Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: mLHbbvc7I8Ajf3EmUv9uzX5FNxGJ2cSxXE/Ur1P2sDw=
Subject key identifier: 16:51:91:60:07:88:BA:13:EA:AC:8F:0C:98:CE:3B:9A:B6:2B:9F:E7
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 01A0D49439E2CCC58D94B3C308822A45775F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 1158
Signing time: Thu 24 Sep 2026 18:01:18 +0000
Manifest this update: Thu 24 Sep 2026 18:01:18 +0000
Manifest next update: Fri 25 Sep 2026 18:01:18 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: q8Ccbhtyl4lXmmGGqoDFUewzPRk/XoEpCbldWEQn0YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:39:e2:cc:c5:8d:94:b3:c3:08:82:2a:45:77:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Sep 24 18:01:18 2026 GMT
Not After : Sep 25 18:01:18 2026 GMT
Subject: CN=165191600788ba13eaac8f0c98ce3b9ab62b9fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:df:42:d6:43:f1:39:6d:c6:7a:15:51:ba:
53:d6:82:95:3e:e7:be:61:8d:e5:bb:1b:84:b8:b8:
fa:a1:4e:4e:be:74:3d:50:69:fe:b7:8f:81:1d:56:
a8:80:01:36:0b:ca:00:86:dd:e8:8d:88:06:6d:e4:
32:e9:9d:dd:b2:fe:89:c7:b2:8e:cb:f2:e4:61:22:
d0:81:b6:1a:72:0c:eb:b9:60:51:31:c1:84:d8:97:
63:ec:c8:19:52:fc:b8:76:0f:b5:f2:e1:68:19:5e:
c9:17:05:1d:8a:ea:0e:be:b3:1d:d8:0e:45:55:9f:
e8:a0:23:d0:4b:0f:d5:a7:09:8a:90:7b:57:c1:76:
49:3f:df:73:40:59:ca:7a:19:a8:5d:6f:8c:e7:1e:
df:29:0e:79:64:5b:c0:44:23:05:f0:46:e8:f3:a0:
62:31:1e:b1:70:0a:6c:9e:54:f0:f7:cd:46:32:46:
57:c9:54:dd:43:95:50:7d:0d:a4:2d:73:2b:19:ab:
06:c8:4b:7c:82:ab:9f:a1:0e:1d:3c:e4:8a:a1:3e:
ab:95:a7:e4:22:3b:50:e6:cc:5b:22:2e:77:a6:ce:
b7:84:dd:1a:25:35:17:88:2e:5f:34:14:bd:6d:6d:
8c:23:32:bf:0b:70:be:08:73:b3:0b:f5:90:e9:c9:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:51:91:60:07:88:BA:13:EA:AC:8F:0C:98:CE:3B:9A:B6:2B:9F:E7
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b0:60:89:7a:c3:b3:a1:ed:4a:97:1b:c3:a1:5d:0a:81:9e:
53:0e:40:47:97:12:9c:1e:fb:59:c6:0a:38:d5:48:1a:27:66:
ad:ac:94:1f:4b:06:be:37:61:d6:50:24:59:d5:89:ab:de:90:
23:d1:4b:5f:dd:2d:7e:8e:7d:c2:80:d0:d0:5d:0f:94:d9:9d:
26:f4:56:a8:8c:5b:89:1b:f7:a6:c3:80:b2:16:49:f1:97:d1:
eb:00:d4:6c:20:34:45:e1:65:de:cb:80:e9:da:40:e2:c5:10:
3b:3f:fb:a3:d1:90:34:8f:76:9f:5d:b5:47:2b:61:85:f2:47:
55:4d:7e:f9:38:6b:8b:53:4c:51:a8:2f:cc:b9:84:90:99:85:
91:69:e5:66:3c:e6:b4:72:dd:05:32:e9:ac:7a:32:cd:65:75:
a7:a4:dd:c9:bb:ab:48:ef:11:42:c1:f5:6a:2d:0e:bc:68:8f:
96:d2:cb:6d:00:ef:f1:19:45:52:8a:2a:db:8e:15:3b:b7:af:
2f:ce:33:38:93:ad:33:5c:35:6c:cf:66:97:a5:ee:a7:e5:6e:
8f:ee:bb:2d:ab:05:63:fc:6a:a6:ae:54:ba:4b:85:8c:18:2f:
ae:46:d2:ed:49:60:90:bd:00:53:ba:cd:6c:06:7b:56:01:c9:
60:16:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:12:01 2026 by rpki-client