Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
File: bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft (raw, json)
Hash identifier: cAQjNbZSiyTUOU5Gdb+8jQav2JJiAVV0dwG3J2wFF6k=
Subject key identifier: 64:1E:9D:27:0E:6D:5E:29:5B:59:AB:F9:14:D5:BE:F6:E0:EB:44:21
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 01A0FF478CFE6CB958A89E7B3DB72A3F7271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
Manifest number: 1A17
Signing time: Sat 03 Oct 2026 01:01:14 +0000
Manifest this update: Sat 03 Oct 2026 01:01:14 +0000
Manifest next update: Sun 04 Oct 2026 01:01:14 +0000
Files and hashes: 1: bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl (hash: DJVmBE4kqef5Q+e9uhY5CkOFVTClgJmtaYkiGWJaT+4=)
2: q4MMxbvpWnkqIJJ1G1vh9k5IaD0.roa (hash: atJClVpeASPtSX6kEGrHIIjj/e8dWQQKfuBLHQmvtvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:8c:fe:6c:b9:58:a8:9e:7b:3d:b7:2a:3f:72:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Oct 3 01:01:14 2026 GMT
Not After : Oct 4 01:01:14 2026 GMT
Subject: CN=641e9d270e6d5e295b59abf914d5bef6e0eb4421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:a2:7e:c7:c4:8a:d6:fa:42:dc:19:bb:eb:
77:29:c0:15:13:6f:88:cc:ca:91:60:97:db:5a:6c:
5b:b5:83:e7:62:96:77:6c:db:c7:f7:d3:ce:da:3a:
fc:e1:8f:bf:aa:1e:1e:d1:c3:3e:f0:d2:ba:ee:f6:
32:25:0a:b1:c2:8e:ed:49:15:ac:c1:47:18:93:80:
db:07:af:f1:1c:23:88:ef:a3:c4:14:d9:3b:79:b1:
71:72:0c:d4:e6:72:36:d3:45:b1:64:d7:08:4b:a2:
aa:a9:83:62:cc:fb:7e:89:dd:c7:f1:ee:89:cc:47:
86:e1:49:26:49:72:1a:e7:4d:77:84:89:fa:41:90:
e8:59:ae:80:f7:d4:8a:9a:4e:a9:c7:68:7a:ff:28:
66:3f:83:eb:be:98:8e:35:f2:5f:4e:68:b1:6d:95:
61:b4:a6:9e:23:44:c4:c6:f7:ec:34:c5:21:75:1b:
be:5c:b3:97:de:f8:b4:e7:18:1d:86:bc:a8:f7:d1:
35:a8:d3:6c:8b:86:93:9d:30:16:a4:f2:de:df:0e:
d4:6c:72:c2:71:cf:5d:08:2a:ca:c8:5f:27:72:c8:
1c:90:7a:7c:6a:ed:f5:66:5d:87:b6:f0:6a:4c:72:
79:0a:41:b2:07:69:bd:51:92:fc:d1:f8:8d:a7:4d:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1E:9D:27:0E:6D:5E:29:5B:59:AB:F9:14:D5:BE:F6:E0:EB:44:21
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5f:02:51:35:0c:c9:d4:d9:2f:54:c6:d0:4c:f4:5d:e5:70:
d7:08:d9:49:59:b9:91:87:30:5d:57:17:ff:18:00:67:32:de:
a9:1d:fe:13:96:12:76:77:fc:05:25:a3:9c:56:86:3f:25:a8:
76:c1:35:f2:0b:0d:46:9a:59:80:e7:ed:26:ba:7a:3f:66:48:
1f:1a:45:df:f1:5e:86:0d:53:00:66:ca:c8:a3:b3:d3:d3:d5:
90:ec:f5:5b:7f:2c:d6:fc:14:f4:6f:4c:78:8e:88:28:ca:12:
dc:1f:0b:3b:a7:c6:ab:17:d7:56:c9:01:88:78:54:a6:b6:12:
6c:de:74:e1:c8:fc:eb:aa:7c:9e:e2:22:61:03:3a:59:f5:9e:
0e:1d:36:58:c9:89:75:fb:c8:39:08:6b:40:f2:4d:09:4d:76:
ab:82:f6:2c:3f:0c:f2:5e:6c:3b:e0:3a:fe:39:f5:c7:7f:e3:
9d:eb:c1:5d:5d:59:4c:c0:d6:6f:14:f4:e2:fd:5d:ef:88:4b:
e3:0c:83:fc:2f:dc:f0:9f:36:a3:2a:e1:1d:20:7e:29:f7:38:
7c:37:e5:6f:78:01:61:02:a6:f0:c5:1c:35:53:a1:e9:d1:6d:
4f:a5:04:fd:38:2f:be:82:d8:ee:88:49:af:92:f2:20:0e:91:
d4:0c:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:17 2026 by rpki-client