Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: Oqsv6WaaiJz6lv2gw29L9MCnO6Ok+k3jcYQ46p4ejpc=
Subject key identifier: 9D:4F:FE:5A:12:17:26:44:E7:B4:DE:A8:D9:51:7F:BB:AC:C2:37:67
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 01A1CB8DDEB5EDF6D60C773D80FF6536016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 1AF3
Signing time: Wed 11 Nov 2026 17:00:34 +0000
Manifest this update: Wed 11 Nov 2026 17:00:34 +0000
Manifest next update: Thu 12 Nov 2026 17:00:34 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: yfwwBo+oBRCFov1u8X+ZViuu+YxwphM3+OefluTLomI=)
2: PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa (hash: H/8+GgNdJOZH+P5jx7Yl7IzwfogX3Vj/jZBL/Jyz7y8=)
3: fFg7BMRzleH625x9WdiXPcleSgg.roa (hash: VJ0RLkXcuNA4Y8CWLeS6/R5pD7ua0+mj6mlNZsFqI9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:8d:de:b5:ed:f6:d6:0c:77:3d:80:ff:65:36:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Nov 11 17:00:34 2026 GMT
Not After : Nov 12 17:00:34 2026 GMT
Subject: CN=9d4ffe5a12172644e7b4dea8d9517fbbacc23767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:57:07:bb:87:21:42:73:19:f7:ba:1c:16:
7f:79:68:bc:94:80:ad:2e:08:40:6a:e7:06:4b:2a:
f6:ba:69:e6:02:2a:8d:5d:74:6a:be:94:fb:aa:ed:
3f:a6:69:e7:88:4c:09:0c:ba:6f:9d:48:f7:b3:db:
fe:b2:9b:01:92:36:88:c0:21:72:1b:c3:96:c3:8b:
45:c5:3d:05:c0:44:2e:6e:31:a2:d6:6d:f7:e3:01:
71:b0:10:95:ce:8f:1b:53:90:92:32:db:a3:7b:80:
04:4e:be:ec:b2:23:76:ef:93:ae:5a:1e:4b:3e:0d:
90:1c:76:a6:b8:d8:bb:8e:b8:76:1b:6a:43:3a:b6:
d6:d7:f8:31:20:f9:46:ff:1d:93:2c:5b:ce:b6:86:
37:d3:19:df:c8:d2:a1:98:f8:ba:33:3d:fd:b5:59:
90:dc:a7:db:4c:fa:c0:81:fa:ce:a6:08:fd:c1:ce:
e7:30:40:b2:ec:e7:1e:c6:ee:d6:26:6f:b5:1f:1c:
ea:46:97:de:9d:55:20:55:65:bb:60:f2:69:6a:9f:
a5:c5:9a:36:1f:6a:f3:9c:c3:cc:ff:a1:37:a8:d4:
5a:5b:2e:2c:d8:1d:79:81:d3:60:2a:5d:4f:31:23:
4c:9f:c6:ef:ab:f4:14:e0:21:47:66:32:b7:8b:e9:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:FE:5A:12:17:26:44:E7:B4:DE:A8:D9:51:7F:BB:AC:C2:37:67
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:7b:26:93:8f:e3:9e:54:62:ee:94:7d:c4:eb:57:02:c8:
c8:7a:bc:b9:47:94:bf:f8:ba:01:eb:26:26:ef:0f:eb:80:d0:
75:b1:24:6d:51:e6:26:b4:bf:0c:5d:4c:7d:14:8e:55:0e:cd:
1e:17:d0:7f:ad:47:83:95:b5:94:6c:79:24:14:20:06:6a:95:
c3:ed:ac:f8:f6:cf:44:ae:44:05:37:e8:4b:fc:22:82:f0:d7:
33:42:81:59:ea:c3:c6:b5:8b:cc:84:ba:b7:27:3a:59:50:e9:
f8:6a:7c:ae:78:54:44:75:8e:16:7e:76:b9:b6:5e:fd:5d:cc:
c6:f4:4d:d7:f2:80:61:cf:f6:8c:3c:1f:ad:10:37:7f:73:27:
00:11:39:9e:f4:af:08:04:78:2d:22:39:ef:18:e6:6e:f1:9b:
26:84:86:d7:52:13:e8:78:93:85:1e:03:28:ff:a5:f8:49:c7:
90:55:b5:e8:90:b8:95:7c:83:73:55:27:6f:07:27:65:4a:f5:
c7:95:e8:77:ec:e6:07:b6:f6:24:c2:d4:f3:ea:eb:99:e5:4e:
b7:3c:31:63:e6:32:80:0a:43:86:58:e1:bd:0d:c9:0b:55:16:
2b:43:6b:49:d0:16:80:bc:19:33:e5:3e:5f:b6:1f:ff:cf:51:
0e:e1:65:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHLjd617fbWDHc9gP9lNgFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4
NDE3NmIwHhcNMjYxMTExMTcwMDM0WhcNMjYxMTEyMTcwMDM0WjAzMTEwLwYDVQQD
Eyg5ZDRmZmU1YTEyMTcyNjQ0ZTdiNGRlYThkOTUxN2ZiYmFjYzIzNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdFXB7uHIUJzGfe6HBZ/eWi8lICt
LghAaucGSyr2umnmAiqNXXRqvpT7qu0/pmnniEwJDLpvnUj3s9v+spsBkjaIwCFy
G8OWw4tFxT0FwEQubjGi1m334wFxsBCVzo8bU5CSMtuje4AETr7ssiN275OuWh5L
Pg2QHHamuNi7jrh2G2pDOrbW1/gxIPlG/x2TLFvOtoY30xnfyNKhmPi6Mz39tVmQ
3KfbTPrAgfrOpgj9wc7nMECy7Ocexu7WJm+1HxzqRpfenVUgVWW7YPJpap+lxZo2
H2rznMPM/6E3qNRaWy4s2B15gdNgKl1PMSNMn8bvq/QU4CFHZjK3i+n9AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1P/loSFyZE57TeqNlRf7uswjdnMB8GA1UdIwQY
MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt
ZTFhY2EwMTA2MmZmLzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm
LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafZ7JpOP
455UYu6UfcTrVwLIyHq8uUeUv/i6AesmJu8P64DQdbEkbVHmJrS/DF1MfRSOVQ7N
HhfQf61Hg5W1lGx5JBQgBmqVw+2s+PbPRK5EBTfoS/wigvDXM0KBWerDxrWLzIS6
tyc6WVDp+Gp8rnhURHWOFn52ubZe/V3MxvRN1/KAYc/2jDwfrRA3f3MnABE5nvSv
CAR4LSI57xjmbvGbJoSG11IT6HiThR4DKP+l+EnHkFW16JC4lXyDc1UnbwcnZUr1
x5Xod+zmB7b2JMLU8+rrmeVOtzwxY+YygApDhljhvQ3JC1UWK0NrSdAWgLwZM+U+
X7Yf/89RDuFl3A==
-----END CERTIFICATE-----
Generated at Thu Nov 12 04:48:53 2026 by rpki-client