Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: EaHme799Sj7OYNhm7OH6v7k69hfvuv8bhWduP3Lob1o=
Subject key identifier: 10:5F:7D:24:89:3E:26:33:9A:C2:76:B2:9F:94:97:06:46:37:73:35
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 01A002138FFA0DF576AA412D2C22BFC072BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:00:31 +0000
Manifest this update: Fri 14 Aug 2026 21:00:31 +0000
Manifest next update: Sat 15 Aug 2026 21:00:31 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: 17SYOojgtX1PhKLZQ3zH6KwE0sGGCUU9eZQNrwn7O0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:8f:fa:0d:f5:76:aa:41:2d:2c:22:bf:c0:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Aug 14 21:00:31 2026 GMT
Not After : Aug 15 21:00:31 2026 GMT
Subject: CN=105f7d24893e26339ac276b29f94970646377335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:fb:27:e0:c7:db:8a:e0:05:97:61:3f:5c:
76:4f:a4:df:60:66:f7:bf:e6:09:b2:6c:bb:b4:f5:
ec:a4:a5:dd:ed:57:4c:76:69:2a:02:5f:30:b6:0a:
6c:69:32:c7:8c:da:24:57:de:1e:4b:94:f2:6f:67:
ec:0b:73:c9:94:13:fd:75:65:5d:9d:1d:56:74:ae:
cf:d5:02:5a:36:0d:3e:4d:83:71:91:ac:b2:64:3b:
40:8b:15:24:b9:3c:12:f8:dc:ad:51:27:b1:09:3e:
6a:37:9c:0d:f8:85:ef:89:f9:5e:27:ac:3d:1b:45:
62:89:26:6a:86:be:ca:1b:d6:ac:b3:0f:61:54:df:
22:cb:6d:b6:86:86:71:27:99:72:17:d1:16:2e:f2:
11:96:cc:e8:b8:ee:6f:e0:8d:3d:21:f3:c9:45:96:
19:e0:74:c9:df:e3:8d:47:bb:41:09:23:43:ee:e4:
76:91:40:08:03:47:79:0e:54:65:8e:0c:97:4b:e7:
6b:b9:b0:58:e7:b6:f0:f4:a1:ce:06:c3:14:5a:01:
e5:bc:26:93:88:c2:3a:b9:f2:00:33:d2:28:37:66:
ab:02:41:0e:0b:f0:b0:4c:89:f5:b3:e8:b7:9b:c7:
b3:d0:d0:17:cd:af:05:f4:0b:c7:f3:20:b7:5e:42:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:7D:24:89:3E:26:33:9A:C2:76:B2:9F:94:97:06:46:37:73:35
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b1:bb:e8:fa:25:bd:61:a5:66:fe:07:af:11:e2:98:85:b1:
23:39:92:b6:00:c8:7d:09:df:a8:23:1b:59:da:58:e0:ce:38:
77:32:dd:80:5e:bc:7d:83:b6:3b:3d:94:05:08:57:4f:b2:ba:
9a:17:45:55:70:e2:3d:e9:4e:79:24:09:4b:d9:73:c0:33:51:
8d:ff:8f:ff:49:90:81:bd:c2:03:b9:a3:b4:58:a5:b5:73:e0:
03:48:24:f9:42:03:e7:29:8c:1a:81:56:af:f4:ba:95:75:ca:
aa:6e:97:23:fc:7c:ac:21:61:c4:3e:67:59:3d:45:1b:25:5c:
b2:5e:ad:5d:a2:c3:94:20:05:d5:45:22:24:89:96:16:7e:ab:
5b:7a:84:09:29:da:c7:b8:76:ec:2e:7a:be:de:87:45:86:05:
f7:aa:31:ea:5e:c1:90:c9:b0:98:97:b2:aa:05:c8:44:19:63:
db:0b:3e:26:91:82:8e:ad:2c:f9:ed:ee:3e:c0:38:44:37:bd:
ef:d6:5a:e9:99:77:e0:bf:d8:5f:32:e6:9a:28:24:61:72:14:
81:52:f3:f5:9c:e0:35:75:5c:6c:cc:c8:18:43:5a:54:cc:c8:
99:d6:0e:ed:e5:42:ef:51:e6:a5:76:54:1f:4d:0e:4d:8c:6c:
6a:45:c5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE4/6DfV2qkEtLCK/wHK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjFjODcyNGNiYmQwMzRiYWI3YTBkYWRmMGFiNGI5OWZm
NjZmZmYwHhcNMjYwODE0MjEwMDMxWhcNMjYwODE1MjEwMDMxWjAzMTEwLwYDVQQD
EygxMDVmN2QyNDg5M2UyNjMzOWFjMjc2YjI5Zjk0OTcwNjQ2Mzc3MzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHz7J+DH24rgBZdhP1x2T6TfYGb3
v+YJsmy7tPXspKXd7VdMdmkqAl8wtgpsaTLHjNokV94eS5Tyb2fsC3PJlBP9dWVd
nR1WdK7P1QJaNg0+TYNxkayyZDtAixUkuTwS+NytUSexCT5qN5wN+IXvifleJ6w9
G0ViiSZqhr7KG9assw9hVN8iy222hoZxJ5lyF9EWLvIRlszouO5v4I09IfPJRZYZ
4HTJ3+ONR7tBCSND7uR2kUAIA0d5DlRljgyXS+drubBY57bw9KHOBsMUWgHlvCaT
iMI6ufIAM9IoN2arAkEOC/CwTIn1s+i3m8ez0NAXza8F9AvH8yC3XkIQFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBffSSJPiYzmsJ2sp+UlwZGN3M1MB8GA1UdIwQY
MBaAFG3xyHJMu9A0ureg2t8KtLmf9m//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAt
ZjkyNGQ2ZjZhNTk1LzEvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAtZjkyNGQ2ZjZhNTk1
LzEvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7G76Pol
vWGlZv4HrxHimIWxIzmStgDIfQnfqCMbWdpY4M44dzLdgF68fYO2Oz2UBQhXT7K6
mhdFVXDiPelOeSQJS9lzwDNRjf+P/0mQgb3CA7mjtFiltXPgA0gk+UID5ymMGoFW
r/S6lXXKqm6XI/x8rCFhxD5nWT1FGyVcsl6tXaLDlCAF1UUiJImWFn6rW3qECSna
x7h27C56vt6HRYYF96ox6l7BkMmwmJeyqgXIRBlj2ws+JpGCjq0s+e3uPsA4RDe9
79Za6Zl34L/YXzLmmigkYXIUgVLz9ZzgNXVcbMzIGENaVMzImdYO7eVC71HmpXZU
H00OTYxsakXFdQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:18 2026 by rpki-client