Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: BHARa/OcvP2TXaIxsRgb3VwfgbzkUix9mXKWQL5Fjbg=
Subject key identifier: BA:5C:0F:86:52:8C:90:65:4E:97:E5:D4:E7:5C:08:88:28:2B:12:BF
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019D27A86C091074264595228259F3DE10AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 17CE
Signing time: Thu 26 Mar 2026 01:00:42 +0000
Manifest this update: Thu 26 Mar 2026 01:00:42 +0000
Manifest next update: Fri 27 Mar 2026 01:00:42 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: nncG3TwCR+qJvpSqUK56FGas5LQeIL2Z0BmnwyE3fJY=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6c:09:10:74:26:45:95:22:82:59:f3:de:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Mar 26 01:00:42 2026 GMT
Not After : Mar 27 01:00:42 2026 GMT
Subject: CN=ba5c0f86528c90654e97e5d4e75c0888282b12bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:cb:eb:93:5c:b5:2e:b4:f8:ac:dd:de:8f:
6a:cf:47:c5:ce:4b:9f:57:12:2c:82:d2:75:e2:69:
22:48:94:0c:4f:d9:ac:70:51:ef:d1:94:ef:b3:35:
e4:d8:3d:53:a5:85:16:65:fd:14:d8:ea:f9:18:bf:
2e:2a:51:92:d2:37:dc:8e:ac:a5:6e:b4:e2:34:44:
6c:d4:d5:84:7e:65:b1:fa:b3:a2:ba:40:80:b3:a0:
82:2d:41:31:98:41:d1:e0:68:61:79:b0:bf:be:8d:
80:2d:d3:c9:fc:19:68:3e:67:f0:6c:41:b0:8a:0a:
ac:a8:f8:cc:8d:95:a5:d4:55:40:9c:90:95:67:4d:
e7:ad:e4:be:c9:ee:77:00:dd:a4:4a:26:35:9a:7f:
09:3f:cc:60:1c:71:78:85:83:26:cb:7e:a0:89:a8:
eb:79:c9:6c:77:10:58:e5:64:fb:67:75:90:e4:d7:
20:d0:8a:40:05:cd:dc:e4:1d:25:65:89:64:15:df:
e2:e4:bd:6f:c6:67:6d:5c:45:52:29:f5:44:4c:38:
c0:15:b8:ab:09:90:69:0a:d3:31:a4:00:91:48:90:
7c:40:97:b7:2d:c8:9a:72:aa:0b:70:eb:4d:36:86:
ad:d0:8b:80:84:23:5a:a9:a8:f9:6d:0f:ed:ac:ba:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5C:0F:86:52:8C:90:65:4E:97:E5:D4:E7:5C:08:88:28:2B:12:BF
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:58:95:c1:37:7e:cd:cf:c4:37:ff:cf:b6:4c:3c:3a:75:a1:
d0:11:4f:be:05:25:d9:54:ff:30:be:4e:e3:4e:cf:74:18:68:
81:32:f2:6d:63:69:ae:f2:a8:8c:aa:9a:95:4e:f9:e8:9f:ee:
44:5f:08:a3:32:1a:d9:50:9a:3e:aa:e2:c1:a9:44:a9:8f:07:
6d:60:2f:49:3a:24:e6:3c:34:f0:40:5a:8d:22:01:fa:2e:cc:
14:ed:95:33:61:dc:72:a9:b8:67:23:f5:a4:b7:af:eb:00:30:
05:bd:9e:b6:68:78:d0:f8:93:1d:17:e7:c6:81:6e:a4:66:96:
a2:92:75:3e:ce:4f:e2:3a:32:3a:ab:4f:9d:64:17:93:9a:5b:
77:de:91:da:90:14:10:25:60:0e:05:20:63:95:f7:3d:48:13:
85:57:61:08:06:c5:46:c4:a5:66:52:a6:34:28:99:13:75:57:
b9:e1:2a:4e:e7:20:c1:2f:29:c3:1d:d3:93:ed:35:b8:21:93:
b5:72:a3:5d:77:11:50:14:7d:f1:6d:49:3b:db:56:72:4e:60:
81:8f:40:49:d6:33:ca:07:e4:7c:dc:c3:c7:d5:08:4f:4c:4b:
4d:a8:b2:1c:64:a9:2f:56:46:88:da:e1:41:3a:10:9f:f7:00:
c5:bb:96:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGwJEHQmRZUiglnz3hCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTAxMDE5NDQ0MGVlNDBmNWRlNDJmMGMxYjJiM2QzNzFi
Y2Q4NjMwHhcNMjYwMzI2MDEwMDQyWhcNMjYwMzI3MDEwMDQyWjAzMTEwLwYDVQQD
EyhiYTVjMGY4NjUyOGM5MDY1NGU5N2U1ZDRlNzVjMDg4ODI4MmIxMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR3L65NctS60+Kzd3o9qz0fFzkuf
VxIsgtJ14mkiSJQMT9mscFHv0ZTvszXk2D1TpYUWZf0U2Or5GL8uKlGS0jfcjqyl
brTiNERs1NWEfmWx+rOiukCAs6CCLUExmEHR4GhhebC/vo2ALdPJ/BloPmfwbEGw
igqsqPjMjZWl1FVAnJCVZ03nreS+ye53AN2kSiY1mn8JP8xgHHF4hYMmy36giajr
eclsdxBY5WT7Z3WQ5Ncg0IpABc3c5B0lZYlkFd/i5L1vxmdtXEVSKfVETDjAFbir
CZBpCtMxpACRSJB8QJe3LciacqoLcOtNNoat0IuAhCNaqaj5bQ/trLoynQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpcD4ZSjJBlTpfl1OdcCIgoKxK/MB8GA1UdIwQY
MBaAFARQEBlEQO5A9d5C8MGys9NxvNhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTkt
YjdiZDEwZTQ0ODlmLzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTktYjdiZDEwZTQ0ODlm
LzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFiVwTd+
zc/EN//Ptkw8OnWh0BFPvgUl2VT/ML5O407PdBhogTLybWNprvKojKqalU756J/u
RF8IozIa2VCaPqriwalEqY8HbWAvSTok5jw08EBajSIB+i7MFO2VM2Hccqm4ZyP1
pLev6wAwBb2etmh40PiTHRfnxoFupGaWopJ1Ps5P4joyOqtPnWQXk5pbd96R2pAU
ECVgDgUgY5X3PUgThVdhCAbFRsSlZlKmNCiZE3VXueEqTucgwS8pwx3Tk+01uCGT
tXKjXXcRUBR98W1JO9tWck5ggY9ASdYzygfkfNzDx9UIT0xLTaiyHGSpL1ZGiNrh
QToQn/cAxbuWDg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:25 2026 by rpki-client