Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: 7aJ9RKg5/pqvCp+piYrMGrVCalXSd90XhAcl78yYIHs=
Subject key identifier: 40:F4:AA:6B:E3:FA:C0:BE:6B:AD:10:57:40:D6:C9:ED:0E:05:CD:75
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 01A13F0221241F362D86C19DA03F6FCFB938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 07C6
Signing time: Thu 15 Oct 2026 10:01:06 +0000
Manifest this update: Thu 15 Oct 2026 10:01:06 +0000
Manifest next update: Fri 16 Oct 2026 10:01:06 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: 8h+v+BKUGmSVcov7JeDxaPz5K1CvJKcTkzB+6YQWOIA=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:21:24:1f:36:2d:86:c1:9d:a0:3f:6f:cf:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Oct 15 10:01:06 2026 GMT
Not After : Oct 16 10:01:06 2026 GMT
Subject: CN=40f4aa6be3fac0be6bad105740d6c9ed0e05cd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:bf:b4:d4:0b:71:6a:f2:91:e3:14:3e:68:
68:b6:d0:f6:d6:8e:80:5d:9a:ce:94:84:83:86:1a:
75:9e:93:19:26:a3:6a:02:3b:f8:b2:23:a6:94:f5:
f9:b9:8a:00:9f:0c:89:eb:5d:7e:cc:43:a3:20:c7:
9e:60:9b:b5:5d:bd:2c:13:96:d9:8c:49:8b:04:b4:
d2:51:f7:d5:aa:ff:63:c0:2a:93:01:a3:71:ed:1a:
71:10:a7:30:c5:95:5a:59:85:d6:42:79:69:e6:c4:
37:2f:88:62:5f:54:6e:a7:7a:a2:ee:76:b9:23:37:
94:cf:cb:41:36:a6:f2:79:94:fe:2e:31:24:52:08:
01:2f:cb:ac:20:1c:01:10:9d:fc:9c:d6:3c:26:7e:
6f:e8:15:ac:bc:f9:e7:66:0c:7b:7c:b7:cf:52:62:
05:f4:f5:eb:5f:c8:b7:8f:9d:86:09:e6:9e:2e:59:
6f:29:eb:49:ec:59:d2:89:8d:cd:fa:e3:9b:90:16:
5d:2d:56:16:59:c2:9e:46:85:03:71:5e:06:06:b2:
77:4c:77:1f:84:04:7c:5d:9e:48:b1:51:f7:01:d3:
72:77:96:2b:c0:ad:6e:03:ee:40:3c:32:70:dc:eb:
5d:a5:6b:2b:3d:1a:a4:fc:94:87:a9:2e:3a:7e:3e:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F4:AA:6B:E3:FA:C0:BE:6B:AD:10:57:40:D6:C9:ED:0E:05:CD:75
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:6a:fb:34:a1:5a:86:82:5f:d5:46:29:62:6a:a7:76:a5:
1e:70:bd:cd:d2:e7:fc:4f:c9:01:da:54:bc:6c:6a:0a:0c:4e:
65:88:67:78:a3:32:e8:87:13:03:b7:33:75:3d:9f:91:07:b7:
70:77:cb:96:7a:59:de:31:7a:9f:62:63:fb:37:a8:47:cb:82:
48:e8:ab:b1:3e:0a:c2:51:92:d8:a1:ff:d9:fa:58:2b:da:fc:
96:cb:ee:94:2f:c7:ae:5f:e4:9c:c1:13:29:34:f7:9b:4a:90:
96:4c:a8:d7:ab:bb:f3:ed:38:68:4d:31:cb:c6:38:ee:60:6a:
71:c5:cf:e3:65:bf:42:a5:f7:dc:19:0a:27:8c:fa:9e:2f:a9:
6c:e5:58:2d:80:94:63:ca:15:e6:c2:d1:70:34:5a:ed:18:b8:
ef:fb:0d:90:b6:f5:76:db:ad:82:bc:df:9c:e1:4b:32:09:a1:
08:2b:bc:db:b8:8e:fa:25:0d:70:c5:99:38:c6:aa:3b:21:07:
6a:eb:70:07:f9:40:5c:9e:c6:a8:19:0e:64:b6:7c:8d:21:14:
65:bf:76:29:8a:3b:34:b3:b4:6e:d3:46:a9:c6:7d:d7:a7:41:
9f:93:b2:d0:db:a2:fa:99:07:38:53:ca:15:c8:b3:e3:c7:48:
eb:e7:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:51 2026 by rpki-client