Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
File: BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft (raw, json)
Hash identifier: Q9GN5314iBeP5TPTRY6PQWSGaZbfjz4ApyXfQOEfqls=
Subject key identifier: 92:AE:28:42:FF:14:7A:40:AA:A2:83:02:B4:4A:46:41:61:4D:1F:E8
Authority key identifier: 04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
Certificate issuer: /CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Certificate serial: 01A181BDB2F375E0CC03FEB248720B8CA2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:00:55 +0000
Manifest this update: Wed 28 Oct 2026 09:00:55 +0000
Manifest next update: Thu 29 Oct 2026 09:00:55 +0000
Files and hashes: 1: BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl (hash: penmCupBU/QyVJNNZi/vRLu0lNw80PNtTpQNEiIZPK8=)
2: u1twKMliTmOOofk7S5b_JmE32QM.roa (hash: YWILxFaDWAVRhnQigHWpWfe9/0YdhpATbHUYSduVmYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:b2:f3:75:e0:cc:03:fe:b2:48:72:0b:8c:a2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Validity
Not Before: Oct 28 09:00:55 2026 GMT
Not After : Oct 29 09:00:55 2026 GMT
Subject: CN=92ae2842ff147a40aaa28302b44a4641614d1fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:ce:3f:04:69:f0:da:e5:be:df:1d:c1:ba:
a4:27:2b:61:82:8a:ab:ff:0d:6b:89:ca:c1:39:b5:
0d:9a:48:f9:75:e8:3e:6e:cf:1e:87:e3:f8:16:d5:
36:4a:42:db:d9:1a:70:c2:e4:67:be:50:2a:39:d2:
76:f2:b8:2d:e4:5e:28:cf:b5:d5:73:ba:56:48:f6:
c7:f1:0c:89:0e:0d:0e:bd:3d:ee:93:34:b9:19:f4:
73:e4:b0:3d:69:bb:85:a2:81:bd:c1:f0:90:8b:89:
f7:e8:7c:13:f5:75:4e:92:b3:d4:9d:d0:93:6c:26:
29:14:8f:b1:06:8e:82:fe:ea:fd:0c:2d:ab:0b:7b:
54:b8:3f:e6:12:a3:c6:a4:85:43:8d:52:55:1f:e2:
3d:43:69:06:53:91:06:34:a4:0f:d0:32:20:1d:28:
6d:1a:b1:aa:07:7f:8d:6c:27:9d:27:36:ed:c1:66:
e5:98:e4:da:13:c5:2f:01:d7:39:69:cc:2f:0f:d0:
3e:0e:ac:2b:a7:97:59:f7:b5:49:f7:08:15:17:4a:
1d:43:20:a2:b3:56:06:5a:ed:5b:d4:e1:16:76:70:
4d:96:e8:67:ee:70:8e:11:78:51:d7:98:64:01:fd:
3b:83:ea:c2:1e:73:bd:10:91:bd:45:d1:76:c0:2d:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:28:42:FF:14:7A:40:AA:A2:83:02:B4:4A:46:41:61:4D:1F:E8
X509v3 Authority Key Identifier:
keyid:04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:13:c4:6f:0f:47:3f:f8:4c:b9:cb:94:58:81:c5:ac:71:51:
2b:4d:9a:0e:9d:a4:0b:20:51:5c:a6:1f:eb:f1:e8:30:1e:97:
c6:9d:89:17:6f:cc:15:73:b0:05:a7:b2:40:83:60:4c:0a:32:
79:03:90:a2:8c:97:88:e3:34:9a:01:cf:48:44:e9:68:97:1d:
5a:85:12:19:27:08:29:7c:93:fe:f2:4e:e9:e4:63:d5:2d:a1:
cb:5a:ae:5e:e6:bb:93:e1:8e:97:75:46:a2:8f:4a:1a:db:21:
18:e3:cd:49:45:3b:2b:0e:66:12:43:b2:54:98:55:41:ba:c4:
36:20:5a:bb:3d:30:e5:b8:dc:fc:dc:38:8a:9e:7a:cb:b8:3c:
8c:0d:b2:1e:c3:ff:b2:5c:2f:59:1b:9e:d5:a3:78:3d:da:2e:
4a:ce:59:21:26:52:a0:ab:f3:c4:51:d6:2d:e9:d6:88:78:f8:
88:6e:73:84:b5:dc:ac:f3:9b:d4:4e:f7:f2:f4:77:56:bb:33:
1b:f9:8a:f6:ac:14:51:93:b7:7b:dc:fc:bb:59:18:1f:54:66:
d2:c1:54:f0:bd:07:fd:0c:8d:11:7c:ad:16:09:c8:e8:f9:9f:
a8:ff:c6:40:24:1c:84:37:b5:43:fa:e8:d5:9f:ac:d9:8b:91:
20:e6:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:22:51 2026 by rpki-client