Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: AsTqHVNo1hkExwoBQEOVTkqNM9kjnQq+dvgOAnk40X0=
Subject key identifier: A9:DA:DC:81:94:D4:4F:CD:0A:A9:EB:B8:52:7F:5B:A5:1C:99:47:33
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 019E30A8F6C383CB9C8DA49274E2EE0E52AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 12:00:39 +0000
Manifest this update: Sat 16 May 2026 12:00:39 +0000
Manifest next update: Sun 17 May 2026 12:00:39 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: Ods5MLyOU91nKc9Pac5kxmMexzzpSfAk8cEj4HA3Q7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:f6:c3:83:cb:9c:8d:a4:92:74:e2:ee:0e:52:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: May 16 12:00:39 2026 GMT
Not After : May 17 12:00:39 2026 GMT
Subject: CN=a9dadc8194d44fcd0aa9ebb8527f5ba51c994733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:95:9b:86:d8:0f:73:e9:41:fe:a8:f6:91:
3d:0e:36:73:06:77:04:b6:6a:a0:b9:c7:8f:ca:ce:
9a:0b:a9:1c:51:a1:01:cb:87:8b:ed:da:df:cd:28:
d5:91:fc:19:be:f6:75:48:b6:27:e1:7a:8f:62:4e:
e9:dd:06:b3:4c:17:79:e8:d7:f3:74:8f:68:1e:39:
a3:45:dc:2e:01:bd:be:ca:59:27:df:ed:da:12:9d:
3a:98:59:94:0e:e9:25:66:8c:77:e7:5e:ce:ea:66:
5d:35:60:b8:9f:63:ae:68:78:6f:7b:03:2d:56:73:
f5:90:56:08:01:78:02:d9:3c:e9:21:69:66:1d:9b:
93:58:b3:5b:ec:ae:40:dc:93:7e:94:f7:76:2d:75:
8c:dd:69:af:65:5d:48:02:80:b6:72:64:94:36:3a:
9c:79:dd:52:3a:48:7e:9e:39:5d:73:96:23:1b:68:
e8:58:b0:2f:38:22:90:b5:f9:5e:43:b4:8a:c8:8e:
b8:ac:0e:9d:76:e8:65:3d:24:f4:57:34:4e:fd:cf:
05:95:ac:f6:85:09:7c:9d:c8:bf:8e:48:4f:a0:60:
04:63:88:2c:84:1c:90:9d:9c:07:25:d7:1b:fd:41:
f3:a0:a9:99:2f:60:3f:cd:8e:ac:ef:e2:d5:f0:1b:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DA:DC:81:94:D4:4F:CD:0A:A9:EB:B8:52:7F:5B:A5:1C:99:47:33
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:57:4c:52:0d:d1:05:02:3f:4c:0b:b0:3d:fb:28:15:20:
fa:11:e2:43:ff:73:8b:f4:f6:c2:9f:4c:16:af:28:c2:52:9b:
02:aa:0d:c6:77:b0:0a:4b:56:a5:bf:87:55:de:93:d7:d2:8e:
2d:7e:c0:e6:48:97:22:18:bd:46:9b:d5:09:b0:4c:bb:8e:12:
11:be:09:37:f2:6c:b3:56:ec:c7:ae:94:06:50:72:17:69:5a:
bf:39:ba:bf:63:ee:31:f3:ce:37:45:89:d7:3d:4d:b2:bd:cb:
d0:f0:ac:11:d2:14:8e:94:b7:9e:f7:89:20:74:c6:50:de:bb:
e0:76:23:59:f6:a0:4b:71:d8:46:8d:f3:ba:af:f2:5c:22:b7:
b7:93:1d:22:15:b5:d8:69:75:fb:14:e6:f7:81:bb:74:36:22:
91:67:e9:e1:7c:94:38:76:75:88:18:e8:90:33:7e:18:d3:79:
fc:da:c2:ea:92:db:75:7f:72:36:17:81:f6:c3:7b:18:ca:90:
35:24:e3:99:b2:0f:5f:a1:15:c9:a7:29:77:4c:60:26:1c:9e:
51:12:87:89:e0:44:c1:98:af:aa:64:07:ee:e5:7b:2e:4e:99:
96:e5:4a:41:cc:ec:e4:7f:ec:69:57:a5:e8:6c:4e:b2:90:e3:
2c:4c:41:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqPbDg8ucjaSSdOLuDlKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjFjODcyNGNiYmQwMzRiYWI3YTBkYWRmMGFiNGI5OWZm
NjZmZmYwHhcNMjYwNTE2MTIwMDM5WhcNMjYwNTE3MTIwMDM5WjAzMTEwLwYDVQQD
EyhhOWRhZGM4MTk0ZDQ0ZmNkMGFhOWViYjg1MjdmNWJhNTFjOTk0NzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U6Vm4bYD3PpQf6o9pE9DjZzBncE
tmqgucePys6aC6kcUaEBy4eL7drfzSjVkfwZvvZ1SLYn4XqPYk7p3QazTBd56Nfz
dI9oHjmjRdwuAb2+ylkn3+3aEp06mFmUDuklZox3517O6mZdNWC4n2OuaHhvewMt
VnP1kFYIAXgC2TzpIWlmHZuTWLNb7K5A3JN+lPd2LXWM3WmvZV1IAoC2cmSUNjqc
ed1SOkh+njldc5YjG2joWLAvOCKQtfleQ7SKyI64rA6dduhlPST0VzRO/c8Flaz2
hQl8nci/jkhPoGAEY4gshByQnZwHJdcb/UHzoKmZL2A/zY6s7+LV8BsPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKna3IGU1E/NCqnruFJ/W6UcmUczMB8GA1UdIwQY
MBaAFG3xyHJMu9A0ureg2t8KtLmf9m//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAt
ZjkyNGQ2ZjZhNTk1LzEvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAtZjkyNGQ2ZjZhNTk1
LzEvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcK9XTFIN
0QUCP0wLsD37KBUg+hHiQ/9zi/T2wp9MFq8owlKbAqoNxnewCktWpb+HVd6T19KO
LX7A5kiXIhi9RpvVCbBMu44SEb4JN/Jss1bsx66UBlByF2lavzm6v2PuMfPON0WJ
1z1Nsr3L0PCsEdIUjpS3nveJIHTGUN674HYjWfagS3HYRo3zuq/yXCK3t5MdIhW1
2Gl1+xTm94G7dDYikWfp4XyUOHZ1iBjokDN+GNN5/NrC6pLbdX9yNheB9sN7GMqQ
NSTjmbIPX6EVyacpd0xgJhyeURKHieBEwZivqmQH7uV7Lk6ZluVKQczs5H/saVel
6GxOspDjLExB7Q==
-----END CERTIFICATE-----
Generated at Sat May 16 21:14:22 2026 by rpki-client