Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: zPkoE/jq+jhPTAYnCctJC00XKRKd057ijfCwUjq2Tak=
Subject key identifier: 4D:61:16:42:14:06:A7:61:00:D9:0B:9F:8C:E7:AE:0E:45:6F:20:10
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 019F9211B12D3FA9917BD88351DEB0DBE36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 10B1
Signing time: Fri 24 Jul 2026 03:01:00 +0000
Manifest this update: Fri 24 Jul 2026 03:01:00 +0000
Manifest next update: Sat 25 Jul 2026 03:01:00 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: pQfnLHDra8wl5OOdfycVG+5BW03znB9nTo2qxMRjcfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b1:2d:3f:a9:91:7b:d8:83:51:de:b0:db:e3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Jul 24 03:01:00 2026 GMT
Not After : Jul 25 03:01:00 2026 GMT
Subject: CN=4d6116421406a76100d90b9f8ce7ae0e456f2010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:78:97:f2:2e:d7:3e:ac:30:c5:bf:57:c3:
f8:4f:49:31:e0:d6:16:74:66:bf:bf:e2:fb:b2:db:
91:0c:2d:e8:62:3c:53:dc:2c:4e:24:d1:e7:81:64:
3f:74:30:1d:3e:eb:de:80:12:6e:4a:c8:57:25:91:
51:e0:ef:19:e8:26:56:f8:0b:96:d7:d0:c8:ac:1d:
87:9d:85:67:ff:13:15:bf:ae:36:82:54:5b:fe:04:
fa:71:b0:05:c8:77:c1:34:c1:d7:a1:aa:bf:f4:83:
eb:6f:70:06:54:23:fd:df:b9:4d:5e:dc:5c:51:35:
5f:72:44:f9:43:4b:a7:e8:e0:2c:7f:39:7f:23:cc:
5b:02:1e:00:1d:4f:2f:dc:05:b8:70:11:01:a2:30:
19:18:49:c6:e1:81:07:2d:63:4c:fa:6b:d1:18:02:
81:c0:1a:5b:a1:50:56:be:61:5e:d0:75:f5:cb:90:
f2:4e:56:78:5f:6a:60:03:c8:27:05:3a:00:bf:69:
c9:01:af:1e:26:f4:21:04:01:f0:40:04:97:b6:4c:
4d:27:e6:00:7a:2e:28:d7:29:e0:27:55:5a:f8:8b:
49:3f:2e:84:21:c9:b5:f2:3e:ae:fb:85:ae:90:88:
de:4b:a7:03:bc:06:9e:a4:91:71:74:17:80:40:02:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:61:16:42:14:06:A7:61:00:D9:0B:9F:8C:E7:AE:0E:45:6F:20:10
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f3:17:74:96:b4:9d:e1:19:01:dd:42:e7:ab:48:97:54:2b:
a6:f8:13:a8:98:81:c1:67:32:da:1b:eb:74:12:74:8b:4f:4b:
d5:d6:77:c8:79:29:f1:c8:2e:6b:ea:e6:7d:2a:c6:a2:49:a8:
cc:8a:86:a1:ef:2d:15:3c:c1:80:b7:86:0c:9f:9c:5a:ab:23:
a7:da:29:7f:f9:96:c0:94:0d:40:8d:b6:a9:e4:57:5f:45:68:
e5:5b:8b:ea:c8:49:f4:11:b9:65:21:1c:f4:0d:62:ca:0c:df:
4b:ef:3e:32:33:7e:aa:6b:a9:1c:90:86:1a:e6:a9:e6:9f:cd:
6f:a4:ff:b0:e8:33:25:6c:96:7d:e0:9f:f2:47:ad:6f:17:7c:
b4:8b:42:d9:2e:6c:fa:7a:70:75:53:42:18:2b:5a:24:31:9f:
88:1a:89:93:9e:1a:c9:f2:4f:1f:2f:e6:e1:0f:c7:ff:5f:a1:
23:ab:18:c2:c9:3f:94:7c:8a:08:6d:c8:43:73:79:6a:ca:90:
a6:2b:70:f2:9b:05:5d:8e:2d:08:5e:f4:63:72:52:56:49:79:
ef:80:8a:cd:89:36:f7:6a:e2:4c:d1:f7:aa:30:87:fe:fe:78:
a2:20:46:cd:39:c5:a6:60:8f:28:51:6f:b2:f6:d8:95:c6:16:
4f:af:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:29 2026 by rpki-client