Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: lOy7mvdufQFCPjutge+YWR/g9pz7XEskWNR3NqErjak=
Subject key identifier: 96:FA:AB:48:83:BC:35:8C:AB:F3:EF:B2:2C:47:6D:6E:FF:19:F0:10
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 01A18B2E898A945AACB61FBC95F9D861D80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 1AD1
Signing time: Fri 30 Oct 2026 05:00:45 +0000
Manifest this update: Fri 30 Oct 2026 05:00:45 +0000
Manifest next update: Sat 31 Oct 2026 05:00:45 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: tYueAgH45WdP7g7De9aAg1j9Dwym7xH4nL8m/AEtOtg=)
2: RRml_hYYRV_uh2tH4MKlyEdnOfU.roa (hash: j9pqLSMOpk42y3UflLLzJCKLgosgbaeUgLKU1+ncNBI=)
3: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (hash: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:2e:89:8a:94:5a:ac:b6:1f:bc:95:f9:d8:61:d8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Oct 30 05:00:45 2026 GMT
Not After : Oct 31 05:00:45 2026 GMT
Subject: CN=96faab4883bc358cabf3efb22c476d6eff19f010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:b8:1a:23:ee:47:9a:69:c2:a8:88:24:96:
17:b4:cb:17:43:c9:46:60:86:47:85:1d:d1:44:0f:
bb:f3:6b:b5:b1:af:98:db:d9:f7:9d:3a:22:d6:53:
ca:98:91:01:fa:cb:fa:e2:49:6b:00:bc:a4:f9:6e:
3a:5f:2c:4e:2e:57:aa:a4:3f:3a:ee:c5:68:d1:99:
5e:59:ff:6a:f2:2e:64:18:3b:63:c1:95:51:b7:06:
9d:08:94:47:74:50:19:ea:36:e0:9b:be:c3:8e:16:
35:d1:7d:68:7d:bd:49:38:dd:a3:f6:97:3e:b5:31:
b0:77:dc:32:41:a0:c0:17:e7:06:30:b4:68:69:68:
dc:38:56:e6:50:cd:48:f1:47:89:c3:d6:1b:18:69:
5b:44:bb:3f:70:34:d3:52:14:c3:df:27:22:f4:c0:
ed:4a:a6:c3:b9:00:72:3a:2a:cf:30:d3:7e:45:bf:
69:6d:19:c4:97:b9:4d:c0:5e:88:ad:ad:38:7f:b4:
c0:c1:3a:79:fe:a3:e1:aa:b8:7b:f0:f1:3d:23:8a:
03:1e:e5:34:98:07:d9:6d:cd:6d:18:80:a0:9a:3e:
90:38:5c:90:d4:67:41:9e:e7:b1:9c:2b:3f:48:12:
7a:23:a3:ce:4d:f4:c0:25:5d:49:e6:23:94:27:cf:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FA:AB:48:83:BC:35:8C:AB:F3:EF:B2:2C:47:6D:6E:FF:19:F0:10
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bb:39:2f:2e:b4:e3:f9:13:b5:65:b8:8d:d5:62:a6:51:02:
ca:ea:7f:29:31:fb:f3:63:76:48:a1:cd:19:7a:f5:fa:2f:c7:
c0:3e:8d:ea:8c:53:f0:15:07:e5:5d:43:98:0a:5b:dd:5b:73:
11:37:dd:91:db:d8:c1:40:d5:f6:ca:27:58:ca:33:ab:2b:ef:
25:e2:7b:7d:1c:32:3b:32:4e:3a:6b:ce:d7:6c:a9:6c:2e:43:
55:e6:49:68:f1:3d:2d:41:e2:8e:a4:3a:69:46:e7:db:c7:e6:
04:91:3f:02:08:0d:8a:9c:42:67:79:64:12:22:55:67:14:0c:
b4:13:81:73:c3:69:fa:c4:c1:06:19:17:f8:d9:a5:f2:43:62:
fd:2e:e5:2c:b4:a6:a5:c3:25:c5:a9:eb:49:42:d8:45:58:b3:
ba:34:97:1d:b8:87:20:4d:8b:43:6a:1b:69:ef:4d:00:ca:f9:
a0:f1:8c:3e:30:cc:79:d6:2c:81:c1:02:a1:f6:71:47:14:dd:
a8:48:f3:17:db:53:ed:53:ad:06:a9:02:54:90:16:d4:9a:fa:
b4:09:7b:38:0b:be:c6:89:3d:76:c0:df:b5:fe:c5:1f:ce:c4:
01:57:9f:4b:7f:86:98:ff:32:a4:69:51:d7:61:31:d2:48:20:
dc:df:12:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:20 2026 by rpki-client