
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: 1D3CFbnfnZphY5zQi+nd3hIHmi71wZeTt9bN1vCEM3o=
Subject key identifier: AD:4E:34:B6:6D:42:20:5A:ED:F9:76:71:69:A3:03:12:95:1C:64:A7
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 01A0CCA39AB2D4373E68CD5F7DC4498AF839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 0DC8
Signing time: Wed 23 Sep 2026 05:01:08 +0000
Manifest this update: Wed 23 Sep 2026 05:01:08 +0000
Manifest next update: Thu 24 Sep 2026 05:01:08 +0000
Files and hashes: 1: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (hash: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM=)
2: TsdNQD-ii_AJJKvRxzoA6e18eOY.asa (hash: MN5JLEUCVUn9RZ966N3nhNhFms77tb7Wz1RFZB7pjz0=)
3: _WOzrOOEaw0M1QQC2qKDkPSA1xg.asa (hash: YHkFhzYhWSquY7kwqlUWNVc4nw7ZgDDix9HeI13BrFs=)
4: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: 3UEPrqIWs4V3DHyLbubuM8ZVLmiLs8kUH7QkFR8C93w=)
5: mUzfsxNnbwnbzrFO6bbwJeRdqc8.roa (hash: WPhw5sZ8yc7m47awa7yiemQPPC2O/BN9I1sjAnPg0uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:9a:b2:d4:37:3e:68:cd:5f:7d:c4:49:8a:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Sep 23 05:01:08 2026 GMT
Not After : Sep 24 05:01:08 2026 GMT
Subject: CN=ad4e34b66d42205aedf9767169a30312951c64a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:56:76:1c:62:1e:26:59:eb:97:a4:fd:44:
88:31:f1:09:93:22:d5:59:92:02:75:7c:09:0e:d8:
fd:f5:4a:b1:ef:dd:86:7f:9a:94:a7:87:9f:eb:54:
a6:1f:cb:30:98:a7:96:1f:6f:e8:61:08:eb:3b:78:
61:0c:a5:02:1e:d2:b0:ff:4f:72:b7:06:29:21:bf:
c7:6d:a9:c0:8e:b0:01:22:99:82:52:5e:70:ae:cf:
11:a4:8b:97:f2:af:df:94:06:30:16:f5:80:a5:4d:
36:8a:da:b8:43:5e:88:b0:3b:c4:fc:47:a7:8e:42:
83:90:c6:ba:60:6f:f6:00:12:cf:e1:67:2a:4c:1d:
7b:1d:0d:8b:d2:19:23:32:e3:41:31:f6:f2:af:ad:
36:9f:23:71:20:d6:97:3e:a0:ff:26:a4:1c:10:d2:
99:ab:e5:15:59:23:9c:3d:03:27:b2:3e:3c:e1:d4:
1c:39:c0:54:d0:a3:2b:fc:81:88:5d:74:fc:ae:7b:
98:38:73:c0:15:67:76:d3:5b:37:ba:43:c4:a6:da:
2b:b0:47:b5:a9:ab:44:9b:4a:71:9c:63:3c:2c:f2:
d5:4a:37:6c:c6:4b:0f:48:01:bd:c5:c9:17:d2:c8:
73:a8:9d:aa:57:21:a1:63:76:0d:79:b1:53:b0:43:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:34:B6:6D:42:20:5A:ED:F9:76:71:69:A3:03:12:95:1C:64:A7
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:90:e6:ac:8f:a3:51:9d:90:ff:4b:9c:78:e6:12:4a:b1:2f:
5a:bf:2e:0e:df:d3:c3:db:58:24:a5:87:02:0c:a3:04:3f:23:
02:86:4a:96:06:3b:be:75:61:db:05:c3:e1:33:ba:42:b3:64:
49:41:01:49:19:5d:29:f3:85:13:11:bb:d1:98:82:4c:ac:2f:
5c:4a:af:b5:94:26:40:36:ec:3f:55:ba:6c:5e:d4:4e:fa:6e:
e3:69:30:8a:ee:83:5c:78:51:dc:14:b9:48:b6:61:2c:cf:81:
66:29:36:b3:85:27:46:61:84:d4:68:f5:5d:29:a9:85:4e:26:
22:e9:0f:78:f4:ef:65:b8:7c:a4:4a:5c:68:b7:a5:38:7e:38:
e8:ea:07:43:75:76:de:89:63:2c:75:e5:b5:00:cc:b5:a1:1e:
50:25:32:4c:67:82:3c:3d:e0:91:6f:d0:68:fc:05:0b:b9:ef:
2e:69:dd:96:e2:2c:84:b0:89:27:26:67:2a:76:fc:09:11:51:
37:68:5f:d9:ae:f3:03:d4:a9:9d:11:a3:c6:95:48:29:a3:fe:
21:57:2f:6a:d6:94:c7:8e:c0:41:89:06:9d:16:7f:88:09:6a:
ed:68:5e:69:da:70:e8:46:b0:d4:88:b9:7b:45:60:14:8c:1d:
1d:f4:2b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo5qy1Dc+aM1ffcRJivg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx
YWM3OWUwHhcNMjYwOTIzMDUwMTA4WhcNMjYwOTI0MDUwMTA4WjAzMTEwLwYDVQQD
EyhhZDRlMzRiNjZkNDIyMDVhZWRmOTc2NzE2OWEzMDMxMjk1MWM2NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1INWdhxiHiZZ65ek/USIMfEJkyLV
WZICdXwJDtj99Uqx792Gf5qUp4ef61SmH8swmKeWH2/oYQjrO3hhDKUCHtKw/09y
twYpIb/HbanAjrABIpmCUl5wrs8RpIuX8q/flAYwFvWApU02itq4Q16IsDvE/Een
jkKDkMa6YG/2ABLP4WcqTB17HQ2L0hkjMuNBMfbyr602nyNxINaXPqD/JqQcENKZ
q+UVWSOcPQMnsj484dQcOcBU0KMr/IGIXXT8rnuYOHPAFWd201s3ukPEptorsEe1
qatEm0pxnGM8LPLVSjdsxksPSAG9xckX0shzqJ2qVyGhY3YNebFTsEMGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1ONLZtQiBa7fl2cWmjAxKVHGSnMB8GA1UdIwQY
MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt
ZDY0Njc2N2M1ZjEzLzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz
LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5DmrI+j
UZ2Q/0uceOYSSrEvWr8uDt/Tw9tYJKWHAgyjBD8jAoZKlgY7vnVh2wXD4TO6QrNk
SUEBSRldKfOFExG70ZiCTKwvXEqvtZQmQDbsP1W6bF7UTvpu42kwiu6DXHhR3BS5
SLZhLM+BZik2s4UnRmGE1Gj1XSmphU4mIukPePTvZbh8pEpcaLelOH446OoHQ3V2
3oljLHXltQDMtaEeUCUyTGeCPD3gkW/QaPwFC7nvLmndluIshLCJJyZnKnb8CRFR
N2hf2a7zA9SpnRGjxpVIKaP+IVcvataUx47AQYkGnRZ/iAlq7Wheadpw6Eaw1Ii5
e0VgFIwdHfQrhw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:03:21 2026 by rpki-client