Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: OTZJILy9EBPLvbNzCIoNjr83mEX1FGPhQ199EbRcS+4=
Subject key identifier: C3:EC:DC:C2:42:1A:0E:EC:B9:C0:74:F5:43:71:B7:42:36:5B:1A:17
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 01A0CCA2F7E8C02ED92B0B638470C8401D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 05:00:27 +0000
Manifest this update: Wed 23 Sep 2026 05:00:27 +0000
Manifest next update: Thu 24 Sep 2026 05:00:27 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: 9gs7YFt7oyCfnyCIOl19jOZ+Dqsch0jDFDb1Q1pwM+4=)
2: PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa (hash: H/8+GgNdJOZH+P5jx7Yl7IzwfogX3Vj/jZBL/Jyz7y8=)
3: fFg7BMRzleH625x9WdiXPcleSgg.roa (hash: VJ0RLkXcuNA4Y8CWLeS6/R5pD7ua0+mj6mlNZsFqI9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:f7:e8:c0:2e:d9:2b:0b:63:84:70:c8:40:1d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Sep 23 05:00:27 2026 GMT
Not After : Sep 24 05:00:27 2026 GMT
Subject: CN=c3ecdcc2421a0eecb9c074f54371b742365b1a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:34:97:c5:fa:4a:ef:a9:d8:c5:58:7b:62:
c3:74:b2:01:9b:f5:4e:c8:c8:8d:a5:c4:c6:eb:5b:
54:fc:f2:72:0f:0f:fd:ac:29:95:d9:77:7d:de:79:
1c:b7:b4:12:04:7b:5c:c9:1f:4e:3e:d8:91:94:d2:
cb:0d:36:2b:3c:96:59:2a:5f:30:39:77:5f:f2:fa:
54:ce:ae:d4:43:6c:e7:f6:46:21:43:39:9b:33:11:
56:16:83:8c:94:0d:c5:15:81:52:26:59:3f:b3:71:
83:a4:af:7d:1e:59:53:ac:9e:18:69:4a:a4:e4:7b:
41:0a:fd:9f:af:e2:b7:e0:6d:c6:21:12:be:32:7d:
90:4d:68:c0:13:dc:f6:3b:c4:71:7d:32:34:05:8e:
a2:d1:e6:1d:85:3a:2a:a7:11:4e:9e:30:b9:58:6a:
8a:58:1e:bf:dd:4f:a3:fb:94:7f:3d:71:4e:30:5b:
b6:11:1a:f9:77:65:b2:6f:2b:21:32:82:65:6d:71:
0b:e2:63:6e:c2:76:da:68:cf:f1:b2:d2:24:41:a9:
45:03:92:6d:45:ca:46:d9:1e:51:34:2f:8b:e8:fd:
27:b0:de:08:9e:9d:16:20:08:5c:ce:52:cb:69:66:
d4:27:b6:09:de:14:b0:ff:f5:7d:c4:23:c0:da:e6:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EC:DC:C2:42:1A:0E:EC:B9:C0:74:F5:43:71:B7:42:36:5B:1A:17
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f2:de:f9:1e:8c:44:11:a2:dd:26:0e:c3:7e:9b:da:49:1c:
93:a7:69:72:30:e1:54:9e:91:4f:fa:2c:43:d3:6b:ea:04:78:
c7:2c:ea:68:97:a8:52:e0:f0:d5:0a:26:3b:e5:7e:6b:d4:5f:
20:ad:b3:39:c4:b6:41:41:f0:71:98:70:9c:e8:02:38:ba:45:
56:4e:c5:9d:e8:d7:bb:13:07:cf:84:fe:72:c1:7f:d8:3f:a0:
59:a2:7b:81:59:61:e1:a8:9e:35:75:e2:2f:7e:b7:67:7f:44:
e0:d8:a4:ab:ba:cb:2a:67:61:b0:21:94:c3:fa:42:81:dd:fa:
23:68:52:0e:c7:93:3a:bf:9a:82:49:cb:a5:ed:07:2a:cc:97:
7d:ad:86:6d:49:66:80:23:07:0d:13:f3:c9:15:dc:b8:d2:38:
33:1f:2b:ae:a5:23:19:da:fc:6a:1c:7a:7b:0c:4a:9a:39:4c:
33:1f:81:aa:a8:4c:6c:04:dc:b7:b6:6f:37:0c:32:60:23:be:
70:b3:85:e7:ab:96:6d:6a:26:48:59:c9:17:7c:4d:92:16:11:
5e:41:d3:0c:2d:6d:0f:9b:77:71:5d:30:ed:74:b1:c6:cc:db:
04:7c:ec:69:35:32:bd:8e:bc:34:b6:54:54:8e:6e:9c:f9:da:
79:ea:40:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:04:10 2026 by rpki-client