Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: QPXcQb2WXjAUa9nCxmUJnMzO0lMJYmeWEbP8e9u5c5c=
Subject key identifier: CF:72:E4:AF:49:65:81:E9:8C:49:17:3D:1F:96:88:5F:0C:2D:E7:0A
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 01A0D0803050FA6B7A628CBD92376A07C8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 1989
Signing time: Wed 23 Sep 2026 23:00:56 +0000
Manifest this update: Wed 23 Sep 2026 23:00:56 +0000
Manifest next update: Thu 24 Sep 2026 23:00:56 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: qye1iy0lmLoDc/HJ2yc2dlTtNdAGHLPVRJTMZgiA9Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:30:50:fa:6b:7a:62:8c:bd:92:37:6a:07:c8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Sep 23 23:00:56 2026 GMT
Not After : Sep 24 23:00:56 2026 GMT
Subject: CN=cf72e4af496581e98c49173d1f96885f0c2de70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:96:2e:b6:91:d5:fb:42:3c:c2:c3:83:08:
9d:1d:b3:0a:aa:79:84:8a:9d:cd:f0:29:f9:e9:57:
8a:95:eb:5b:2c:c1:fc:32:9e:22:72:c5:bd:0c:e7:
87:3e:d5:fa:38:4e:b7:41:1c:0b:89:df:7a:79:48:
bb:f8:39:bd:9d:17:ec:06:ea:60:04:3a:a7:90:fa:
4b:5b:93:2c:e7:30:f9:ec:53:fb:d9:6b:0c:5e:a5:
da:e7:c5:e5:22:23:78:e3:e5:b0:d0:7d:55:99:60:
e4:88:8a:7e:72:f6:d6:5b:59:69:28:10:6b:9b:bd:
3b:b4:13:b5:fe:98:c7:dc:de:74:62:56:7e:80:2d:
b0:d3:35:19:bc:59:c8:fc:0c:00:db:ce:58:34:e7:
1d:68:8e:0f:46:bc:ce:e6:84:e7:69:58:34:b1:6b:
0a:b9:eb:90:2d:2f:1e:d0:f1:aa:cd:9c:f7:3c:0e:
b4:50:a5:6c:48:21:77:b7:4d:8b:36:75:e0:fd:2b:
c3:72:8e:8d:fa:fa:fe:60:f2:49:97:75:e2:6c:78:
0d:7b:d8:a2:01:0b:f2:cf:43:76:14:52:a6:07:e2:
ea:f9:27:a3:b5:ae:1a:22:88:5b:93:3c:b4:90:cd:
5b:b0:30:1a:6b:4d:39:95:b3:6e:94:92:e8:72:ca:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:72:E4:AF:49:65:81:E9:8C:49:17:3D:1F:96:88:5F:0C:2D:E7:0A
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:90:b9:29:36:01:ba:d7:ff:27:21:d6:9d:13:54:1e:6d:ef:
c0:bb:71:a7:3f:80:42:ae:bd:4a:ce:79:a8:37:3e:69:57:6f:
71:11:04:75:c0:41:6c:5d:26:b9:04:b3:b8:a6:7c:a2:b7:4c:
65:77:b6:07:6b:30:a1:2d:32:29:b2:73:4b:74:64:c7:f3:f9:
cc:e0:19:23:88:c5:df:0c:47:6b:71:e6:f6:1f:ec:ad:17:b6:
7b:2a:a0:b8:6c:25:59:5e:71:53:f4:7c:c8:c5:a2:14:b6:38:
39:9d:78:90:cc:91:6e:8c:b0:90:6a:a3:34:19:88:5d:cf:94:
75:4d:c0:f9:0f:45:18:f0:b2:4b:f9:13:4d:80:a0:59:9d:16:
6a:81:47:bc:1e:9a:0e:93:04:88:60:91:30:69:57:3e:a5:a1:
1e:e3:f3:30:4d:cf:c6:43:91:09:9e:31:2d:eb:a0:5c:fa:f0:
61:02:0b:54:5b:34:b7:35:20:8a:e9:bd:2d:ca:33:23:a2:52:
b4:f2:c5:e4:14:e3:e8:59:20:00:54:a5:5e:e0:59:45:c5:7a:
3f:a2:a7:c7:71:66:fc:05:11:49:97:56:6a:fb:92:1f:2f:9d:
f6:6a:7d:26:14:42:10:70:3f:64:7d:84:5a:80:dd:95:1d:02:
e9:44:96:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgDBQ+mt6Yoy9kjdqB8jmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjU5YWVkYzI4Mjk2ZTI5MTcyNGY3OTM3ZGU3ODhlMjcy
MTY0MDgwHhcNMjYwOTIzMjMwMDU2WhcNMjYwOTI0MjMwMDU2WjAzMTEwLwYDVQQD
EyhjZjcyZTRhZjQ5NjU4MWU5OGM0OTE3M2QxZjk2ODg1ZjBjMmRlNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYOWLraR1ftCPMLDgwidHbMKqnmE
ip3N8Cn56VeKletbLMH8Mp4icsW9DOeHPtX6OE63QRwLid96eUi7+Dm9nRfsBupg
BDqnkPpLW5Ms5zD57FP72WsMXqXa58XlIiN44+Ww0H1VmWDkiIp+cvbWW1lpKBBr
m707tBO1/pjH3N50YlZ+gC2w0zUZvFnI/AwA285YNOcdaI4PRrzO5oTnaVg0sWsK
ueuQLS8e0PGqzZz3PA60UKVsSCF3t02LNnXg/SvDco6N+vr+YPJJl3XibHgNe9ii
AQvyz0N2FFKmB+Lq+Sejta4aIohbkzy0kM1bsDAaa005lbNulJLocsopmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9y5K9JZYHpjEkXPR+WiF8MLecKMB8GA1UdIwQY
MBaAFAX1mu3CgpbikXJPeTfeeI4nIWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2Mt
ZDY0MzY4MjA4MTMxLzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2MtZDY0MzY4MjA4MTMx
LzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpC5KTYB
utf/JyHWnRNUHm3vwLtxpz+AQq69Ss55qDc+aVdvcREEdcBBbF0muQSzuKZ8ordM
ZXe2B2swoS0yKbJzS3Rkx/P5zOAZI4jF3wxHa3Hm9h/srRe2eyqguGwlWV5xU/R8
yMWiFLY4OZ14kMyRboywkGqjNBmIXc+UdU3A+Q9FGPCyS/kTTYCgWZ0WaoFHvB6a
DpMEiGCRMGlXPqWhHuPzME3PxkORCZ4xLeugXPrwYQILVFs0tzUgium9LcozI6JS
tPLF5BTj6FkgAFSlXuBZRcV6P6Knx3Fm/AURSZdWavuSHy+d9mp9JhRCEHA/ZH2E
WoDdlR0C6USWLQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:25:08 2026 by rpki-client