Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: gNPdPZbQMqRiox7AhxwPSEHN+NmAbn45ZFzTYCcLsIM=
Subject key identifier: 06:A4:E2:C0:6E:38:1E:75:41:8A:A2:4B:1C:E4:5E:E8:E2:9A:FE:27
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 01A08E324EF9A5BA1D82804DBA7485FF5522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 1A4E
Signing time: Fri 11 Sep 2026 02:00:56 +0000
Manifest this update: Fri 11 Sep 2026 02:00:56 +0000
Manifest next update: Sat 12 Sep 2026 02:00:56 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: ai7/XFAa/kkPUW5IHzJsptxAmJ/o6QV7RihD0lBjTWc=)
2: RRml_hYYRV_uh2tH4MKlyEdnOfU.roa (hash: j9pqLSMOpk42y3UflLLzJCKLgosgbaeUgLKU1+ncNBI=)
3: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:4e:f9:a5:ba:1d:82:80:4d:ba:74:85:ff:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Sep 11 02:00:56 2026 GMT
Not After : Sep 12 02:00:56 2026 GMT
Subject: CN=06a4e2c06e381e75418aa24b1ce45ee8e29afe27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:ea:9b:49:5d:a5:e2:62:b6:63:d8:14:79:
ac:37:29:af:30:89:c8:a2:50:2c:ed:49:9a:fb:38:
50:f5:3b:52:69:ce:6d:05:89:9e:9a:ed:ae:a8:c5:
8d:41:5d:54:db:b8:ab:b7:fa:10:11:07:42:fd:9c:
92:db:e0:ca:54:43:fb:b8:c2:8b:f7:a1:71:1c:79:
48:5c:26:33:b1:7a:4f:d7:f0:6e:61:63:46:f3:b3:
ee:9d:96:3c:8c:01:8e:54:fb:df:63:1f:28:c4:3d:
46:06:97:ee:8f:60:f0:24:fc:6c:9e:fa:83:4d:c0:
8d:74:28:ca:f5:13:0e:ee:e9:5f:b8:4b:38:ae:5e:
63:a2:86:b2:39:94:12:8a:fe:8a:17:e3:2a:6a:63:
36:b0:d2:33:43:73:cb:07:3a:6e:f5:60:bb:59:7a:
c1:3a:4a:21:87:e7:fc:9d:7d:ed:81:e2:cd:28:34:
16:7a:35:63:d5:a1:74:e2:37:76:b0:58:a5:4c:c0:
33:d7:f7:b7:df:15:c8:cd:b8:ad:3d:70:4f:a1:6f:
1e:b9:97:9d:73:d6:75:f6:e8:46:eb:b3:11:93:32:
82:80:e3:69:73:e1:6f:b4:95:8a:f2:33:e3:0f:d5:
d4:ef:ce:61:a3:68:be:50:c1:f9:6b:2f:6b:d5:4a:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:E2:C0:6E:38:1E:75:41:8A:A2:4B:1C:E4:5E:E8:E2:9A:FE:27
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c8:81:a6:cf:05:20:1c:5c:18:3f:8d:76:e8:49:fc:77:da:
23:b8:eb:68:d9:13:de:b8:95:14:8d:f4:df:ed:39:f6:50:10:
bf:e1:78:16:55:d2:8e:f1:f3:87:89:92:69:38:29:9b:3d:95:
44:cf:42:6c:19:b4:92:ce:33:dd:8e:7e:52:e0:e2:7f:a6:fb:
0a:ee:15:b6:5d:b6:d3:25:27:8b:56:6c:e0:18:2b:e1:6a:fe:
44:2a:56:b0:f7:18:8a:43:07:02:45:c5:1d:d1:14:bb:60:c7:
1e:63:95:0c:13:63:0e:4e:5e:8d:30:23:8c:aa:21:5b:36:9e:
d4:9e:9e:df:de:33:36:13:00:4c:4e:b3:94:ea:d4:07:7f:9f:
f0:41:e4:f0:1b:8f:20:78:c5:f8:f7:8e:6b:f8:cf:3c:8f:40:
77:29:6d:a4:8c:db:15:3e:6e:f5:d7:07:a9:e5:61:89:3c:dd:
36:ab:0e:dc:18:2f:86:40:ee:ff:33:01:3f:37:9d:d9:47:1c:
f2:e0:74:26:66:c4:ab:9e:84:ea:ef:c1:48:31:a8:a7:bd:01:
4d:cc:12:37:b9:8c:b0:a1:49:15:87:d2:74:85:3d:f5:0b:07:
d3:23:12:c9:a0:8b:3c:ab:5c:f7:b9:6d:75:85:4f:ba:28:d7:
d1:2b:90:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:06:37 2026 by rpki-client