:d3:d4:39:46:bb:f7:f5:
bc:01:c3:2f:83:a4:5d:85:e3:41:60:7b:b3:5a:c4:b8:c1:e8:
86:70:70:ac:3f:92:4f:de:aa:90:6d:f1:80:62:7b:2b:7a:dd:
51:08:c0:7a:dd:de:4c:07:94:ce:06:c0:26:3f:42:be:03:94:
e6:9f:20:e4:88:4b:9d:07:b7:ac:d7:af:0d:7d:55:73:52:6d:
c3:1d:85:e1:d4:e6:81:e8:dd:08:1e:6e:ec:f6:89:c5:e5:ab:
be:b2:d3:15:9c:35:9d:d4:15:15:4a:ae:f0:d5:1d:8d:a9:7b:
9f:e4:30:5b:74:91:df:53:f0:fd:02:c9:f4:86:ce:9a:7c:30:
e0:5f:13:5a:f2:b3:b8:6d:ba:ab:b8:c5:1a:29:5c:0f:aa:a8:
7c:33:2f:49:96:b5:8a:58:be:5f:63:aa:7d:5b:ff:97:79:1c:
9c:18:78:ce:46:3d:be:6c:be:7e:7d:3e:fc:c7:2f:07:eb:79:
ea:1a:d1:20:b0:ae:75:3e:e2:ba:5f:8d:4d:17:c3:52:b5:fa:
ac:c2:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:35 2026 by rpki-client