Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: vnTK/DjeKjqBBpZQbscHIl6AJBGa55ssJpXN3Px4E3I=
Subject key identifier: 2F:44:EC:25:36:FA:F0:AD:3D:50:8A:33:7B:1B:8E:C9:A2:F0:F9:E9
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019E1D907B50A62855BD788BD6B38043BD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0627
Signing time: Tue 12 May 2026 19:01:08 +0000
Manifest this update: Tue 12 May 2026 19:01:08 +0000
Manifest next update: Wed 13 May 2026 19:01:08 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: EvSO9F9stbOwmoflXriYuBl9+PaQ8fCmJdArZFQudQk=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7b:50:a6:28:55:bd:78:8b:d6:b3:80:43:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: May 12 19:01:08 2026 GMT
Not After : May 13 19:01:08 2026 GMT
Subject: CN=2f44ec2536faf0ad3d508a337b1b8ec9a2f0f9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:0b:e7:8f:78:2d:b8:e9:c1:8f:9a:87:56:
23:ae:5e:fe:f2:37:22:71:e6:2a:6c:5c:ea:8c:29:
63:b4:63:03:60:85:12:4c:d3:22:5e:5d:01:3a:ee:
e2:5e:63:0b:83:1b:05:7e:a1:97:ac:f9:04:2c:28:
97:fc:ee:7e:34:cb:0f:13:77:ef:a7:cd:3d:fb:a9:
f6:f0:0d:9f:97:de:0a:d6:f0:96:ac:23:bc:09:fa:
d7:a4:69:0c:11:ad:96:f3:5d:81:a9:d4:64:c3:a4:
af:64:ae:b3:16:00:1f:98:7b:81:83:90:9b:2f:26:
8b:e3:5a:f2:25:c2:17:07:b6:77:42:49:a3:04:42:
c4:3d:54:06:b5:26:b1:15:53:c4:44:76:27:df:1d:
95:32:19:17:a0:b0:44:ca:d6:fc:6a:73:42:f2:43:
cb:be:d1:d8:49:ff:dd:d6:b9:42:96:69:7e:4b:7e:
88:3b:dd:6e:a4:0f:8a:cb:51:41:7b:ae:cd:c3:43:
1d:32:a7:90:a2:fc:7f:e0:85:84:64:33:37:18:20:
94:b7:63:1a:e5:b1:a0:24:5e:88:4e:96:3a:44:fd:
1a:e0:d4:06:c2:a3:c2:bd:26:5e:90:80:d3:c9:fb:
74:b8:46:9f:75:e9:5a:50:33:4d:5e:5f:76:c5:5f:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:44:EC:25:36:FA:F0:AD:3D:50:8A:33:7B:1B:8E:C9:A2:F0:F9:E9
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:35:56:32:6b:77:04:47:cc:3b:68:39:a8:c1:18:ab:e3:
27:00:f8:89:90:3e:0c:84:be:a0:45:7c:2c:52:91:7a:8d:5a:
6d:13:b6:d4:46:05:d4:76:91:80:87:0b:fb:0e:ed:38:75:1b:
a4:db:40:93:43:6a:3a:a6:62:ec:d4:33:60:93:6a:4d:1b:5c:
db:14:3a:78:5b:97:18:e1:ec:c2:1a:84:a1:8d:37:aa:14:ba:
65:83:ba:78:98:33:e6:c3:b8:fe:24:8b:4f:e0:8c:7b:c2:2c:
98:0c:13:68:38:46:da:38:27:db:ba:c9:1a:7a:48:4a:84:00:
1f:44:fd:8c:9c:68:c4:07:46:07:07:e5:51:3e:1f:17:1c:98:
a2:5e:31:08:0e:e2:f5:4e:f7:59:08:00:f6:a8:03:b6:de:9d:
ba:7e:4a:f5:59:41:01:f6:a1:9d:40:cb:c3:bc:63:36:f0:06:
ac:b0:63:25:7a:c2:2f:69:95:40:ea:50:c4:d1:7e:82:93:de:
fe:d6:4a:d5:a1:36:68:1e:99:f0:75:57:31:d8:0f:78:6a:37:
24:a5:dc:06:2c:6c:25:5d:39:62:6f:04:1a:54:04:3e:ad:88:
41:ac:4c:2f:47:bd:63:44:c1:e7:ce:ab:1e:94:3d:a4:52:a2:
61:d2:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:32 2026 by rpki-client