Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft (raw, json)
Hash identifier: 0JPMBolaB/GEV4uh4obO6ELsXxfhJU+wHC88yXnrcTQ=
Subject key identifier: F9:1B:7A:9D:79:04:6D:18:9C:77:59:70:75:69:67:34:41:4C:A7:F1
Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Certificate serial: 01A102B68F3A1E8A9DACF9A6EDEBE136519D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
Manifest number: 0282
Signing time: Sat 03 Oct 2026 17:01:20 +0000
Manifest this update: Sat 03 Oct 2026 17:01:20 +0000
Manifest next update: Sun 04 Oct 2026 17:01:20 +0000
Files and hashes: 1: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl (hash: o2TAKl6ZfC4G1mXSEagidoKIoJzJGMHRYf493m3re5Y=)
2: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (hash: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:8f:3a:1e:8a:9d:ac:f9:a6:ed:eb:e1:36:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Validity
Not Before: Oct 3 17:01:20 2026 GMT
Not After : Oct 4 17:01:20 2026 GMT
Subject: CN=f91b7a9d79046d189c77597075696734414ca7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:ee:33:69:b7:08:0e:9b:5f:9e:6a:cf:df:
80:ce:68:e2:1f:09:03:ef:56:c4:fd:18:63:dc:ae:
1a:d4:c2:68:ca:2c:99:78:a2:9f:2e:68:48:0c:40:
43:93:f4:5f:70:82:15:23:9f:a2:90:4d:de:3f:18:
23:3a:f8:70:64:bd:25:c1:db:f0:23:e3:30:62:59:
1a:6b:f4:fa:2d:ab:55:1b:c0:6c:cf:e8:3f:95:a6:
3a:72:a5:93:0f:45:8b:13:74:f9:09:f5:ac:e2:0a:
56:09:0a:37:2f:72:9d:bc:b9:98:b4:1e:b7:41:00:
27:50:54:6a:5e:1f:0d:54:04:c8:2e:a8:95:50:0c:
cf:be:a1:0d:2c:af:e5:f1:37:57:01:b5:ec:6d:1f:
cf:c6:38:1e:b7:ef:a4:93:1d:d2:d0:0b:4b:3e:83:
b7:95:ed:e0:09:ed:ef:80:c1:6b:d3:6a:8a:c2:e9:
8d:80:8e:74:9a:f4:e2:9f:8b:ae:ff:d6:21:7d:b8:
0d:b6:5a:c3:c9:84:77:44:f6:7f:b5:3d:14:2d:2d:
66:02:bd:4c:d5:06:73:f7:21:20:c8:c2:08:52:95:
a4:93:26:e4:fe:44:7e:bc:9d:c6:fc:07:a6:aa:2a:
0d:7b:55:92:31:e7:5a:0f:6e:bd:e4:7e:be:c9:f8:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:7A:9D:79:04:6D:18:9C:77:59:70:75:69:67:34:41:4C:A7:F1
X509v3 Authority Key Identifier:
keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1c:55:31:bd:f2:11:dd:50:18:ec:77:cc:e9:9a:6a:40:42:
f6:bb:f8:27:c2:2c:87:ef:81:34:60:08:65:91:68:fc:97:3b:
a3:40:f2:04:f9:e9:ec:91:d4:ec:28:7d:6b:ce:d7:62:88:f2:
ed:d3:1f:42:4e:d2:11:2d:0c:5b:8c:f7:ba:17:9c:f3:bd:0d:
6d:08:64:e0:03:19:03:cf:db:f4:d0:90:97:04:75:97:1d:64:
45:49:42:08:e9:dc:b3:ca:ad:be:45:6c:77:f2:2e:e5:3e:0d:
db:d1:2c:d6:a6:bb:f8:77:e7:c7:cd:6d:32:84:18:03:b1:2a:
0c:ca:a7:f4:33:82:45:77:3b:ab:77:3f:88:85:67:5e:24:85:
52:b0:a1:7a:31:67:73:12:ac:33:0e:f7:13:f1:6a:1c:b5:66:
68:22:91:a8:e1:4b:6c:72:d5:25:5e:a6:0f:9d:3e:40:fc:1d:
8f:5a:15:dd:70:27:39:6a:0c:98:6e:a8:24:0f:4c:8f:fe:1b:
21:e6:47:35:f2:67:f0:3a:db:8d:af:46:6a:4b:f6:07:a2:12:
bf:49:db:f1:83:24:f1:60:3f:3f:a5:61:a6:46:1b:ca:69:2a:
aa:bf:f5:7a:c0:d9:b8:7b:36:4e:b1:6c:14:35:0d:55:6c:a1:
b4:40:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:52:54 2026 by rpki-client