Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: 8zoqRV2uHM3owaClzZRRzISPcUU+NgfJE3Pi5rHt/2Q=
Subject key identifier: 52:21:2C:D8:95:4F:B5:1A:F9:FE:76:49:5C:7B:BA:90:BD:85:98:EB
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 01A0CAB51F19C1459AEBBA1F54332B032EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 0DC7
Signing time: Tue 22 Sep 2026 20:01:02 +0000
Manifest this update: Tue 22 Sep 2026 20:01:02 +0000
Manifest next update: Wed 23 Sep 2026 20:01:02 +0000
Files and hashes: 1: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (hash: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM=)
2: TsdNQD-ii_AJJKvRxzoA6e18eOY.asa (hash: MN5JLEUCVUn9RZ966N3nhNhFms77tb7Wz1RFZB7pjz0=)
3: _WOzrOOEaw0M1QQC2qKDkPSA1xg.asa (hash: YHkFhzYhWSquY7kwqlUWNVc4nw7ZgDDix9HeI13BrFs=)
4: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: SQknozs2wEF+HQjeDgwJcQ2HMVv/Nl5KM6hqWk8+wxY=)
5: mUzfsxNnbwnbzrFO6bbwJeRdqc8.roa (hash: WPhw5sZ8yc7m47awa7yiemQPPC2O/BN9I1sjAnPg0uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:1f:19:c1:45:9a:eb:ba:1f:54:33:2b:03:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Sep 22 20:01:02 2026 GMT
Not After : Sep 23 20:01:02 2026 GMT
Subject: CN=52212cd8954fb51af9fe76495c7bba90bd8598eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:cc:d1:3c:82:ab:ac:ca:cd:ed:30:8b:c1:
1a:74:7a:e2:cb:23:09:8d:b9:b4:82:41:ab:61:c3:
41:7e:b9:dd:12:f6:03:6a:d3:f3:02:21:1e:fb:9d:
24:0a:dd:66:4b:55:99:3e:38:82:d0:ed:2f:8f:fe:
a1:d9:08:ee:0d:2e:49:8c:47:34:dd:6f:0d:7e:fa:
6c:28:a6:19:ee:26:f3:f9:f2:84:c2:6e:a4:02:8e:
3c:3b:aa:d9:90:56:63:43:04:fa:79:50:33:4b:30:
64:ec:fc:fd:8b:6a:0b:9a:c3:50:3e:a2:76:d6:54:
f7:77:96:fb:b0:d8:4b:9d:7f:39:69:ff:c3:4c:fd:
d2:d1:da:47:dc:0e:0e:38:fd:c2:40:38:07:b4:1b:
00:27:b5:eb:ce:8d:8c:b5:99:b7:0f:b6:e4:c9:15:
c5:0d:69:a8:06:75:8f:94:58:fd:d8:9d:ca:41:7b:
f6:72:50:ca:cf:9f:89:91:ad:b9:d3:db:26:11:50:
4f:b8:6a:4c:6c:f0:c9:4b:ab:f1:66:7a:fc:3a:dd:
10:fa:4d:95:b0:66:0b:66:30:38:6d:b9:41:d0:9d:
3b:3f:c8:00:83:c4:d4:66:3c:70:e0:74:9e:b2:e5:
22:b2:4c:ac:04:0a:8a:07:69:33:87:be:76:25:8d:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:2C:D8:95:4F:B5:1A:F9:FE:76:49:5C:7B:BA:90:BD:85:98:EB
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7b:f9:71:54:d6:7c:5e:db:a8:fa:14:59:81:c6:ee:ff:87:
cb:57:8e:35:1d:4f:f4:11:0f:f0:59:32:30:cf:a1:b1:43:cb:
79:43:d5:2b:1c:99:36:9c:ba:15:79:a7:66:2d:04:ca:f5:d9:
ae:ce:eb:6d:03:4c:c5:a2:b4:af:7b:8c:0b:0a:78:66:ec:0d:
a0:a1:82:76:86:66:43:b0:fa:09:f2:39:ac:e7:b9:64:0e:62:
30:97:cb:d9:a2:c5:bc:92:7d:4d:29:e1:d8:83:5a:77:14:f7:
7f:53:98:d0:e7:70:24:4b:77:d5:69:f7:9e:eb:46:51:4a:91:
f3:26:2a:bb:29:d0:05:03:3a:b3:9c:ba:ba:5d:2d:34:ee:0a:
90:47:6b:d0:83:91:78:44:6d:89:90:52:39:bf:1a:00:45:a7:
e1:29:dd:bc:2f:d4:72:0d:28:d9:d0:55:0a:4c:20:bd:88:a8:
69:88:e3:73:17:b2:9a:8b:11:e7:f9:6d:b9:6d:b0:1b:b0:4b:
1a:19:bd:f4:17:17:54:e0:09:e7:f0:a9:5e:19:25:4e:55:3a:
2a:6a:54:bd:20:11:a0:47:dc:cd:8d:3b:13:65:e4:59:ee:f2:
6f:bd:f9:2f:6a:a5:6c:19:9b:c3:7f:06:10:9d:b5:4d:56:e3:
ce:07:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:38 2026 by rpki-client