Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: D8xzb3Yu535kbX07Ym8ChvbyjXtebypypSjlNbRqW+0=
Subject key identifier: 55:A0:1A:9C:4E:9C:EC:EA:92:C5:73:17:7C:60:16:48:F8:B0:53:B8
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 01A0F18B8E1055499997C5B2DD785605E6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 1780
Signing time: Wed 30 Sep 2026 09:00:49 +0000
Manifest this update: Wed 30 Sep 2026 09:00:49 +0000
Manifest next update: Thu 01 Oct 2026 09:00:49 +0000
Files and hashes: 1: CCOsqAacrS8dBTl4tQBwpoCnadM.roa (hash: YYtqMm75d9ZnPheKTmSgCCjQh+tr4ThzJq28f22P15I=)
2: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: X4e77M09OUibHBn4YLP7sMb5uiQ6XMvv+IlfSJJpUzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:8e:10:55:49:99:97:c5:b2:dd:78:56:05:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Sep 30 09:00:49 2026 GMT
Not After : Oct 1 09:00:49 2026 GMT
Subject: CN=55a01a9c4e9cecea92c573177c601648f8b053b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:cf:e9:05:92:0a:61:19:28:ce:d6:ca:0e:
d7:1d:31:3a:1a:2f:a6:54:e1:ec:6e:f8:70:ba:c1:
c8:63:bd:47:95:47:3a:31:79:52:0f:55:c5:ab:b7:
32:93:4a:10:cc:9f:41:4b:1f:dd:b1:c1:02:77:1f:
d9:3e:05:cb:ed:5e:25:23:e2:fd:ce:b5:83:6e:99:
00:ec:36:03:d9:0d:8e:0c:51:41:a0:bc:ce:c6:14:
75:90:48:fb:27:f9:20:1f:c8:75:56:1b:bf:48:32:
6b:f7:67:3d:ac:92:13:2d:cb:29:50:1b:ed:2a:2c:
d1:d0:0c:9d:17:d4:81:ad:d0:c7:53:37:3b:c8:b5:
b3:4e:9c:fd:0d:54:11:48:10:aa:e0:c2:1f:db:d0:
94:2a:7b:79:68:73:bd:6b:94:0a:b1:ec:76:f7:7d:
97:b9:18:0c:79:ae:b1:7a:9a:67:e4:3e:71:b5:10:
bd:3f:49:af:b9:89:91:92:e1:bf:64:14:26:8d:a9:
1b:c0:c2:68:23:bc:6c:d1:3b:f8:75:29:69:ba:23:
75:d8:8c:e3:20:a8:30:83:04:81:6b:de:1a:d6:30:
20:90:7b:4f:ce:06:a8:8a:44:8d:b6:7c:13:43:5b:
ab:d5:42:9c:a8:c9:b8:2a:2c:4d:66:b8:11:43:b5:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:1A:9C:4E:9C:EC:EA:92:C5:73:17:7C:60:16:48:F8:B0:53:B8
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a8:f1:7c:d3:13:27:a2:cf:ee:e7:f3:4e:5c:27:a4:49:2f:
85:db:2f:73:e5:1a:1b:dd:73:2b:9e:62:a0:ad:17:94:73:c3:
68:83:19:66:42:cf:4a:88:6d:a3:ef:e8:61:e3:b0:23:3b:2f:
a2:6b:d3:51:d8:49:b8:38:c0:ce:0a:b3:51:b8:e2:39:88:e4:
11:56:8b:4b:92:30:3c:5e:5e:39:61:e0:aa:fa:b2:b7:1d:bc:
6c:6a:60:40:9e:8e:73:cb:cd:fd:75:eb:35:5d:99:bc:11:83:
f0:d5:bf:05:16:67:3b:e7:03:26:b1:da:64:7d:77:4c:04:3e:
89:4a:34:c9:cf:e6:da:50:f5:33:e2:70:bb:25:1a:19:5a:fb:
c6:fc:67:97:82:16:f0:f6:a7:1b:08:07:7a:7e:11:b9:3e:e6:
e9:b7:df:f0:23:47:f1:5e:57:48:80:2b:94:4b:91:f8:97:b0:
ef:c7:3e:bd:74:e4:d3:38:3e:55:ea:bd:a6:ec:ed:ef:d0:ca:
28:1f:53:7e:0b:8a:f9:3e:25:a3:7d:9a:28:96:85:26:15:2d:
f9:84:0f:11:2e:88:b2:d6:5b:1d:d2:3d:1e:4a:1b:90:86:5a:
21:4e:93:7c:cd:e7:c9:a4:14:6f:20:02:a8:ba:e3:98:ae:aa:
47:5f:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:52 2026 by rpki-client