Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: 7Yw95+WUxi5mxvcauH9rTYnffBtDn6x2JbKitWOdwjA=
Subject key identifier: B6:52:DC:54:1B:9D:A8:B0:E5:03:BB:46:5B:63:94:D3:F7:CA:22:71
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 019D081E632333E9DE339F0A80B9794E1AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 12F8
Signing time: Thu 19 Mar 2026 22:01:42 +0000
Manifest this update: Thu 19 Mar 2026 22:01:42 +0000
Manifest next update: Fri 20 Mar 2026 22:01:42 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: b1G1bQknsN6C7glabjkUuz2JxKjyjYtDRJLqJjF0Bho=)
2: z5T8Jeg-KRSBVrpJUiY8WPEbWHc.asa (hash: zIR+Jq1Supq4I4d8NJWheupQs8oviXsGrFqUkRsxnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:1e:63:23:33:e9:de:33:9f:0a:80:b9:79:4e:1a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Mar 19 22:01:42 2026 GMT
Not After : Mar 20 22:01:42 2026 GMT
Subject: CN=b652dc541b9da8b0e503bb465b6394d3f7ca2271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:4d:56:7b:d3:c6:4a:c1:2b:92:b1:39:f0:
d8:92:fb:71:7c:13:a8:ff:1f:a4:37:5f:85:33:ea:
04:bc:32:ef:2c:37:e1:70:24:86:a1:a6:f1:8d:09:
17:ae:05:02:4b:d5:39:44:c1:17:a4:b8:75:13:e8:
1f:8b:cc:f3:d9:f3:46:fc:61:b4:b9:d5:78:8a:cb:
d2:c8:bf:9b:56:e8:5f:75:c0:88:33:9f:f6:63:de:
72:2d:b2:ae:00:ad:71:6e:40:fc:74:0b:67:60:36:
b5:c2:8f:35:61:61:83:41:76:7c:b8:61:54:57:e2:
16:c6:ae:a4:3e:38:de:46:85:70:2f:49:ae:6a:10:
45:4d:b2:20:3d:4b:ec:75:cb:04:99:4a:28:19:06:
3d:5f:8c:c7:16:4f:19:3b:e0:bf:60:3f:d6:24:28:
16:c2:74:b0:62:2e:a6:b3:88:04:09:44:2d:0b:72:
8d:67:da:9d:4b:9f:c3:88:d6:54:d2:36:f7:49:69:
9f:7d:6b:03:fc:2e:08:45:7d:c2:7a:37:f5:91:ff:
f3:b0:76:3e:79:36:31:ad:2c:af:d7:c4:78:a9:59:
db:6e:c4:e6:72:87:55:39:d7:50:ef:67:76:3c:68:
4e:18:6e:3b:b7:fe:39:92:bb:20:59:13:ae:a5:be:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:DC:54:1B:9D:A8:B0:E5:03:BB:46:5B:63:94:D3:F7:CA:22:71
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:17:59:68:d5:77:dd:a2:11:d5:a3:7c:f6:df:2a:c7:af:1f:
2b:0b:19:20:86:95:d2:18:b2:4a:65:96:90:c3:48:59:12:31:
9d:ee:08:d7:b8:b0:51:a2:82:4d:81:22:62:fd:91:d8:ca:85:
03:c6:d1:1d:cb:71:71:02:ef:f7:cf:b6:5d:ad:f0:96:02:df:
fb:ae:2e:ca:1b:7f:49:d9:dc:50:53:97:95:fd:68:29:fe:99:
e5:5d:7f:98:dd:95:6f:01:2d:4b:b9:4e:8a:a9:a7:f6:ef:d0:
2c:de:f0:1c:c4:3c:23:b2:f7:c5:7b:f0:5c:8d:b0:5a:8d:bb:
0b:54:33:91:e3:0c:fc:4a:1e:ac:38:9c:7a:fc:45:7d:1b:99:
66:43:16:4b:ae:50:08:77:ab:91:48:d1:25:51:2a:80:2e:e6:
bc:fd:87:87:5b:dc:76:f6:ae:f9:ea:13:16:0b:98:cd:16:32:
e3:cd:4d:0e:57:fd:c7:1a:9c:c5:93:6e:df:df:20:fe:2a:2b:
03:24:07:cb:4d:b8:5a:a5:72:3a:a9:a3:74:75:7d:14:27:1e:
25:cb:7c:4e:73:01:dd:a2:89:3c:75:65:8e:72:e4:a9:e2:db:
73:8e:a5:c9:89:b9:68:88:8b:45:f9:d3:e9:9e:c1:ce:7e:9a:
67:f7:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:49:15 2026 by rpki-client