Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: +vOmIOwQpAIJKhFsGmUhOFpH760QSJRDO2WtiEAyu3E=
Subject key identifier: E1:72:EF:15:C3:80:CF:7C:77:F2:0B:94:F0:14:F5:7D:4A:DD:E4:18
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 01A148732F681EBC2A27C21AAE94287EEB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 06:01:10 +0000
Manifest this update: Sat 17 Oct 2026 06:01:10 +0000
Manifest next update: Sun 18 Oct 2026 06:01:10 +0000
Files and hashes: 1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: oD1nHQqHjzLpZPZVrlXejXtpfsIsyfDdhcJ+KMpEZLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:2f:68:1e:bc:2a:27:c2:1a:ae:94:28:7e:eb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Oct 17 06:01:10 2026 GMT
Not After : Oct 18 06:01:10 2026 GMT
Subject: CN=e172ef15c380cf7c77f20b94f014f57d4adde418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:57:08:1e:71:54:1e:be:71:0d:7e:cf:3b:
66:82:8c:ee:69:42:48:f0:3b:50:04:03:1e:04:07:
97:98:83:94:a1:05:36:ac:b2:19:9b:63:50:7b:6a:
cf:b2:33:9e:67:52:eb:6a:b5:81:96:ff:08:39:28:
3b:d6:88:aa:34:48:17:66:8e:8a:78:cf:f4:ab:54:
25:34:f1:45:d3:8b:40:9e:23:cf:51:20:20:f7:2d:
4d:5f:a9:61:5a:70:1a:f1:b6:81:1d:35:7e:e6:b7:
6a:8a:7e:d7:a7:11:98:20:59:c7:a5:a2:f2:82:28:
56:5e:5e:34:4f:d4:ad:d8:79:b8:18:5b:ae:c6:96:
31:c7:d2:75:bf:b9:a6:da:d7:1e:8f:00:8c:9a:67:
67:ee:f4:d3:73:e7:be:f7:d6:2d:0d:06:90:01:d5:
b1:f5:a8:6d:06:97:2c:ea:bb:ba:7f:02:00:ef:e4:
35:87:25:cd:cf:b2:7e:9e:bd:6b:49:cf:75:06:d7:
5c:23:f6:71:1e:b9:60:dd:4f:a2:f6:4d:e4:25:0b:
0f:ca:d1:59:7a:2f:26:c2:a4:bd:b5:57:44:a5:05:
f5:f1:90:72:c2:2c:c2:54:f4:19:9d:55:9c:54:4f:
52:a1:f2:36:67:6c:3d:2d:37:f2:bd:8d:66:c8:9d:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:EF:15:C3:80:CF:7C:77:F2:0B:94:F0:14:F5:7D:4A:DD:E4:18
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5b:fe:73:07:b0:60:d9:12:e6:2a:78:b0:7b:b6:0f:b0:50:
40:9f:c3:54:12:85:f0:10:f3:9d:4e:f8:2e:77:08:7d:9c:dd:
e4:29:2d:67:fc:f5:32:cc:0d:b3:79:ee:02:04:bb:e4:5b:e0:
30:2f:a5:9f:82:6d:1d:db:13:bc:65:50:35:c4:40:2c:aa:a2:
5a:82:ab:64:64:63:c2:db:98:15:9f:99:cf:56:06:d0:e7:17:
f0:2a:31:6e:1f:f1:43:01:24:2e:22:f2:82:54:08:3a:3f:9d:
1a:72:1c:82:48:45:c1:40:06:f3:9a:b0:87:5f:ab:69:ab:43:
ee:67:b1:0c:84:aa:6e:40:a8:36:40:fa:03:e7:21:64:47:fd:
21:da:7d:c2:40:02:59:29:4b:5f:84:3e:b7:79:e1:51:a7:3f:
6b:07:36:da:06:27:a5:e7:35:5c:65:c1:24:ac:a6:a6:5f:e0:
d7:4a:bf:93:a8:46:a9:00:45:4d:2b:78:c8:d6:88:cd:04:ba:
40:96:c2:91:10:93:e2:fa:0e:53:36:8f:41:0d:82:95:e9:52:
6c:72:ad:c4:de:c1:40:2e:96:6b:a2:4e:1a:ef:51:0f:1d:f7:
00:ef:55:d9:8a:60:2f:89:d8:9c:97:3d:37:9b:2f:db:a8:74:
70:fc:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:02:42 2026 by rpki-client