Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: 5il2DCoxKgBgqlxCWt7s1WM0hqZYkT3ZzK1EPUSVOqM=
Subject key identifier: F4:D9:BE:3C:CE:F3:57:0B:68:7A:9F:EC:6E:FC:DC:F1:81:D2:C3:B2
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 01A0CA7DBCD8D9C3A487DD059FA20DE459FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 19B0
Signing time: Tue 22 Sep 2026 19:00:33 +0000
Manifest this update: Tue 22 Sep 2026 19:00:33 +0000
Manifest next update: Wed 23 Sep 2026 19:00:33 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: ZQNdKshNjJFSLfwVHdUGoRs1zLyjec7X4uf+VRF/Kqs=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:bc:d8:d9:c3:a4:87:dd:05:9f:a2:0d:e4:59:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Sep 22 19:00:33 2026 GMT
Not After : Sep 23 19:00:33 2026 GMT
Subject: CN=f4d9be3ccef3570b687a9fec6efcdcf181d2c3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:70:3b:d2:1c:6c:ab:f3:9f:71:2f:7c:2a:
34:e3:eb:39:a8:3d:55:bb:6b:02:15:0b:6b:87:84:
a6:c6:ae:fc:62:74:07:e7:bc:72:3e:e9:0d:8c:f6:
83:7d:c8:ab:64:ff:77:86:60:d8:f5:4b:37:91:62:
cb:7e:aa:32:62:f3:d5:1c:fa:c2:96:0b:a5:9e:ee:
90:b9:6c:54:ac:c2:ae:05:52:0b:3f:a6:7e:e6:1a:
0c:6e:ef:4b:c1:3e:10:e9:00:66:b1:29:15:d8:24:
3d:5e:eb:be:0f:da:78:02:72:6f:e0:dd:70:b9:21:
f1:6d:69:a7:25:a0:50:ea:1b:0b:36:da:92:4a:2f:
5d:3d:e9:87:1c:11:92:3b:55:03:e5:5d:ed:fe:81:
83:66:e3:1c:ec:36:65:fa:60:1c:0a:20:5a:26:71:
aa:21:28:9e:93:52:86:51:2b:74:ca:7f:cd:aa:f4:
60:45:4a:92:e1:fb:64:c1:38:60:00:31:8c:e4:24:
98:90:c1:13:4c:a4:dd:6f:66:ae:25:9d:02:12:17:
9c:16:cd:18:83:be:2a:a6:f8:25:47:02:36:2d:dd:
de:c3:04:f3:09:dc:9a:d5:77:94:0d:e3:df:2b:68:
11:0b:b2:ed:8e:e0:b5:14:fb:1e:8e:53:44:fb:54:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:BE:3C:CE:F3:57:0B:68:7A:9F:EC:6E:FC:DC:F1:81:D2:C3:B2
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:1c:77:5d:37:39:6e:9c:92:7b:2b:c1:a8:d3:eb:57:cb:
9a:23:d5:80:5d:0c:d5:ec:b0:79:58:5f:7f:83:80:c2:b6:9f:
b0:9f:e3:f2:b7:b2:4a:ba:e4:6d:85:b9:79:cb:9e:9b:9c:8f:
fc:6d:e4:e5:66:2a:8c:cd:01:03:59:0d:d0:0b:58:78:d8:5b:
c0:ef:42:8d:21:54:ee:32:98:81:c1:c2:ed:78:86:65:b8:2d:
ca:f9:64:f0:35:fe:e4:17:e4:4a:69:e3:a4:c3:6c:a3:da:4c:
1e:02:fe:7d:3a:70:41:80:ef:24:f1:89:1e:de:91:56:25:2f:
cc:fc:c8:eb:ca:54:62:00:82:4d:c1:3a:bc:d8:2d:39:a1:68:
88:b7:42:ae:d7:68:40:c7:d2:37:f2:0d:0a:fc:5d:a5:fa:90:
50:c6:06:43:e4:f8:99:17:dc:46:02:43:16:d8:cc:83:31:2f:
02:90:69:cd:96:2b:fd:2e:96:9f:d8:f3:f1:c8:0d:9c:be:70:
16:24:13:90:99:81:86:b3:3c:b3:ce:2f:00:ba:e0:09:24:05:
da:40:6c:98:ec:6b:27:c4:10:9e:e0:15:68:6f:8a:c6:91:c9:
6d:2f:40:71:13:68:86:94:d2:73:55:6e:70:59:ce:1b:f9:8f:
c2:d7:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:59:57 2026 by rpki-client