Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: tuosKVXG2gcs8yYzH7thBOkh+t7ZPbTRlsoBUiLbzyY=
Subject key identifier: 7A:FF:2F:C1:BA:B2:61:5E:5D:B5:AC:C8:9C:0F:19:58:3F:FB:C0:20
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 01A0D8DF503A3FF0BFAF24EE177D7DA1BE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 14F2
Signing time: Fri 25 Sep 2026 14:01:48 +0000
Manifest this update: Fri 25 Sep 2026 14:01:48 +0000
Manifest next update: Sat 26 Sep 2026 14:01:48 +0000
Files and hashes: 1: D3EXfnpLfks5hkWJ3JpH4AjPZus.asa (hash: YU9VXUO2KnpRtE3dCPlyXEXuMHPtxfhZzrU9FfAfgzM=)
2: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: A16RHu/DtM6lgRrD1WPVb2wQvVVRRC9CkhwqPNLBB+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:50:3a:3f:f0:bf:af:24:ee:17:7d:7d:a1:be:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Sep 25 14:01:48 2026 GMT
Not After : Sep 26 14:01:48 2026 GMT
Subject: CN=7aff2fc1bab2615e5db5acc89c0f19583ffbc020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:3e:4f:7b:a8:f8:8e:ff:2e:a3:d1:6f:62:
19:07:1b:0f:54:ac:56:e3:27:1d:15:f2:64:33:09:
79:e8:09:9e:49:80:0b:64:e5:18:96:09:e7:ea:09:
51:15:fc:df:13:65:cc:6a:58:c7:ec:74:f5:ea:de:
ef:68:ed:06:dd:0b:2a:d6:fc:cb:e4:a1:e5:a8:43:
a3:1f:00:da:b0:10:ad:81:d1:77:5e:a5:6b:c3:83:
47:85:2b:eb:ed:9e:f3:18:e6:46:fb:df:15:5b:8f:
8f:5d:4c:84:55:31:c7:3b:24:0c:db:28:c4:d5:e4:
4a:61:b7:52:4c:df:bd:9b:d7:19:1c:ad:a8:36:e1:
5a:37:a8:fb:e4:44:92:c3:7f:11:69:d8:46:d5:1c:
23:a5:80:8f:e1:90:5d:2f:47:37:f1:02:5d:98:ce:
97:ea:de:de:d9:24:ee:42:25:78:76:de:24:e6:2f:
fc:93:0c:c1:af:4c:de:3c:e4:f4:0f:f7:47:32:97:
28:ae:0b:73:fc:73:75:77:43:d2:28:7a:8e:d4:75:
2b:3b:ba:e9:9a:0d:6f:17:b1:ca:01:d3:49:3e:35:
d4:bd:a2:12:7e:67:90:42:63:2d:4b:6b:4a:9f:01:
77:ff:e4:56:cb:a7:61:3c:69:6f:6f:d8:8f:2c:c6:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:2F:C1:BA:B2:61:5E:5D:B5:AC:C8:9C:0F:19:58:3F:FB:C0:20
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:19:13:81:a1:ea:2e:f9:6d:7d:f6:d3:89:ae:1e:b1:ed:1b:
06:e9:1d:66:f4:c8:10:da:23:2a:2a:fa:30:2a:4e:45:34:d0:
cf:9c:20:92:60:3a:79:ee:68:b4:e7:5a:8f:0e:fd:76:25:92:
b1:1c:a2:d3:e3:4b:19:0f:dd:f1:74:eb:60:98:be:35:7b:49:
63:8e:35:d4:be:a8:69:8c:28:96:eb:18:cf:79:30:29:62:55:
a4:45:67:69:3c:7d:45:7e:3c:af:fc:38:b0:37:b5:16:31:61:
69:0c:af:b4:c1:9b:b0:28:93:6d:9e:f1:9b:10:fb:14:cd:d1:
86:9e:b2:0a:61:3b:ed:e0:ee:d1:da:88:73:71:b1:f8:0c:6c:
f7:0c:45:0a:6b:f0:15:ae:55:49:c9:ff:dc:af:45:11:46:f5:
d2:5e:9a:41:7e:6b:1e:59:1b:9b:36:1f:70:34:c9:59:9f:64:
2f:7f:6c:ad:6c:e5:ae:41:95:3a:bb:39:34:ab:c6:f1:25:69:
6c:93:40:27:55:cf:7c:f0:15:b8:92:fd:94:73:c2:1c:13:b5:
8d:65:6a:59:b7:c4:84:03:81:f5:2b:d5:2e:6a:f9:69:5b:5d:
c2:05:62:e4:1c:53:bd:82:9e:a8:1f:07:57:27:c1:88:84:5a:
6e:b0:26:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:08:55 2026 by rpki-client