Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: B2uGxJLcQqhhqCWPGJhV8xBnoy7zEjNZSVdX+ZeDvmE=
Subject key identifier: 06:5E:2A:0C:32:99:49:EE:04:F7:61:3F:C5:AE:F3:2E:A0:3E:3B:87
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 019D25F1C908F3A217DA809801162BF10B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 0BE3
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: HdluTxXl-pWaHGWyDsEkzMIGqPk.roa (hash: 3QRrZkPi7nW4Xst1si6pXGHNP7cktniynmG+cW94wv4=)
2: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (hash: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM=)
3: TsdNQD-ii_AJJKvRxzoA6e18eOY.asa (hash: MN5JLEUCVUn9RZ966N3nhNhFms77tb7Wz1RFZB7pjz0=)
4: _WOzrOOEaw0M1QQC2qKDkPSA1xg.asa (hash: YHkFhzYhWSquY7kwqlUWNVc4nw7ZgDDix9HeI13BrFs=)
5: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: Y8B0ExSrcajzzjwJ/kzIyfHzoQMtiC/tD7YbmXEGH68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c9:08:f3:a2:17:da:80:98:01:16:2b:f1:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=065e2a0c329949ee04f7613fc5aef32ea03e3b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:0e:29:9d:88:2e:dd:af:96:51:54:db:5d:
8a:ff:7f:00:f9:72:86:fc:63:88:a8:b4:ba:26:c5:
ca:1e:87:26:9c:cc:6d:9f:ce:f8:a1:c7:88:57:79:
d6:5f:5d:34:6d:59:8e:fb:5e:1c:91:d7:f4:9f:83:
f9:06:32:94:a2:d6:92:74:74:f4:34:ec:fe:9b:12:
db:56:d0:5d:61:ff:69:22:56:ea:69:34:5f:e0:bc:
cc:1f:c5:9f:5b:a0:b2:a0:07:00:d9:f9:db:7b:25:
37:b1:8e:7d:71:f5:7d:ee:8b:eb:e4:64:22:28:75:
10:53:43:83:bb:33:f1:43:42:30:01:cc:6c:1c:c0:
0d:97:41:c9:a7:45:1c:5b:64:2a:65:4e:67:b1:c5:
05:6d:6f:60:09:27:6a:b8:72:30:8f:17:69:84:05:
5d:76:51:c4:89:16:ed:3d:67:4c:4f:95:03:cb:62:
02:e8:4c:ba:b5:c4:3f:95:5d:9f:df:4e:ed:0d:f9:
b7:3c:cc:fe:48:9c:69:5a:4c:fc:43:ce:07:6c:ad:
55:ab:6d:15:85:17:73:d1:4f:9d:0a:e0:6c:54:e4:
29:4c:39:5e:eb:ae:1d:bf:e2:97:ce:a1:0d:3d:98:
e4:9c:cf:e2:04:08:6b:e5:54:54:51:87:47:e4:56:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5E:2A:0C:32:99:49:EE:04:F7:61:3F:C5:AE:F3:2E:A0:3E:3B:87
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:28:6c:3f:22:01:c0:0b:58:f8:fe:e1:7e:0e:e2:e7:70:1b:
ce:5e:7f:ec:c8:d9:92:1b:6e:38:9f:c1:29:1c:ed:f4:19:a9:
44:c8:6b:c4:6b:d7:47:20:9d:b2:77:d6:9a:e8:68:5b:72:38:
c7:8a:6d:fc:cf:49:e2:6c:6a:b8:ce:e0:67:d6:79:19:4e:cc:
57:b8:3b:80:e6:f0:02:f4:c4:38:ad:aa:cc:79:04:a8:3d:16:
ed:b1:4c:86:07:4a:e7:6e:03:40:05:66:a6:96:20:0c:fa:72:
51:bb:cd:e7:c4:25:a0:00:68:a6:ae:bd:06:fc:de:e1:fc:f1:
0c:a1:34:b0:a6:4d:ab:df:4a:c2:9c:19:82:06:79:4d:44:84:
14:57:09:1b:c8:68:07:c3:04:59:f8:0c:ad:51:91:18:e0:f2:
41:75:27:54:c6:10:53:1b:c0:67:54:7b:db:d3:76:ec:4b:ce:
24:85:02:21:66:4b:5c:18:68:df:8e:fb:04:44:8b:0e:66:34:
4b:f0:c5:1f:89:84:6c:08:a1:de:35:fc:48:d2:e8:85:15:0c:
74:87:05:8c:bb:5d:1f:df:c0:6c:43:56:d9:d6:66:03:62:ba:
be:2b:ec:12:7d:21:1b:38:f4:a1:58:b1:c0:3f:eb:55:6e:01:
c3:4e:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:30 2026 by rpki-client