Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: Exu/c+fAF1Z0kj+hmz0vYfCmiEtyvgWz5mBxlV80BUw=
Subject key identifier: 98:61:58:5E:D8:B5:A4:F7:D4:07:84:8B:3B:12:63:FD:A8:70:52:29
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 019F8EA26157576B610E04DE9985F9159239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 1447
Signing time: Thu 23 Jul 2026 11:00:34 +0000
Manifest this update: Thu 23 Jul 2026 11:00:34 +0000
Manifest next update: Fri 24 Jul 2026 11:00:34 +0000
Files and hashes: 1: D3EXfnpLfks5hkWJ3JpH4AjPZus.asa (hash: YU9VXUO2KnpRtE3dCPlyXEXuMHPtxfhZzrU9FfAfgzM=)
2: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: bXZuDC/MIpCIZgb63DJdy4ptjQ1wQBLZM4ym+9GgNJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:61:57:57:6b:61:0e:04:de:99:85:f9:15:92:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Jul 23 11:00:34 2026 GMT
Not After : Jul 24 11:00:34 2026 GMT
Subject: CN=9861585ed8b5a4f7d407848b3b1263fda8705229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:cf:81:62:55:62:2a:08:4d:db:f9:b2:8b:
4d:87:c2:fe:1d:3b:f6:af:85:cf:0f:d5:1c:c7:b0:
24:1f:71:a6:e2:80:62:ae:9c:03:cc:d2:c2:14:0e:
ba:1a:fc:60:ae:d7:8c:07:05:cf:3d:50:c0:e6:bb:
ad:dc:ca:fa:c5:73:50:dc:47:20:58:62:22:08:89:
22:fd:a7:70:64:0a:07:0a:b4:78:05:54:62:32:5b:
90:47:4c:e7:7a:4d:0b:75:75:ff:f4:0b:c5:f7:4c:
67:a0:43:e7:27:0e:b3:07:2f:d0:53:fb:85:d3:02:
92:09:ea:e3:e1:52:48:53:bb:6a:21:1d:26:93:21:
64:19:68:f1:0f:a4:4d:eb:5a:80:6b:c8:33:1d:5c:
9e:81:6e:8f:e4:ff:ea:90:71:01:3f:e0:df:2c:a0:
f0:f0:0c:e3:a1:83:00:b3:9d:9f:14:7e:9c:a1:e3:
ad:3d:cd:99:fb:4e:66:ec:d7:95:66:68:7e:4b:fe:
f9:4e:d0:24:81:a5:84:d9:2f:12:0d:a7:f0:d4:ba:
c6:d1:17:98:ad:38:19:70:6d:7b:10:21:b6:f0:8c:
f8:d6:b7:9b:af:a4:f0:3f:d1:e4:7a:f5:ba:d6:2e:
31:47:3b:9a:b7:07:ce:0b:ce:e1:07:6c:6d:06:87:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:61:58:5E:D8:B5:A4:F7:D4:07:84:8B:3B:12:63:FD:A8:70:52:29
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:47:cd:f0:8b:84:a9:9d:93:9e:0e:7c:46:90:66:3f:1e:bb:
38:51:6d:2f:28:10:a5:cb:a9:ae:12:c5:bb:bb:2e:50:2a:2e:
89:f3:99:df:e9:bd:3c:6e:8e:1d:e0:2a:ac:f0:6e:42:92:12:
f2:4d:32:6f:1e:4d:e1:4d:c1:40:5b:93:53:66:12:9a:a4:bd:
9f:a3:2a:63:c6:4c:9a:d9:2a:85:3a:10:e0:4b:a0:7f:bc:2c:
92:c5:1a:83:3c:c9:38:52:77:33:05:a1:ab:8c:4c:ce:01:e8:
ce:bc:0f:62:3d:d2:e4:db:e3:8c:91:e0:e9:d5:07:4e:db:f8:
72:1c:d2:83:64:bf:45:c2:8b:57:61:01:36:cd:d7:cc:61:dc:
b7:99:a3:ba:22:10:cf:ac:c8:e6:81:29:89:55:79:65:8e:b4:
38:71:01:e9:b3:56:80:b6:4c:1d:5d:44:87:a6:fa:ec:c2:63:
10:ab:cf:f1:08:b0:88:3d:66:be:8e:f7:50:d2:19:35:2d:fc:
36:79:de:48:43:1d:c7:07:74:98:38:7e:f0:40:6c:fa:e4:25:
d2:71:76:e5:9a:70:04:25:e0:ba:10:69:a9:1f:29:f7:98:a4:
16:4f:bd:d7:a2:df:00:fd:c0:79:a6:69:2d:e7:55:33:d0:73:
50:9c:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:26 2026 by rpki-client