Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: ma3jJYhvYoxZa7iMHZi+lyYWenu0wOzlH76FPwlSTsY=
Subject key identifier: 25:3C:33:69:86:32:7F:14:7F:69:96:5F:CB:0F:CC:D5:56:C9:8D:F0
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 019F916D174482394A015B0CEAC973BB0C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 0C9A
Signing time: Fri 24 Jul 2026 00:01:13 +0000
Manifest this update: Fri 24 Jul 2026 00:01:13 +0000
Manifest next update: Sat 25 Jul 2026 00:01:13 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: DPfyhsxNdQ/+d7xsqvXgy9QqxFIGCJbbG7X4lZt+9xk=)
2: ty_z9F5F_f3BDR4ug7k-DhLsplA.roa (hash: aOrvfBJ3aIsm9B11VD3D1FcnWhZg8CPxpRJXlr1jiqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:17:44:82:39:4a:01:5b:0c:ea:c9:73:bb:0c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Jul 24 00:01:13 2026 GMT
Not After : Jul 25 00:01:13 2026 GMT
Subject: CN=253c336986327f147f69965fcb0fccd556c98df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:c9:5d:a7:ef:85:69:44:27:f7:f3:f4:d5:
68:05:c9:19:d2:9d:db:ef:62:c3:bf:fb:18:52:3a:
c3:25:0e:6b:27:9a:fd:56:0b:91:40:85:c0:c3:df:
4b:ab:dd:d9:9c:53:85:c2:b7:cd:3d:d1:e8:ce:14:
c0:26:e0:04:79:bc:8e:4b:7a:75:6a:84:e2:fa:bd:
47:3e:47:e4:97:f0:13:9a:b9:7d:e7:26:f8:53:31:
25:bf:c7:5c:25:e6:b4:40:85:2c:02:47:2a:e3:80:
32:d7:55:d4:3f:8d:e3:b3:77:9a:7a:50:47:4b:a8:
0b:fd:2d:69:58:b8:d9:41:1c:85:67:a7:8a:f1:2d:
53:6b:82:66:6b:22:00:6a:1e:5c:04:fe:10:3a:31:
3d:1c:3a:b5:f9:90:64:84:53:e1:75:d9:c9:14:bf:
a8:e5:0e:90:0c:c0:d1:7d:73:bb:57:fb:f3:91:33:
36:e7:a9:16:cc:6f:e1:f5:c8:0c:18:67:63:71:02:
3b:27:be:cd:48:d5:3c:ae:81:4b:87:d1:f2:83:3d:
8f:b5:7a:3e:16:8a:43:4a:cb:25:da:17:00:c9:f5:
3e:36:6a:2e:a3:cd:9a:0e:64:90:a1:5e:4e:85:0c:
3f:70:e0:17:81:d5:2b:8a:c1:03:5d:22:bb:e5:7f:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:33:69:86:32:7F:14:7F:69:96:5F:CB:0F:CC:D5:56:C9:8D:F0
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:38:77:a1:f9:ca:fe:bb:cf:57:a7:c5:bf:d3:8b:e1:39:3e:
4f:2e:31:7f:f1:80:b2:15:ea:f0:f7:b1:a7:c4:c8:05:7f:19:
b5:39:f5:0e:80:fa:c4:73:6a:a1:93:2e:9d:27:f1:8a:63:30:
31:7a:62:da:4c:11:66:80:91:43:1d:4b:79:6d:4d:6e:c2:88:
df:63:38:3b:48:b2:c8:54:16:cc:bc:f7:04:c0:5a:c3:11:c6:
1d:e7:8c:ef:06:b1:80:0a:53:a4:59:18:f9:19:39:1d:13:5f:
25:68:49:df:f6:c4:7c:9e:cd:71:9e:7a:ee:67:c0:f1:71:7d:
97:f6:85:66:26:37:1c:67:15:a7:ff:18:80:bf:64:e0:0b:c3:
b5:02:03:3e:f8:ee:c5:da:29:88:02:19:45:a4:81:59:31:23:
ab:fb:36:70:58:e4:e9:7f:6e:21:ab:db:4d:1f:92:2c:63:77:
48:84:ad:e3:08:e6:77:dc:33:62:57:82:8a:5e:76:a9:84:dc:
0a:17:66:05:66:c6:86:81:d6:e5:8b:6f:15:76:02:55:76:98:
00:89:4b:54:a1:69:c5:14:8e:32:9f:e9:04:31:19:1b:25:95:
91:a5:31:dd:d8:5c:ef:20:51:de:7c:cc:67:8b:29:a1:cd:7b:
93:56:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:56 2026 by rpki-client