Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: zaeWswciWe1B7wBvXlXGPdqmaTEBkYO6yUdb/PUTFh8=
Subject key identifier: AD:1F:BA:58:E0:F5:7F:0D:25:70:EE:D1:7E:BF:E2:FB:3D:5D:27:4F
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 019D2816A7F55F5A9DD8D5888005792A5442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 158A
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: CCOsqAacrS8dBTl4tQBwpoCnadM.roa (hash: YYtqMm75d9ZnPheKTmSgCCjQh+tr4ThzJq28f22P15I=)
2: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: 50wuquC2SwFL8R8Tj9jTxulI/qBqtJpCeqsY+McnZgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a7:f5:5f:5a:9d:d8:d5:88:80:05:79:2a:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=ad1fba58e0f57f0d2570eed17ebfe2fb3d5d274f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:21:70:6b:46:52:67:41:68:57:7f:b1:85:
64:6c:de:a6:ef:c0:3a:9b:c4:44:83:04:2f:07:7f:
fc:02:6b:db:7d:f1:17:97:30:9d:17:a3:72:97:95:
fd:03:a0:7a:c9:45:28:ec:5c:c2:5c:f6:b9:c1:6b:
25:82:ad:ce:3f:09:ea:b7:39:5a:f5:24:04:83:4a:
66:ae:a2:cf:1c:12:ed:40:c4:eb:5a:85:98:11:98:
05:1c:2e:b9:1b:6d:b2:9d:e7:c4:6b:60:e2:f8:68:
b6:8c:7e:19:b6:e9:30:c9:25:b3:e8:79:a8:8e:60:
cc:57:2a:ed:a7:30:0f:89:f3:5f:c0:ff:34:f5:bf:
04:50:f0:62:90:95:fd:b0:2b:30:ba:7e:7e:ba:52:
f6:16:6a:3b:dc:51:a6:13:00:51:2a:2b:45:02:56:
75:13:c8:12:63:cf:fe:f3:6b:0e:77:77:6c:89:55:
0a:fa:51:fd:2d:ea:d3:1f:fb:df:28:7d:0d:7d:ad:
b5:c4:3e:00:ea:ee:3b:cb:f1:40:b5:25:28:ae:1e:
92:7d:48:3f:4e:68:d5:41:40:8c:68:88:59:7a:8c:
d9:21:bf:f8:80:b6:df:c5:2c:14:97:e3:52:c7:37:
4c:e8:66:65:fd:4c:ac:09:af:0a:a7:46:fa:29:03:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1F:BA:58:E0:F5:7F:0D:25:70:EE:D1:7E:BF:E2:FB:3D:5D:27:4F
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:c6:d2:8d:32:6e:1b:63:20:78:15:1a:fb:83:27:a2:3d:
67:b7:43:31:4f:13:75:33:67:25:bf:24:f4:1c:ab:f6:47:35:
ff:7b:ee:b8:82:03:6e:14:12:b9:25:5a:f4:86:a3:b3:fc:b5:
ee:7c:70:1b:96:20:05:12:9e:70:09:f7:f7:76:d6:84:1e:31:
8c:8e:4b:e3:6a:1d:43:d5:30:57:af:02:9b:5b:3a:dc:0a:c1:
97:ea:1e:3a:76:a7:5f:36:45:2e:49:2d:83:ad:93:19:d9:b0:
fa:cd:92:47:b0:4e:21:1b:70:2c:cc:47:d9:9c:9a:1c:f8:fe:
63:4b:b7:f2:8b:65:f7:71:42:87:f4:68:24:b3:e9:89:69:ff:
e1:cf:a7:a9:5b:f7:00:fd:ce:b1:b7:61:8b:68:5a:45:26:4f:
b0:3e:36:3a:b6:a9:ab:40:cf:69:ff:4b:4e:af:fd:3b:71:ab:
c6:b8:67:f1:a1:82:0b:25:45:df:80:57:b1:55:f2:03:59:98:
06:6e:0e:1c:ca:ff:b4:a2:96:a4:8c:a0:32:24:a3:27:70:59:
60:ab:cd:ea:70:01:3f:49:f6:ec:22:b8:4f:b4:7f:89:01:79:
56:76:12:d8:41:41:0d:10:20:e0:4d:0c:6d:98:d7:b8:b2:d6:
75:b5:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:25 2026 by rpki-client