Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: vYzZEGB9rwIYMmI3AphTuMwdbDVxX4/SnKh+UFExbTk=
Subject key identifier: 8D:33:30:C0:97:56:E1:7F:AD:6D:0E:7F:77:47:5B:49:C0:5F:CB:1B
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019FA485631E90749BCEA688347A63AA7292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 17:00:32 +0000
Manifest this update: Mon 27 Jul 2026 17:00:32 +0000
Manifest next update: Tue 28 Jul 2026 17:00:32 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: 5hlzyLcV7yv4W/eeJpDrBX58w9tFVnGZye+UNXhIfB0=)
2: RRml_hYYRV_uh2tH4MKlyEdnOfU.roa (hash: j9pqLSMOpk42y3UflLLzJCKLgosgbaeUgLKU1+ncNBI=)
3: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:85:63:1e:90:74:9b:ce:a6:88:34:7a:63:aa:72:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jul 27 17:00:32 2026 GMT
Not After : Jul 28 17:00:32 2026 GMT
Subject: CN=8d3330c09756e17fad6d0e7f77475b49c05fcb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:85:2b:3c:64:18:2c:9a:ea:32:8b:12:1a:
70:ac:78:c7:ff:dc:1a:6b:11:61:1f:53:71:2e:47:
af:33:7a:de:71:50:60:15:48:7f:2f:de:64:13:4f:
2f:18:aa:37:5a:1b:e4:88:8e:98:46:0c:13:98:34:
5e:82:70:a5:d3:44:8d:58:5d:d2:2e:71:ab:08:64:
6a:02:67:3f:62:bc:39:4c:43:e1:73:57:e3:a5:6a:
c0:2d:f0:f4:02:fc:8e:09:37:b4:10:d0:9a:55:9f:
b7:33:60:35:0f:1d:0e:d4:9e:80:1c:62:f2:e0:c3:
67:87:68:a8:55:8c:55:6a:84:99:a3:f0:e8:71:f7:
00:0b:2c:ba:9b:a1:ad:d3:22:04:d5:fb:8b:ab:74:
9d:5a:de:4e:12:48:66:c0:37:2c:4d:75:05:6d:af:
5e:3f:c1:48:e7:82:e9:28:da:e3:32:10:d1:9e:3d:
a1:c1:fd:d2:64:ca:02:78:d2:a1:4f:ad:09:28:f4:
41:a0:dd:36:dd:31:6e:d2:a6:26:5e:1d:8f:e5:c7:
43:94:9d:16:32:d6:35:12:07:28:b0:ad:eb:f6:0b:
0e:ad:61:f4:52:11:d3:c9:32:c8:7f:2e:e2:ff:fc:
69:03:fb:cc:76:b1:07:21:49:e9:78:f9:ad:0a:58:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:30:C0:97:56:E1:7F:AD:6D:0E:7F:77:47:5B:49:C0:5F:CB:1B
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:72:ea:51:52:41:95:f6:b7:56:9f:9b:f5:3b:b3:89:1f:2f:
da:c0:89:d3:dc:30:17:5f:b4:00:d1:3a:9f:65:e9:99:02:6a:
a0:b0:e4:fa:93:d8:05:31:14:d7:41:44:84:cf:67:29:82:e9:
49:a4:00:1a:f4:6f:ec:ef:c5:e3:1d:17:72:0c:51:49:ce:c8:
ad:cd:b7:12:09:a0:d4:a2:8d:e2:de:0a:92:95:a4:d8:2f:73:
7e:a2:6a:aa:0c:55:5f:8e:8c:ad:5c:de:53:f9:88:ef:a7:fc:
1b:e6:1b:61:c0:69:22:8a:e3:58:6e:65:2c:1f:78:8d:f4:31:
90:4c:5a:a2:67:10:7c:88:c5:fb:a7:8a:df:38:56:67:94:0b:
fb:30:75:e2:ee:19:1e:27:32:ad:0a:e4:ab:9c:80:26:fa:75:
cb:7d:92:55:a5:fd:c6:4b:85:ab:6e:64:ea:9e:fa:10:dd:9d:
92:8e:6d:f2:bd:79:4a:e9:11:a9:96:d2:1c:16:fa:de:3e:a3:
a6:40:6c:1e:43:9d:d5:3f:27:08:f8:bd:e6:df:08:77:57:99:
c2:98:de:9d:75:1a:fc:db:89:72:3c:9a:ba:6d:90:8c:70:7d:
11:f1:75:28:11:02:74:f8:9f:b2:f8:2e:f8:fc:0e:1d:9b:b2:
a9:e7:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:41:21 2026 by rpki-client