Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: aNx9oTJ3Xpd2g0SAW9mEvgmW6iH4e8EwZVvdcDHpg38=
Subject key identifier: 82:4F:08:58:A6:69:0B:50:8A:0E:77:6F:1D:F0:EC:2A:BE:B4:01:43
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 019F8FEC42C907FD6A45A743F3C572ED312A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 18E3
Signing time: Thu 23 Jul 2026 17:00:53 +0000
Manifest this update: Thu 23 Jul 2026 17:00:53 +0000
Manifest next update: Fri 24 Jul 2026 17:00:53 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: m4MkxdkCjNVepD3UVV80obYv+mD/EEPc+8db8lxUo9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:42:c9:07:fd:6a:45:a7:43:f3:c5:72:ed:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Jul 23 17:00:53 2026 GMT
Not After : Jul 24 17:00:53 2026 GMT
Subject: CN=824f0858a6690b508a0e776f1df0ec2abeb40143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:d8:c4:f7:98:bd:2c:8e:0a:bd:41:38:7d:
a0:4c:19:d6:07:c6:45:79:8b:f9:6a:53:40:af:0b:
42:25:2d:e5:64:18:29:58:40:e0:39:b5:3f:ca:75:
1e:e0:43:bd:01:e8:c0:00:74:e0:c9:ff:7e:0c:ee:
aa:a3:30:dc:5b:b2:69:aa:ee:62:fe:ac:35:d8:8e:
0e:5e:46:3a:88:93:a8:87:30:11:a6:f5:f0:3e:22:
66:63:3d:9a:08:dd:aa:a5:62:5c:25:a2:f7:1e:c8:
ac:d9:c3:5b:16:0a:25:23:9c:c2:81:da:fd:e3:20:
c1:57:78:d8:20:93:89:bb:24:74:e8:cc:51:25:79:
a1:98:20:d9:a9:fa:45:fb:d4:72:77:86:39:e7:4d:
3c:d3:e5:08:f5:67:7b:ff:7d:c1:e9:ea:70:5b:9d:
7b:6c:a1:ad:4c:f9:cd:90:b8:ff:37:2e:84:56:5f:
f2:90:24:a2:66:54:65:a3:af:84:f6:6b:0b:a7:f2:
06:ad:13:e5:3c:61:8f:c1:f0:44:1a:26:af:af:01:
27:e6:33:6c:31:1f:1c:36:d8:87:0f:98:00:ff:82:
5a:5c:3a:c7:16:46:a6:0b:b5:fe:55:34:9b:cd:8a:
e4:f8:a2:91:d8:1c:a1:64:69:7c:ea:be:02:e4:30:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:08:58:A6:69:0B:50:8A:0E:77:6F:1D:F0:EC:2A:BE:B4:01:43
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:e4:37:fe:b0:02:10:7a:6e:04:ad:ef:bb:98:4c:89:59:
a1:db:a0:c6:e9:1d:8a:71:60:2c:7d:f3:8a:4a:e0:bd:a6:29:
aa:e9:7a:45:7b:89:9b:a1:fa:25:1c:b8:0f:79:ca:f6:50:f4:
6d:90:14:42:90:15:4f:f0:5f:18:9f:c2:8e:42:95:7e:94:90:
41:86:6a:a2:10:3f:83:3a:3b:64:27:3d:68:fb:b5:00:80:f0:
fd:80:f2:2b:39:97:15:76:7d:d2:67:9f:39:45:97:ca:73:e3:
2b:06:91:08:7c:2a:92:07:20:35:12:39:0d:60:48:1d:da:48:
52:53:ba:72:4e:b1:5c:af:39:1f:92:10:52:72:3c:1c:96:69:
d1:b2:43:0a:9d:53:03:47:12:00:e3:34:ea:ef:f0:d8:f6:46:
da:c0:54:ac:67:c9:81:d8:74:8d:ae:8e:f3:7a:b5:b0:c7:78:
d5:1c:f5:46:70:6f:84:f7:b8:12:b4:e3:9a:d8:6d:5c:60:92:
e6:33:42:4d:f8:59:fd:25:4f:b9:ba:67:8d:66:91:ad:f9:88:
97:82:d8:71:6f:95:09:ae:85:69:db:24:ac:8c:9a:8d:f3:d1:
57:aa:98:44:5d:94:97:a4:57:15:6b:4a:a9:87:99:55:8b:b3:
f2:b8:e6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7ELJB/1qRadD88Vy7TEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjU5YWVkYzI4Mjk2ZTI5MTcyNGY3OTM3ZGU3ODhlMjcy
MTY0MDgwHhcNMjYwNzIzMTcwMDUzWhcNMjYwNzI0MTcwMDUzWjAzMTEwLwYDVQQD
Eyg4MjRmMDg1OGE2NjkwYjUwOGEwZTc3NmYxZGYwZWMyYWJlYjQwMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEzYxPeYvSyOCr1BOH2gTBnWB8ZF
eYv5alNArwtCJS3lZBgpWEDgObU/ynUe4EO9AejAAHTgyf9+DO6qozDcW7Jpqu5i
/qw12I4OXkY6iJOohzARpvXwPiJmYz2aCN2qpWJcJaL3Hsis2cNbFgolI5zCgdr9
4yDBV3jYIJOJuyR06MxRJXmhmCDZqfpF+9Ryd4Y550080+UI9Wd7/33B6epwW517
bKGtTPnNkLj/Ny6EVl/ykCSiZlRlo6+E9msLp/IGrRPlPGGPwfBEGiavrwEn5jNs
MR8cNtiHD5gA/4JaXDrHFkamC7X+VTSbzYrk+KKR2ByhZGl86r4C5DCrAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJPCFimaQtQig53bx3w7Cq+tAFDMB8GA1UdIwQY
MBaAFAX1mu3CgpbikXJPeTfeeI4nIWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2Mt
ZDY0MzY4MjA4MTMxLzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2MtZDY0MzY4MjA4MTMx
LzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQTkN/6w
AhB6bgSt77uYTIlZodugxukdinFgLH3zikrgvaYpqul6RXuJm6H6JRy4D3nK9lD0
bZAUQpAVT/BfGJ/CjkKVfpSQQYZqohA/gzo7ZCc9aPu1AIDw/YDyKzmXFXZ90mef
OUWXynPjKwaRCHwqkgcgNRI5DWBIHdpIUlO6ck6xXK85H5IQUnI8HJZp0bJDCp1T
A0cSAOM06u/w2PZG2sBUrGfJgdh0ja6O83q1sMd41Rz1RnBvhPe4ErTjmthtXGCS
5jNCTfhZ/SVPubpnjWaRrfmIl4LYcW+VCa6FadskrIyajfPRV6qYRF2Ul6RXFWtK
qYeZVYuz8rjmBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:31 2026 by rpki-client