Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft (raw, json)
Hash identifier: /FidilNxql+K2YmFX4KSVi2w6cV1qNq8/S0MQkEmNh0=
Subject key identifier: 92:FE:9D:B4:30:59:26:15:9D:2B:57:DC:B7:BC:84:7D:43:91:51:BA
Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Certificate serial: 019D27DF6B46070CBB0EFEF2948B814BF07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
Manifest number: 83
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl (hash: PYgzj3NYaHYmbMo2Zo6Sjw9tK3jrzWaUI/jtJsDt1l4=)
2: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (hash: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6b:46:07:0c:bb:0e:fe:f2:94:8b:81:4b:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=92fe9db4305926159d2b57dcb7bc847d439151ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:de:31:23:e0:01:76:be:6b:c8:38:ff:c0:
79:a8:21:0c:86:ce:45:ff:ee:c4:67:db:4a:79:4d:
c8:44:68:31:78:36:9b:5c:aa:b2:c8:65:72:4b:0e:
6a:99:e5:73:18:0d:ea:7b:17:52:21:ea:b6:0b:c5:
b7:da:71:56:55:2d:80:75:7d:38:1f:15:b6:2d:77:
38:80:b9:2e:1a:68:51:75:62:ca:b5:0b:59:81:6f:
3b:50:55:5b:76:01:84:0a:1f:84:7a:4f:d4:82:da:
73:bc:dd:83:4f:58:26:c5:f0:a7:bc:53:0d:00:cb:
33:e6:a5:95:e7:76:ab:59:c1:3f:a2:57:3c:fa:95:
4f:48:b0:9e:64:46:35:b6:92:db:d5:cb:df:88:7b:
8d:9e:cb:9c:64:e6:1d:ca:9f:4a:9a:67:53:a2:82:
4b:b5:05:04:2f:d2:de:2e:90:10:16:2c:47:a1:a2:
58:f1:99:9d:1c:86:09:be:36:a1:1c:87:e1:84:1a:
45:cd:ed:fc:bb:76:32:5c:68:90:fb:59:ce:9c:58:
25:1a:7c:c1:69:d3:b6:78:0d:c6:e8:cb:b9:08:7d:
fa:1b:c0:6b:60:44:12:1c:d9:d8:eb:e5:d6:84:b3:
ba:87:cd:66:64:1d:b0:e4:d5:2f:eb:8b:c6:78:3c:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:9D:B4:30:59:26:15:9D:2B:57:DC:B7:BC:84:7D:43:91:51:BA
X509v3 Authority Key Identifier:
keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7d:ac:4a:b8:c2:b4:9f:11:b1:14:77:2e:79:74:a7:1c:37:
f7:82:b7:b8:f1:fe:22:7c:f0:61:46:52:cf:07:9e:af:d8:d2:
2f:6c:d7:43:04:7c:d9:46:2f:c3:5f:3a:9c:f4:ea:2e:75:c9:
1e:c5:61:b5:cc:01:45:61:d8:cb:37:2f:77:c7:a8:38:85:8b:
b3:49:2d:2b:53:eb:2f:df:9f:bb:e6:2c:73:5b:d2:08:4d:ba:
a9:b8:10:4b:7b:36:ee:07:d2:ba:16:f3:4d:bc:62:db:40:e7:
ce:9d:67:0d:98:43:c1:1c:37:44:66:02:6f:7a:64:6d:d3:18:
52:83:18:b3:92:e1:0c:54:13:36:f6:52:7e:e9:44:2d:dc:63:
2f:df:57:91:b5:1f:92:f8:af:ea:00:88:ed:7f:fd:f7:be:f5:
5e:7e:ba:21:83:4e:31:92:38:be:b5:0f:e6:4d:bc:a3:11:dd:
c7:72:ed:c7:3b:17:0d:e8:cd:0e:4a:ad:84:0a:d8:bd:33:1d:
b9:fd:21:67:fb:5c:ca:7f:5e:e1:8f:8a:4e:5c:83:6c:e5:a4:
13:30:eb:05:6c:16:8f:bd:9f:cb:16:f8:48:80:9b:b5:c2:7f:
1b:aa:71:5e:00:f9:8b:fd:04:08:e9:cc:9c:01:4b:0a:52:2a:
bb:eb:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:53 2026 by rpki-client