Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft (raw, json)
Hash identifier: fW/EQZolSinnt0VyPMEfXlZkkPAOT6pNIAjy7+iLwMA=
Subject key identifier: BA:0B:1C:B6:C7:E3:9A:2D:77:94:C4:87:7F:9D:5A:36:84:F8:E2:89
Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Certificate serial: 019F91DA76F469FB0D425BE7F772993F3738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
Manifest number: 01C3
Signing time: Fri 24 Jul 2026 02:00:41 +0000
Manifest this update: Fri 24 Jul 2026 02:00:41 +0000
Manifest next update: Sat 25 Jul 2026 02:00:41 +0000
Files and hashes: 1: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl (hash: Hs0/z1bl2/CtmEsBKs2knIkb1KVuPHqHI7HUwGmKW7A=)
2: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (hash: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:76:f4:69:fb:0d:42:5b:e7:f7:72:99:3f:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Validity
Not Before: Jul 24 02:00:41 2026 GMT
Not After : Jul 25 02:00:41 2026 GMT
Subject: CN=ba0b1cb6c7e39a2d7794c4877f9d5a3684f8e289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:5d:88:22:ba:d1:34:60:b6:42:12:90:89:
14:a4:39:09:d7:d8:ca:2d:cb:35:31:92:44:22:4d:
9b:e7:dd:4b:79:0c:9d:3e:9f:39:41:0f:67:32:68:
8a:b9:31:40:17:63:69:ba:ce:cd:5e:7e:0a:6f:4e:
5b:8e:23:71:06:0b:7e:d7:59:e1:05:a3:ea:47:e5:
0e:4f:2e:ee:3b:df:94:be:30:1f:6b:0b:7b:16:1b:
83:1a:0c:79:93:02:02:e4:92:e5:9e:03:ab:93:62:
8b:ee:3f:70:27:e7:e0:8f:79:44:0e:ca:8c:43:42:
2b:6d:d4:31:2c:99:05:b2:64:98:de:b9:2f:5e:46:
be:2e:d2:63:47:dd:78:e5:d4:04:1a:8d:05:da:ec:
ec:75:fd:d6:99:27:b6:31:53:3f:fc:2d:79:a8:72:
c3:23:c0:1e:0e:64:99:38:17:4f:89:31:76:70:b2:
5f:a3:77:13:7c:92:c9:37:4b:7a:cd:18:70:63:9f:
09:1e:b0:57:3d:6c:c7:c5:b9:6a:6d:f4:fb:f2:3b:
85:9a:f3:98:6d:12:87:6a:02:91:a7:e3:81:3f:aa:
0e:81:5f:da:4e:8e:ef:fa:9f:68:6c:6f:58:0e:4d:
84:ed:c2:02:a7:17:ae:32:a8:cb:5b:e3:6f:a5:e7:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:1C:B6:C7:E3:9A:2D:77:94:C4:87:7F:9D:5A:36:84:F8:E2:89
X509v3 Authority Key Identifier:
keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:07:1c:07:95:a1:a9:ea:b5:fe:8b:6b:a2:b7:8b:80:3c:a8:
51:96:1e:41:92:d0:67:55:1a:74:a9:5c:6a:19:e8:b0:e6:69:
d0:40:78:71:db:6c:e3:80:e0:10:48:a0:e5:2d:0d:7d:85:d9:
d0:3e:d4:7e:83:af:9c:42:69:b5:ba:78:92:e0:8b:62:1c:8c:
36:4c:80:0b:d1:20:23:04:2a:6f:c2:3f:9e:45:46:61:15:6f:
7a:6d:42:ab:53:d1:62:78:08:73:06:5b:1e:eb:b2:6a:ce:df:
2d:01:d5:81:ad:b3:48:92:fa:46:13:c8:69:e4:65:bf:8a:88:
cb:30:98:af:15:27:57:a9:f0:a2:72:11:ff:81:c0:e6:1d:1e:
05:c8:82:78:64:d5:31:07:d7:bb:20:08:88:a5:6e:b5:3b:f2:
7d:59:a5:d6:95:70:bd:c4:85:f4:89:a2:6b:ca:b7:10:a4:60:
a0:20:56:54:ef:c6:57:fa:03:e3:1f:d3:30:24:d5:60:06:c4:
1e:64:2a:f0:4a:42:56:7e:3c:dc:84:0b:c4:ea:f0:76:d2:fa:
3d:0d:a0:fb:8c:fc:7b:d2:c4:d8:3a:14:af:a1:b9:1f:14:3a:
32:9a:1f:fa:bf:2a:f5:95:5b:24:84:3f:0e:e7:2d:4f:d0:b4:
c0:af:c8:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2nb0afsNQlvn93KZPzc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmZjYjg3YzIyNDZmYTM4OWM0MjhlMGYxNTNlZGYyNTll
NTQ1MGYwHhcNMjYwNzI0MDIwMDQxWhcNMjYwNzI1MDIwMDQxWjAzMTEwLwYDVQQD
EyhiYTBiMWNiNmM3ZTM5YTJkNzc5NGM0ODc3ZjlkNWEzNjg0ZjhlMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpRdiCK60TRgtkISkIkUpDkJ19jK
Lcs1MZJEIk2b591LeQydPp85QQ9nMmiKuTFAF2Npus7NXn4Kb05bjiNxBgt+11nh
BaPqR+UOTy7uO9+UvjAfawt7FhuDGgx5kwIC5JLlngOrk2KL7j9wJ+fgj3lEDsqM
Q0IrbdQxLJkFsmSY3rkvXka+LtJjR9145dQEGo0F2uzsdf3WmSe2MVM//C15qHLD
I8AeDmSZOBdPiTF2cLJfo3cTfJLJN0t6zRhwY58JHrBXPWzHxblqbfT78juFmvOY
bRKHagKRp+OBP6oOgV/aTo7v+p9obG9YDk2E7cICpxeuMqjLW+NvpecqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoLHLbH45otd5TEh3+dWjaE+OKJMB8GA1UdIwQY
MBaAFG3/y4fCJG+jicQo4PFT7fJZ5UUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNjMzYTYtMjdiMi00MTc0LWE3YjAt
NmFlZGYxMDQzYzczLzEvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hNjMzYTYtMjdiMi00MTc0LWE3YjAtNmFlZGYxMDQzYzcz
LzEvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgccB5Wh
qeq1/otroreLgDyoUZYeQZLQZ1UadKlcahnosOZp0EB4cdts44DgEEig5S0NfYXZ
0D7UfoOvnEJptbp4kuCLYhyMNkyAC9EgIwQqb8I/nkVGYRVvem1Cq1PRYngIcwZb
Huuyas7fLQHVga2zSJL6RhPIaeRlv4qIyzCYrxUnV6nwonIR/4HA5h0eBciCeGTV
MQfXuyAIiKVutTvyfVml1pVwvcSF9Imia8q3EKRgoCBWVO/GV/oD4x/TMCTVYAbE
HmQq8EpCVn483IQLxOrwdtL6PQ2g+4z8e9LE2DoUr6G5HxQ6Mpof+r8q9ZVbJIQ/
DuctT9C0wK/IaA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:35:31 2026 by rpki-client