Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: wRFQEV6w3FqbQvobqT2/HcBYmCGJ/JDuN+ObJCqTVHA=
Subject key identifier: 8E:8B:00:60:C4:3D:D5:D5:3A:A0:4B:64:A9:E2:6E:15:85:3E:86:43
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01A0D1C9638F42C2CFBF7103B660636DCA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 05:00:31 +0000
Manifest this update: Thu 24 Sep 2026 05:00:31 +0000
Manifest next update: Fri 25 Sep 2026 05:00:31 +0000
Files and hashes: 1: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: Mc4YhsYh6uLZV5R+b7Xh0CTVEmTLUhbD40mg6zOKfVE=)
2: CZyTJuOlnq-ky9dbEConr41Bm38.roa (hash: 5rtJlpCqmLKREoblfIHZUZwHo3e3ekq4hHO8j58CnBY=)
3: euKoI7vmey1fTPE04HoSqLuDz4Q.roa (hash: 32wDb/N882DtoqSetNBAzx24jUXx/OWTovG5eWeLxNM=)
4: jH6Kf-tfYBLVkCwlhSp3lBJ6KCQ.roa (hash: m/C4McZFMkjpAqtTsTyqkoINmbz3Lx0YilvVZ7bpG9M=)
5: rWvQJ8xO6-SPDys-uWKDLRUA43o.roa (hash: zHIdrKZtf58ZqctGwQ2WHJ41AOjM3MPJlFFP2hW5ctw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:63:8f:42:c2:cf:bf:71:03:b6:60:63:6d:ca:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Sep 24 05:00:31 2026 GMT
Not After : Sep 25 05:00:31 2026 GMT
Subject: CN=8e8b0060c43dd5d53aa04b64a9e26e15853e8643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:00:ee:9c:e7:02:c1:6e:72:43:59:71:d2:
e3:c0:0c:1c:6c:19:36:1e:d4:26:83:10:a7:d0:b3:
2c:74:aa:03:5c:e9:f8:38:c6:75:8e:53:c9:26:f4:
f9:a9:dd:a5:28:3b:4d:d2:7c:9e:73:5d:03:5c:e1:
0a:2c:3f:52:dc:09:f2:05:d3:29:40:3b:d8:11:e7:
6d:66:bc:3d:6d:2b:39:ea:5b:cd:0e:f3:b3:e6:10:
5d:87:16:68:37:bd:e8:85:af:ca:f5:24:91:67:fd:
c3:57:b1:ee:61:a2:42:87:ab:01:c9:47:8f:e6:e2:
28:f0:fc:6f:c2:71:06:48:3a:61:32:f3:5f:75:00:
9d:0c:87:3b:69:71:da:a9:cb:ef:79:2e:93:a2:e3:
e4:01:0e:22:40:4f:81:cb:e0:30:d8:3c:b4:ba:5b:
cc:a2:02:71:43:1d:a9:19:b8:4b:44:dd:d2:a1:9f:
f5:a3:80:51:7b:19:5c:68:ee:63:64:fd:31:27:f4:
9f:7b:ec:3b:3f:00:89:23:80:44:84:53:5e:95:0b:
6f:a0:96:f6:af:04:06:55:7e:aa:f8:9a:6f:7e:ec:
84:33:55:cf:24:cb:04:48:ce:99:a2:6a:f2:57:91:
31:76:51:00:38:82:86:c9:49:58:0e:7d:7d:ea:28:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8B:00:60:C4:3D:D5:D5:3A:A0:4B:64:A9:E2:6E:15:85:3E:86:43
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:c0:ad:03:77:93:41:fa:46:01:40:ee:b8:73:19:a8:33:
d3:c0:8e:b4:86:62:c9:a5:ed:20:3a:7c:b5:0f:14:69:1f:c7:
46:c9:9a:50:bf:e6:d1:9e:f4:f9:58:ba:84:23:18:0e:e4:1f:
52:90:f0:3e:34:68:0f:ef:4e:7f:0b:e4:98:63:7b:b0:76:29:
08:e9:66:73:71:23:c8:45:9e:97:28:0c:31:46:0c:f3:82:4e:
b8:87:1d:c9:5c:47:d9:ff:01:a4:7e:39:4d:7c:c3:2e:06:7e:
ce:2d:47:73:24:28:11:a9:c6:f6:65:b3:1d:69:f6:58:88:7e:
13:e6:95:f0:d6:b0:11:11:30:b8:87:b3:17:42:fc:46:9b:5f:
2a:10:50:41:37:18:bd:a3:da:4a:15:83:1f:66:3c:36:45:f1:
37:18:f8:c1:04:6a:9b:13:c2:b9:ba:3a:c4:2e:f7:5d:de:98:
be:c3:dd:2d:72:b9:3d:a5:f4:1c:76:9a:ce:61:a8:6f:f6:32:
60:8c:c7:75:01:af:f3:c4:74:36:86:77:04:5f:23:ca:5e:e5:
ff:f9:cf:16:5f:c7:d3:a9:46:bb:c5:e5:4d:2e:23:4c:f3:62:
2c:b4:34:fc:c1:9a:d1:de:c6:8a:58:eb:db:c0:0e:b5:16:2c:
94:8a:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:07 2026 by rpki-client