Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: AWgh+vEqxIkipCp+OyH+cpJZSqTKpzTwVEIU4BiAV18=
Subject key identifier: 4C:9D:E0:81:86:F1:E8:E5:2D:DA:37:B5:D2:10:C2:40:8B:49:B9:49
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 01A08D8D5CB6BEF96C4F3D8557C2D93FDA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 14CB
Signing time: Thu 10 Sep 2026 23:00:46 +0000
Manifest this update: Thu 10 Sep 2026 23:00:46 +0000
Manifest next update: Fri 11 Sep 2026 23:00:46 +0000
Files and hashes: 1: D3EXfnpLfks5hkWJ3JpH4AjPZus.asa (hash: YU9VXUO2KnpRtE3dCPlyXEXuMHPtxfhZzrU9FfAfgzM=)
2: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: h0Ky1ehufNJWH/15z7lmmUmAX0jK/DY9SJbLUfkriJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:5c:b6:be:f9:6c:4f:3d:85:57:c2:d9:3f:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Sep 10 23:00:46 2026 GMT
Not After : Sep 11 23:00:46 2026 GMT
Subject: CN=4c9de08186f1e8e52dda37b5d210c2408b49b949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:a3:c1:c7:c9:a1:2c:e6:4f:74:90:03:85:
80:45:f4:6d:88:68:74:ad:4a:d5:f0:29:54:94:fb:
bd:2d:6f:aa:aa:99:6b:9c:05:0e:bf:ac:f4:d3:fa:
04:3f:53:07:34:e0:df:f6:6f:ae:d2:80:e2:1c:ae:
db:7d:f9:01:69:dc:28:f4:db:9b:6b:21:c6:80:a4:
9a:24:99:d7:67:0a:60:2f:45:df:cd:b8:cc:31:40:
64:d8:9c:71:1d:37:64:2c:ea:79:30:c6:dc:d5:d5:
cd:dd:d0:95:03:7b:ff:cd:5c:a4:21:02:29:ff:14:
e7:0f:57:57:a1:ab:f4:4d:20:b7:19:9d:8a:18:bd:
79:a0:d5:f1:86:02:5d:4e:88:22:c2:4e:b4:14:20:
13:22:17:dc:3d:2b:1e:9b:7e:7e:61:b4:22:c4:7d:
42:a8:4e:a0:7d:dd:14:83:56:8b:a4:7d:d4:ff:3a:
79:28:bd:90:1b:3e:22:cd:0b:32:b5:2a:0c:33:e9:
ae:a1:1d:8f:7d:6a:37:cf:b4:fe:38:06:0b:2a:02:
45:00:19:d0:13:f3:5c:5a:26:a0:e0:81:da:6f:26:
07:ca:2e:d4:6d:42:3e:3f:43:07:77:88:4a:16:02:
5c:b6:84:91:f1:a0:22:bd:9b:cc:6b:a6:3e:cc:4b:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:E0:81:86:F1:E8:E5:2D:DA:37:B5:D2:10:C2:40:8B:49:B9:49
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:39:22:f6:be:60:14:e4:06:c5:5a:17:a9:90:1b:70:37:
91:32:e3:79:f5:a6:36:d2:ed:89:06:2b:db:c5:88:30:20:25:
de:70:cf:62:9d:db:c9:5b:6e:6c:04:60:f9:b6:dc:2b:ae:c3:
92:ac:ae:7f:c4:c1:79:f8:16:4e:aa:d2:24:ef:6e:80:1f:62:
77:47:47:f4:90:fe:5d:57:bc:20:16:97:94:c4:c6:92:5c:42:
c0:72:c4:2d:df:5e:15:8e:ac:dc:df:d6:63:28:0c:51:8b:b2:
1c:39:44:21:32:6f:9d:25:ee:26:f3:00:90:42:98:40:ec:03:
97:ac:71:15:d0:30:96:e4:da:27:dc:6a:84:43:0e:04:bb:6b:
ce:0b:78:ce:02:5f:a6:28:0f:1c:0e:ac:28:3d:db:1b:0e:fe:
da:e2:e9:77:bf:20:d3:94:e0:3f:97:44:20:84:29:09:43:84:
12:d3:47:7e:90:fd:ad:86:3d:d5:97:32:e2:20:2c:85:aa:bf:
2e:3b:7c:f0:9e:39:35:fb:08:6a:2a:26:8f:ba:d4:22:ab:e0:
01:4b:ab:6d:85:18:09:46:48:b6:9c:d4:5f:f8:77:ea:b1:d4:
24:ac:52:f4:0c:a6:62:75:54:79:72:dc:40:1b:85:9a:a7:ae:
c7:c7:d8:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjVy2vvlsTz2FV8LZP9qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmIwN2ZlYmQ1ZDAwYTkyM2FlMzkwYTQxOTBmZTU2NDRj
ZGQ0ZjYwHhcNMjYwOTEwMjMwMDQ2WhcNMjYwOTExMjMwMDQ2WjAzMTEwLwYDVQQD
Eyg0YzlkZTA4MTg2ZjFlOGU1MmRkYTM3YjVkMjEwYzI0MDhiNDliOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotijwcfJoSzmT3SQA4WARfRtiGh0
rUrV8ClUlPu9LW+qqplrnAUOv6z00/oEP1MHNODf9m+u0oDiHK7bffkBadwo9Nub
ayHGgKSaJJnXZwpgL0XfzbjMMUBk2JxxHTdkLOp5MMbc1dXN3dCVA3v/zVykIQIp
/xTnD1dXoav0TSC3GZ2KGL15oNXxhgJdTogiwk60FCATIhfcPSsem35+YbQixH1C
qE6gfd0Ug1aLpH3U/zp5KL2QGz4izQsytSoMM+muoR2PfWo3z7T+OAYLKgJFABnQ
E/NcWiag4IHabyYHyi7UbUI+P0MHd4hKFgJctoSR8aAivZvMa6Y+zEvEfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyd4IGG8ejlLdo3tdIQwkCLSblJMB8GA1UdIwQY
MBaAFG37B/69XQCpI645CkGQ/lZEzdT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYt
ZGI4NWJhNDA2YzUxLzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYtZGI4NWJhNDA2YzUx
LzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPg5Iva+
YBTkBsVaF6mQG3A3kTLjefWmNtLtiQYr28WIMCAl3nDPYp3byVtubARg+bbcK67D
kqyuf8TBefgWTqrSJO9ugB9id0dH9JD+XVe8IBaXlMTGklxCwHLELd9eFY6s3N/W
YygMUYuyHDlEITJvnSXuJvMAkEKYQOwDl6xxFdAwluTaJ9xqhEMOBLtrzgt4zgJf
pigPHA6sKD3bGw7+2uLpd78g05TgP5dEIIQpCUOEEtNHfpD9rYY91Zcy4iAshaq/
Ljt88J45NfsIaiomj7rUIqvgAUurbYUYCUZItpzUX/h36rHUJKxS9AymYnVUeXLc
QBuFmqeux8fYrQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:59:16 2026 by rpki-client