Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
File: BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft (raw, json)
Hash identifier: DfGL9j/8zJsgdR7/RGGEqsKrcYXl+2fo4dmnQ47GCgQ=
Subject key identifier: A9:39:20:F2:1F:EA:A6:28:CC:45:5F:55:39:6C:AA:23:09:6D:9B:0F
Authority key identifier: 04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
Certificate issuer: /CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Certificate serial: 01A084C136C2DD211CAFEA006DD0DD665CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
Manifest number: BE
Signing time: Wed 09 Sep 2026 06:00:49 +0000
Manifest this update: Wed 09 Sep 2026 06:00:49 +0000
Manifest next update: Thu 10 Sep 2026 06:00:49 +0000
Files and hashes: 1: BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl (hash: BycFGSTAiloUnfH4lwTct5mjX4Zxi4BhIPSJ3P9lnY8=)
2: u1twKMliTmOOofk7S5b_JmE32QM.roa (hash: YWILxFaDWAVRhnQigHWpWfe9/0YdhpATbHUYSduVmYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:c1:36:c2:dd:21:1c:af:ea:00:6d:d0:dd:66:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Validity
Not Before: Sep 9 06:00:49 2026 GMT
Not After : Sep 10 06:00:49 2026 GMT
Subject: CN=a93920f21feaa628cc455f55396caa23096d9b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:b3:e6:69:f3:d3:ee:d3:45:da:53:67:d5:
6d:0e:4d:9b:92:65:78:ce:58:be:9b:6d:80:e7:6c:
37:78:66:39:a7:5f:fa:1e:40:a0:3e:22:13:80:a0:
bb:38:08:7c:80:ad:ab:87:44:5b:a5:2f:9d:ba:60:
43:bd:9e:87:29:f8:5f:a3:e3:7f:b6:39:6e:9c:c7:
c6:43:ac:68:d4:99:bb:46:e9:d7:fc:4d:c3:2b:78:
0f:dc:4b:6e:b3:e7:cd:59:de:1a:f3:d4:b5:5b:89:
58:e3:ec:f3:92:fc:99:4d:b6:58:4a:f0:0c:d5:e4:
6b:a8:c6:7d:f0:4b:37:5f:21:27:11:db:12:a8:95:
20:09:a3:fa:a1:5b:c4:81:6e:d4:9c:76:f3:ae:d4:
12:23:3d:f5:83:24:10:12:6b:f5:01:5e:04:1d:2f:
d3:16:4e:84:1e:2c:2b:8a:c3:86:90:07:22:a8:cd:
75:44:40:e6:bb:f1:1a:55:72:4c:5b:1f:5f:ed:35:
06:fd:d6:ad:59:7c:91:97:6f:04:bd:75:c7:e7:a5:
e1:66:56:29:3f:03:98:e5:4c:27:5d:6f:9d:f8:d7:
27:bb:2f:dc:34:62:03:e9:0f:12:4b:33:88:d1:48:
90:e1:8f:51:d9:b7:40:d1:79:aa:f9:26:24:4c:cf:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:20:F2:1F:EA:A6:28:CC:45:5F:55:39:6C:AA:23:09:6D:9B:0F
X509v3 Authority Key Identifier:
keyid:04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:31:d7:fa:e4:98:f3:dd:2a:49:b0:0d:db:fe:a5:d0:98:
c1:2a:f2:7c:59:00:77:15:4d:bd:ed:bb:f1:3f:ad:45:71:e9:
c1:eb:d8:42:01:c2:72:9a:d7:af:0b:da:eb:bc:42:85:59:74:
84:62:f6:ab:f0:98:2e:92:e3:47:09:fb:e7:ce:55:6c:84:1c:
d6:dd:d1:66:44:3b:a9:7c:5c:88:32:ab:e3:6a:4c:d1:78:75:
ca:7d:00:c1:1e:aa:db:da:84:a7:0e:93:28:e7:af:d4:f7:4d:
07:3c:7e:f8:6b:f4:2c:f8:32:26:58:9c:a0:17:02:8e:9a:ef:
6c:ad:67:4e:f4:82:3f:b9:2f:47:83:6a:17:19:5c:39:b1:4e:
35:09:e7:56:29:25:02:67:82:e8:06:6a:4a:86:40:db:75:f3:
46:7b:fd:d0:77:ca:c9:1b:8d:5e:ed:1b:14:99:fa:2f:54:88:
e7:52:35:75:61:d6:4c:07:2a:3b:91:82:19:52:b9:af:b7:60:
e1:de:a9:cd:6a:c8:94:cb:e3:75:54:f9:b0:cd:ba:e7:9e:9d:
59:03:fd:1a:87:d1:ce:5e:43:2a:04:c6:ed:27:5b:a9:60:f4:
96:51:e5:c0:d7:96:a4:d6:1e:7f:c1:b2:bb:15:d3:c3:a3:fa:
23:6c:09:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCEwTbC3SEcr+oAbdDdZly/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NWI4ZGY0NGU5ZTkwYjJkYzgwM2NkNDM0MTUyNDJhNGRi
MzhlN2YwHhcNMjYwOTA5MDYwMDQ5WhcNMjYwOTEwMDYwMDQ5WjAzMTEwLwYDVQQD
EyhhOTM5MjBmMjFmZWFhNjI4Y2M0NTVmNTUzOTZjYWEyMzA5NmQ5YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoACz5mnz0+7TRdpTZ9VtDk2bkmV4
zli+m22A52w3eGY5p1/6HkCgPiITgKC7OAh8gK2rh0RbpS+dumBDvZ6HKfhfo+N/
tjlunMfGQ6xo1Jm7RunX/E3DK3gP3Etus+fNWd4a89S1W4lY4+zzkvyZTbZYSvAM
1eRrqMZ98Es3XyEnEdsSqJUgCaP6oVvEgW7UnHbzrtQSIz31gyQQEmv1AV4EHS/T
Fk6EHiwrisOGkAciqM11REDmu/EaVXJMWx9f7TUG/datWXyRl28EvXXH56XhZlYp
PwOY5UwnXW+d+Ncnuy/cNGID6Q8SSzOI0UiQ4Y9R2bdA0Xmq+SYkTM8uMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk5IPIf6qYozEVfVTlsqiMJbZsPMB8GA1UdIwQY
MBaAFARbjfROnpCy3IA81DQVJCpNs45/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZ1TjlFNmVrTExjZ0R6VU5CVWtLazJ6am44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNGUwNTctYzY5OC00OTMzLTlkMDUt
N2MwYTk0YWUxNzE5LzEvQkZ1TjlFNmVrTExjZ0R6VU5CVWtLazJ6am44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNGUwNTctYzY5OC00OTMzLTlkMDUtN2MwYTk0YWUxNzE5
LzEvQkZ1TjlFNmVrTExjZ0R6VU5CVWtLazJ6am44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKkx1/rk
mPPdKkmwDdv+pdCYwSryfFkAdxVNve278T+tRXHpwevYQgHCcprXrwva67xChVl0
hGL2q/CYLpLjRwn7585VbIQc1t3RZkQ7qXxciDKr42pM0Xh1yn0AwR6q29qEpw6T
KOev1PdNBzx++Gv0LPgyJlicoBcCjprvbK1nTvSCP7kvR4NqFxlcObFONQnnVikl
AmeC6AZqSoZA23XzRnv90HfKyRuNXu0bFJn6L1SI51I1dWHWTAcqO5GCGVK5r7dg
4d6pzWrIlMvjdVT5sM26556dWQP9GofRzl5DKgTG7SdbqWD0llHlwNeWpNYef8Gy
uxXTw6P6I2wJtg==
-----END CERTIFICATE-----
Generated at Wed Sep 9 08:38:48 2026 by rpki-client