Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: tAlOPSCl3D0oO/giHKYpQUwMM9H13Tjs+b+OGm1eh+Y=
Subject key identifier: 4A:D0:91:D9:4F:2A:10:AA:1F:A0:98:3D:BB:16:5B:16:E6:7F:32:5B
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019E30E0591E86EB0B7E33E79C1D7F173C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0631
Signing time: Sat 16 May 2026 13:01:09 +0000
Manifest this update: Sat 16 May 2026 13:01:09 +0000
Manifest next update: Sun 17 May 2026 13:01:09 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: MXEofg0J/qEhSVD15u8SBIBwBGZGJH6glsd/z5J1z8s=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:59:1e:86:eb:0b:7e:33:e7:9c:1d:7f:17:3c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: May 16 13:01:09 2026 GMT
Not After : May 17 13:01:09 2026 GMT
Subject: CN=4ad091d94f2a10aa1fa0983dbb165b16e67f325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:90:89:6b:1c:92:5d:a1:f8:e5:a2:be:f0:
57:53:be:72:27:0b:f5:41:56:ed:d7:09:e5:6a:a8:
97:45:b4:dd:6c:d1:07:07:ce:43:c0:5c:2a:a3:77:
85:e2:6b:2c:fc:c4:35:92:d6:f7:3e:23:d4:0b:29:
4f:e0:75:73:0a:04:ae:dc:55:25:03:ca:f9:37:39:
43:a3:93:14:95:6e:0a:35:70:91:c7:6b:08:81:16:
c9:51:6e:de:83:8f:42:e4:4a:8a:ff:dd:6b:12:3f:
2e:5a:2b:83:83:13:27:52:e7:b2:60:fa:19:be:29:
3b:58:ca:87:30:3a:00:5b:6b:fb:bc:7d:f7:d8:38:
36:f7:af:f1:9f:57:e2:07:92:53:51:5e:ed:5c:a8:
20:43:36:78:f6:9c:11:c0:6d:0d:5d:6e:24:0f:cf:
33:63:8c:e1:17:51:8a:1d:0a:4b:29:19:67:2f:e6:
d0:a1:8a:8f:8e:3e:a5:f8:fb:39:24:e0:a9:ac:28:
b7:6a:29:12:8f:45:1a:3d:18:ae:30:dc:89:81:fa:
02:ee:fb:dd:75:37:6c:15:4f:b1:86:5f:00:ed:de:
1a:d5:fe:99:7f:24:46:cc:db:34:14:cc:d7:3b:50:
52:18:2f:2d:3d:66:14:06:95:32:9d:31:6c:04:7e:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:91:D9:4F:2A:10:AA:1F:A0:98:3D:BB:16:5B:16:E6:7F:32:5B
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:86:52:c1:51:f7:8f:19:d2:02:63:09:42:cd:41:75:36:89:
0d:13:6b:5b:f4:e2:9e:ec:0b:31:30:2b:87:6b:1b:ef:61:18:
38:72:43:f1:f4:e5:fc:9b:24:8e:66:ec:3b:51:61:12:73:fe:
97:1d:1d:a3:14:3b:5b:c5:7b:7c:4a:37:3e:6c:cd:a1:78:06:
ba:ed:6a:a6:95:13:21:aa:35:b5:b2:60:b6:09:48:7a:ad:f9:
12:d8:4d:ae:6d:b9:fc:6b:e3:fb:f6:2a:f5:fa:c8:27:5a:f1:
f3:6f:5f:a9:b3:73:5c:32:0f:0e:87:73:de:13:17:b4:8d:28:
65:ec:8a:76:68:7d:c1:b2:b7:0f:fc:03:4e:75:62:dd:15:02:
47:8e:43:db:fa:de:81:07:11:fd:2e:0a:77:e5:2f:36:16:70:
b0:a1:1f:35:7f:74:21:c5:d4:ce:6e:14:8e:65:81:fb:7d:c1:
ca:34:bb:d6:1b:99:ef:81:a5:91:09:ec:a2:d1:ad:1c:01:74:
3b:80:38:cc:63:c8:98:a8:13:6e:ab:7a:e2:ab:3b:81:bc:dd:
08:67:15:09:2b:50:0d:54:cc:a7:99:e8:2d:68:de:f6:d7:cc:
ae:e2:5d:9d:83:8a:51:8a:1b:a9:33:f4:0e:1c:7c:cd:1c:8e:
e6:0b:be:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4FkehusLfjPnnB1/FzxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjIyMWY1ZjA0Y2Y5ZDk2ZGRlYTQ0MjUxYjJiODIzZjcx
MTQ2NjMwHhcNMjYwNTE2MTMwMTA5WhcNMjYwNTE3MTMwMTA5WjAzMTEwLwYDVQQD
Eyg0YWQwOTFkOTRmMmExMGFhMWZhMDk4M2RiYjE2NWIxNmU2N2YzMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5uQiWsckl2h+OWivvBXU75yJwv1
QVbt1wnlaqiXRbTdbNEHB85DwFwqo3eF4mss/MQ1ktb3PiPUCylP4HVzCgSu3FUl
A8r5NzlDo5MUlW4KNXCRx2sIgRbJUW7eg49C5EqK/91rEj8uWiuDgxMnUueyYPoZ
vik7WMqHMDoAW2v7vH332Dg296/xn1fiB5JTUV7tXKggQzZ49pwRwG0NXW4kD88z
Y4zhF1GKHQpLKRlnL+bQoYqPjj6l+Ps5JOCprCi3aikSj0UaPRiuMNyJgfoC7vvd
dTdsFU+xhl8A7d4a1f6ZfyRGzNs0FMzXO1BSGC8tPWYUBpUynTFsBH7mDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErQkdlPKhCqH6CYPbsWWxbmfzJbMB8GA1UdIwQY
MBaAFAXyIfXwTPnZbd6kQlGyuCP3EUZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgt
Y2JmMmEzYjZhMjg0LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgtY2JmMmEzYjZhMjg0
LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoZSwVH3
jxnSAmMJQs1BdTaJDRNrW/TinuwLMTArh2sb72EYOHJD8fTl/JskjmbsO1FhEnP+
lx0doxQ7W8V7fEo3PmzNoXgGuu1qppUTIao1tbJgtglIeq35EthNrm25/Gvj+/Yq
9frIJ1rx829fqbNzXDIPDodz3hMXtI0oZeyKdmh9wbK3D/wDTnVi3RUCR45D2/re
gQcR/S4Kd+UvNhZwsKEfNX90IcXUzm4UjmWB+33ByjS71huZ74GlkQnsotGtHAF0
O4A4zGPImKgTbqt64qs7gbzdCGcVCStQDVTMp5noLWje9tfMruJdnYOKUYobqTP0
Dhx8zRyO5gu+GQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:05 2026 by rpki-client