Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
File: bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft (raw, json)
Hash identifier: pcVmIc0VTJIdkPRNEuqG098QzXUoQ9OG2UALH2B4TrU=
Subject key identifier: 16:69:CD:63:5E:02:EF:96:0D:37:99:7C:05:98:32:4E:3E:D6:05:5F
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 019F9059B4A1A0E4C36C6AB79C377B4BBC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
Manifest number: 1959
Signing time: Thu 23 Jul 2026 19:00:25 +0000
Manifest this update: Thu 23 Jul 2026 19:00:25 +0000
Manifest next update: Fri 24 Jul 2026 19:00:25 +0000
Files and hashes: 1: bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl (hash: L3MlxNepu2gER1+u456A1pdx0QiQn6rAeCvLrixA7Xc=)
2: q4MMxbvpWnkqIJJ1G1vh9k5IaD0.roa (hash: atJClVpeASPtSX6kEGrHIIjj/e8dWQQKfuBLHQmvtvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:b4:a1:a0:e4:c3:6c:6a:b7:9c:37:7b:4b:bc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Jul 23 19:00:25 2026 GMT
Not After : Jul 24 19:00:25 2026 GMT
Subject: CN=1669cd635e02ef960d37997c0598324e3ed6055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:2d:cd:dd:ea:d4:32:83:13:82:23:2c:5e:
c7:c4:be:91:9c:63:7d:f8:05:6f:28:97:8c:0e:ed:
3f:25:ce:e3:2d:3e:7f:14:81:90:ca:aa:db:74:a7:
0f:11:f6:71:5c:fb:ee:ab:4a:03:3a:e2:e5:07:b5:
48:72:c6:46:f5:43:bb:90:2d:97:72:cd:d5:44:3a:
f2:09:d2:26:f1:0d:d1:f9:99:6e:5e:7b:0a:ae:4c:
7a:b8:72:06:c0:b6:13:d0:de:74:43:6c:e8:c7:d0:
0a:cc:8b:69:5d:13:2f:45:13:43:f0:0c:6f:b8:c2:
23:f0:3b:12:97:16:6c:5f:10:ba:de:e1:71:86:ee:
26:e7:ec:86:d4:1d:7d:4b:f8:be:84:70:e2:a4:70:
e5:df:e6:2a:c0:fa:fe:2b:67:4a:a5:d0:c3:58:da:
82:8c:47:4e:b7:dd:f9:cc:1e:4e:a9:4e:b4:4a:48:
52:81:00:31:27:2a:4e:ac:5e:5c:d7:1f:39:55:81:
96:bc:d9:d5:a5:9f:4f:09:5c:26:cd:f4:a1:f2:43:
b8:8d:62:fb:f5:3c:cb:4f:84:6c:c7:df:75:64:c5:
6a:2d:7a:1b:5e:c6:d5:3d:e4:bc:28:35:81:c5:a9:
1a:4c:c0:c6:58:9f:e0:c2:c8:9b:9c:6d:b3:0d:49:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:CD:63:5E:02:EF:96:0D:37:99:7C:05:98:32:4E:3E:D6:05:5F
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6d:2e:d8:0a:76:11:c1:6c:36:3d:50:3f:52:2b:d7:04:42:
5e:7c:50:3a:3c:41:31:c2:6f:aa:27:25:d4:dd:be:b4:1a:0c:
4e:5b:28:f5:00:bb:92:36:01:20:41:74:a5:f1:65:43:26:68:
70:c3:c1:3d:92:03:98:1b:46:99:80:46:4d:ad:e7:f6:79:5c:
c3:53:88:ac:ae:45:67:ed:b9:b2:05:4e:7e:3d:85:e3:d1:9c:
51:14:cb:3f:ef:e8:a7:cc:13:de:88:68:16:f3:43:6d:7e:7f:
98:f0:24:56:5c:5a:4f:57:f9:ec:e4:f4:f8:35:48:b2:cd:cd:
ef:95:d7:3b:f8:c3:2c:de:82:97:08:af:20:d7:0d:a1:e1:da:
1c:a7:9e:fb:e0:40:55:07:0b:19:2a:1e:6a:55:a3:d9:15:b1:
f1:af:3b:6a:8f:7d:27:1e:b8:70:a1:08:a6:98:f6:89:87:93:
3a:12:53:7f:8b:c8:cf:99:f1:45:d9:47:6e:5b:63:79:de:10:
e5:93:86:dd:61:d4:5e:41:28:bd:d2:69:49:34:8a:52:9f:a5:
0c:b4:8f:9c:53:96:1a:40:b1:79:8d:7f:fd:be:3e:74:89:b7:
78:71:5f:d0:73:b6:1c:6b:63:cc:25:76:76:ba:41:a6:ca:80:
1c:98:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:24:33 2026 by rpki-client