Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: axVTih2fJmyBZVeReK2na11tpEaALI+HacqNz+LLS5Y=
Subject key identifier: 5B:60:B3:41:4F:83:30:EF:82:7C:D2:57:62:B5:E7:25:B5:4D:7C:DD
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 01A08F7BC175BB3F15BE462B08A0815C36C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 14CC
Signing time: Fri 11 Sep 2026 08:00:47 +0000
Manifest this update: Fri 11 Sep 2026 08:00:47 +0000
Manifest next update: Sat 12 Sep 2026 08:00:47 +0000
Files and hashes: 1: D3EXfnpLfks5hkWJ3JpH4AjPZus.asa (hash: YU9VXUO2KnpRtE3dCPlyXEXuMHPtxfhZzrU9FfAfgzM=)
2: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: WWZvmk81VGUdzaEzfnefhK1BNPPVrWFMzvhua2ToPxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7b:c1:75:bb:3f:15:be:46:2b:08:a0:81:5c:36:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Sep 11 08:00:47 2026 GMT
Not After : Sep 12 08:00:47 2026 GMT
Subject: CN=5b60b3414f8330ef827cd25762b5e725b54d7cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:5b:ee:65:28:e7:81:87:04:86:cb:f2:9c:
98:8d:f9:f8:ea:1f:11:c3:59:9f:22:f2:a5:47:7b:
f7:1d:20:6a:93:eb:5c:21:12:e6:06:6f:de:ac:15:
ab:7b:a8:ba:c1:2e:e6:65:cf:47:ee:5c:28:7d:58:
45:6d:91:e7:45:ba:ce:e4:89:03:33:a1:1a:03:fb:
76:80:44:62:ae:d4:49:25:be:a2:b6:a7:4d:e7:2e:
e0:dd:3b:a1:c6:e2:49:96:32:5c:75:73:f9:34:b5:
ef:a4:50:2b:3c:fa:78:1e:56:af:42:ba:77:f3:30:
2c:c5:94:23:f7:5f:e4:06:6b:de:cc:cb:a8:b4:98:
39:e2:a8:cd:69:a3:d7:d5:4f:38:36:22:7d:f0:53:
7e:8b:9b:bd:83:60:80:7d:26:f5:f1:04:65:ae:de:
e5:4e:81:58:e4:16:4e:70:9e:6d:e9:6d:95:62:51:
ae:9a:3e:66:f5:7d:95:fc:ee:08:4c:e7:85:f2:ee:
ed:e1:42:4c:f1:9f:c3:f6:c8:5f:7a:fc:61:57:a6:
27:de:e9:13:97:e6:cf:0c:4d:88:16:d0:ec:6c:74:
ff:81:65:2d:5c:8e:ca:61:1f:3f:73:e3:b4:e5:43:
78:cb:d4:a7:a6:8a:71:7c:fb:f2:8a:9e:76:81:52:
82:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:60:B3:41:4F:83:30:EF:82:7C:D2:57:62:B5:E7:25:B5:4D:7C:DD
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:14:f8:b5:76:a6:18:98:42:4f:76:42:5d:29:39:dd:b7:58:
fe:5f:ab:b5:62:0a:f9:00:8e:a7:0a:e8:7f:a5:5c:12:73:3f:
2c:0c:39:7d:a4:ef:47:84:d0:a9:38:96:23:49:ba:f1:45:b0:
e4:8b:9f:36:04:3b:96:62:8b:f6:b9:06:38:57:5b:45:7c:c2:
17:e1:40:22:b9:2a:b6:5a:7d:65:c8:62:ab:bb:a9:bb:54:54:
6c:23:70:8f:c9:82:11:ab:08:bc:d8:97:e8:50:7e:12:0d:d0:
ed:8b:fa:86:ac:af:41:a7:ec:ce:85:f6:b7:55:96:5c:00:45:
0f:3a:ff:f7:0b:72:77:1e:e2:22:79:d6:73:9f:f9:41:1a:4c:
2c:74:79:0c:5d:15:5a:23:5e:18:fd:32:d6:d5:5d:1d:c8:4d:
ef:73:94:11:1e:07:8e:5c:fa:96:3b:4f:a5:03:72:78:28:5b:
eb:4a:fa:0c:6b:68:90:80:f3:04:ab:a0:2c:35:8a:f9:2b:80:
4c:76:14:c6:b7:45:f4:78:1e:05:6f:a2:8e:8f:ba:0b:58:34:
ba:85:2c:2d:f3:a5:d0:8c:2c:75:52:1b:ba:19:44:c4:56:c8:
45:1a:b5:73:bb:13:dd:3e:2a:f3:83:6d:35:32:bf:ad:46:8b:
28:12:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:50:25 2026 by rpki-client