Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: ZvVFnV6gbPoAoZUM8/u8LtqgW9sFkc2RHGSkzZk5ejU=
Subject key identifier: 8E:A1:1E:BE:57:01:E3:13:0A:BB:35:74:36:AE:81:70:60:CE:A9:9A
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 019D0B1E7FEA5887B0956EDA9EE271B114FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 1879
Signing time: Fri 20 Mar 2026 12:00:41 +0000
Manifest this update: Fri 20 Mar 2026 12:00:41 +0000
Manifest next update: Sat 21 Mar 2026 12:00:41 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: B7HNGqiX2KPR04izWqp0P0B2iDdOq5K6ITtOpfiC0Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:1e:7f:ea:58:87:b0:95:6e:da:9e:e2:71:b1:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Mar 20 12:00:41 2026 GMT
Not After : Mar 21 12:00:41 2026 GMT
Subject: CN=8ea11ebe5701e3130abb357436ae817060cea99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:ca:b6:80:18:11:37:2d:b4:ba:71:d7:f9:
4e:52:fa:7a:b8:c7:73:d2:ae:51:64:12:33:4c:88:
d7:93:b1:ac:44:2c:86:be:96:f3:97:3d:db:51:d0:
e2:88:19:bb:70:6b:ac:68:50:82:cb:a2:dd:93:54:
78:30:1f:5a:2a:77:81:69:a2:50:10:b8:05:f8:54:
11:a1:19:ab:25:97:a5:55:3a:f6:b2:b9:76:5b:84:
1d:48:11:3f:15:27:66:14:2f:bd:19:12:51:73:8d:
56:06:14:2d:aa:cc:6a:87:c1:22:50:67:22:16:99:
93:8e:fa:37:4d:c7:e0:1a:fd:92:72:11:4a:76:b3:
0e:ae:99:47:64:df:99:0d:b1:0e:3f:a6:e3:69:8c:
eb:c9:14:5e:81:b6:f6:a9:05:cb:65:16:83:fe:a1:
82:87:10:75:84:e8:dc:28:5b:35:4e:9a:73:66:b2:
af:2e:83:59:2f:12:92:32:cb:a1:5d:1b:ed:58:1d:
79:bc:b7:fa:ad:ee:d8:be:1e:a4:a2:31:e7:8f:e4:
c7:5a:65:b2:ce:8a:2f:6c:4c:c1:a0:9a:0a:4b:ad:
5c:46:ef:ae:30:d4:53:86:9d:1b:4f:49:bb:86:3b:
cb:27:1d:35:3f:a2:0e:bf:2a:89:15:19:46:f7:2c:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:1E:BE:57:01:E3:13:0A:BB:35:74:36:AE:81:70:60:CE:A9:9A
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:99:fe:84:70:55:4c:62:e0:4c:13:03:ea:2c:61:17:aa:
c8:41:02:b7:1b:4e:b2:20:62:b7:e0:23:34:44:ed:9a:11:29:
b3:c0:65:93:2c:12:7f:04:92:3c:98:7c:59:84:af:e4:8b:0f:
2c:00:cb:91:5e:fa:aa:89:07:d8:93:04:43:ec:b4:c7:59:01:
1e:d9:1e:d6:9a:a1:44:54:6b:16:3f:e9:ef:cc:e3:7c:51:57:
2a:06:cc:15:a6:bc:77:e3:b9:2a:2e:f8:56:57:cc:01:a5:23:
44:49:65:93:62:53:a6:cb:5d:ad:71:96:59:94:cb:e8:65:94:
5a:18:20:72:db:5e:81:19:04:e7:e3:69:cd:14:f6:63:e8:cb:
0d:1e:6b:2a:b7:bc:b4:84:12:ab:eb:93:54:c0:7b:67:1e:7b:
fa:05:3d:79:64:2d:ef:bc:79:f3:d8:0e:d6:8a:9a:8e:fc:dc:
f0:50:3c:13:a2:f8:89:5f:55:8b:3b:ce:54:81:c6:4f:41:0f:
d5:ec:8c:68:9c:a6:fe:8c:ca:58:41:c9:98:db:7b:92:4d:34:
ad:7d:fa:af:c3:ef:c3:9b:f6:b0:bb:ca:5a:21:68:96:0b:e3:
e3:2d:01:68:f2:4d:da:74:b6:80:5e:d8:d6:4e:9e:dc:5b:2a:
16:dd:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:44:32 2026 by rpki-client