Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: F59zmY4N9cuqd1jHwD4tL16KNm4TOBpdgPt9zJMkSWI=
Subject key identifier: DB:09:E6:34:FE:D1:F0:79:97:FF:CE:14:6C:91:75:37:92:15:2B:B8
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 019D27DFDC6AC558C79FA620C927938AE8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0A6F
Signing time: Thu 26 Mar 2026 02:01:15 +0000
Manifest this update: Thu 26 Mar 2026 02:01:15 +0000
Manifest next update: Fri 27 Mar 2026 02:01:15 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: ZmXmrAXh5ZIOREqvTzGvZuxNA+3jjk+hNIjK0OWx6G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:dc:6a:c5:58:c7:9f:a6:20:c9:27:93:8a:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Mar 26 02:01:15 2026 GMT
Not After : Mar 27 02:01:15 2026 GMT
Subject: CN=db09e634fed1f07997ffce146c91753792152bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:4d:78:d6:b6:a7:16:4b:9f:05:61:d1:64:
19:2a:02:2a:b4:73:d2:52:dd:fe:d3:9a:93:52:0a:
28:64:76:a5:88:77:c9:aa:3f:9d:99:88:65:e4:ce:
e3:7d:4f:08:ff:bf:68:7e:a8:e1:ff:67:09:01:5c:
21:21:08:63:73:6c:9a:da:59:c5:f4:94:c2:e1:f8:
f0:b6:f7:4f:ad:0a:9c:02:5a:ea:c5:e5:84:14:6f:
3a:9b:26:4a:ee:24:82:25:a4:5e:ec:b3:52:6b:f7:
3c:86:d2:80:5e:1b:d5:ae:48:25:cf:52:4c:ef:aa:
e6:dc:3f:2c:1f:dc:0b:ba:19:a9:64:0a:7b:da:15:
87:b7:37:3e:ed:f3:e3:36:20:33:86:bf:04:23:6c:
ba:ac:97:db:63:97:f6:f3:43:7e:ee:42:63:38:d8:
aa:e1:4d:8a:c4:19:c9:81:ca:99:fd:0d:18:90:5f:
87:c6:7b:0a:a5:37:99:35:76:01:56:79:6e:5e:b4:
13:02:97:d1:f7:1e:15:b3:9b:aa:43:e7:ab:7c:0c:
6f:da:b6:62:60:84:2e:30:bd:49:e5:cf:0e:df:de:
2e:bf:f2:10:13:24:4f:97:9c:59:94:58:1c:1d:44:
f5:af:3e:36:dd:41:79:52:74:72:b1:d8:c7:88:09:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:E6:34:FE:D1:F0:79:97:FF:CE:14:6C:91:75:37:92:15:2B:B8
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ce:9c:a5:f8:19:3c:05:d1:6e:b0:83:15:72:ba:cd:60:1e:
9e:08:b1:9d:98:83:a0:82:ed:f6:7b:dd:44:28:cb:cf:0d:b2:
38:f2:7c:20:a5:8d:7f:79:45:94:e4:3b:49:14:ea:56:12:b4:
f9:bb:e4:a1:7d:20:0f:79:25:00:58:fc:97:e5:4a:d5:5d:0f:
7e:87:0d:d1:6d:3d:82:ca:a5:2a:de:7b:0a:7f:9d:80:6c:5a:
31:b3:af:c3:aa:e0:f2:10:34:b4:10:ca:08:8d:4f:dd:20:40:
15:6c:1d:c0:43:2e:6f:7b:a3:3f:69:70:a3:08:3d:47:1c:a2:
e0:a9:17:cc:57:e1:67:7c:01:1e:19:a7:3d:f0:b5:5b:15:67:
ba:e9:92:ca:c9:ad:9c:65:40:fb:a8:78:e7:2b:4e:36:f4:3d:
cb:17:49:8e:60:5c:39:f2:c3:75:35:30:68:90:fc:05:1d:8f:
92:0c:9e:a6:2c:30:d7:83:c1:03:1b:bb:7c:ce:e2:11:e7:df:
1b:34:35:0e:59:a2:d4:ec:99:41:18:80:55:48:bb:65:38:cb:
41:a3:55:7f:fd:a2:ee:55:11:a7:1d:f0:c4:3b:10:bf:e1:61:
63:53:6b:7f:b8:36:94:65:6c:79:f4:5c:bf:eb:02:c9:9a:7c:
f2:db:14:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n39xqxVjHn6YgySeTiui+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMzZGEyYjhiMmU0OWNiNTMxMTcxZTkxMGVkY2VlNzlh
ZTU4YTQwHhcNMjYwMzI2MDIwMTE1WhcNMjYwMzI3MDIwMTE1WjAzMTEwLwYDVQQD
EyhkYjA5ZTYzNGZlZDFmMDc5OTdmZmNlMTQ2YzkxNzUzNzkyMTUyYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZRNeNa2pxZLnwVh0WQZKgIqtHPS
Ut3+05qTUgooZHaliHfJqj+dmYhl5M7jfU8I/79ofqjh/2cJAVwhIQhjc2ya2lnF
9JTC4fjwtvdPrQqcAlrqxeWEFG86myZK7iSCJaRe7LNSa/c8htKAXhvVrkglz1JM
76rm3D8sH9wLuhmpZAp72hWHtzc+7fPjNiAzhr8EI2y6rJfbY5f280N+7kJjONiq
4U2KxBnJgcqZ/Q0YkF+HxnsKpTeZNXYBVnluXrQTApfR9x4Vs5uqQ+erfAxv2rZi
YIQuML1J5c8O394uv/IQEyRPl5xZlFgcHUT1rz423UF5UnRysdjHiAmdOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsJ5jT+0fB5l//OFGyRdTeSFSu4MB8GA1UdIwQY
MBaAFG38PaK4suSctTEXHpEO3O55rlikMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQt
ZGRkNGIwYTFiOWE2LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQtZGRkNGIwYTFiOWE2
LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAes6cpfgZ
PAXRbrCDFXK6zWAengixnZiDoILt9nvdRCjLzw2yOPJ8IKWNf3lFlOQ7SRTqVhK0
+bvkoX0gD3klAFj8l+VK1V0PfocN0W09gsqlKt57Cn+dgGxaMbOvw6rg8hA0tBDK
CI1P3SBAFWwdwEMub3ujP2lwowg9Rxyi4KkXzFfhZ3wBHhmnPfC1WxVnuumSysmt
nGVA+6h45ytONvQ9yxdJjmBcOfLDdTUwaJD8BR2Pkgyepiww14PBAxu7fM7iEeff
GzQ1Dlmi1OyZQRiAVUi7ZTjLQaNVf/2i7lURpx3wxDsQv+FhY1Nrf7g2lGVsefRc
v+sCyZp88tsUow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:41 2026 by rpki-client