Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: CcsKYNccsye8a8KUrkUzqOkdoeW6Qy0nbXp9L0R8apY=
Subject key identifier: D7:29:AD:EB:06:FA:06:52:41:68:94:1E:73:50:93:69:C1:AD:8D:95
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019D39AE7A3766CEAA96AD73E66575304074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 05B1
Signing time: Sun 29 Mar 2026 13:00:28 +0000
Manifest this update: Sun 29 Mar 2026 13:00:28 +0000
Manifest next update: Mon 30 Mar 2026 13:00:28 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: lWhyjYq6jmv97B9U2j5IDYvq6LmAvUAnxaGAHGRmr2Y=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7a:37:66:ce:aa:96:ad:73:e6:65:75:30:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Mar 29 13:00:28 2026 GMT
Not After : Mar 30 13:00:28 2026 GMT
Subject: CN=d729adeb06fa06524168941e73509369c1ad8d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:f7:a5:da:5f:f7:af:f8:1e:b5:aa:60:dd:
b7:a2:ee:13:bb:6e:65:f7:fb:11:47:21:7c:e6:38:
57:0c:61:36:76:64:b4:2a:37:7a:31:d1:7d:6e:14:
0c:fb:3d:b0:b4:c7:20:bd:cb:d6:84:bc:d7:62:52:
cc:5d:37:97:34:11:19:69:43:52:7a:07:73:d8:63:
fd:a6:f0:54:7f:9c:b3:f3:57:fc:6a:c6:58:e8:47:
90:dc:b9:d6:e0:95:db:e7:3d:ea:00:ce:e5:dc:29:
53:fa:f2:00:4c:3c:fd:d7:11:ce:35:4c:f2:06:03:
e3:2a:cf:4d:9d:9b:80:77:56:a3:73:ac:30:a2:59:
47:23:fa:54:6c:7c:b5:74:02:64:68:1d:77:c9:fd:
6e:1b:da:1a:b3:cb:b6:da:a5:72:c1:59:c4:02:f0:
9a:a7:8f:b2:34:af:34:3e:2d:82:fb:4d:68:55:8b:
9e:0b:c1:84:08:1a:52:a7:ac:7c:43:a9:6f:18:70:
37:27:39:f3:fa:78:ae:b3:da:5f:f3:ee:25:bf:30:
76:0c:bc:a6:61:1a:24:a8:ed:ee:4d:ca:b1:1b:e8:
48:63:b6:fd:17:70:e7:32:9e:09:e7:a0:d6:8b:b9:
ad:81:20:d2:20:37:53:b5:f7:68:e3:e2:db:3a:8a:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:AD:EB:06:FA:06:52:41:68:94:1E:73:50:93:69:C1:AD:8D:95
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:90:12:51:4b:1b:d8:44:cd:92:eb:6c:0d:ee:dd:f9:b3:ad:
07:a5:1e:cf:d7:b1:f8:77:b8:57:15:04:bf:d5:70:14:c8:b7:
e3:52:bd:8e:f1:6d:fc:27:b5:fb:9f:d6:59:b6:fb:35:cb:3c:
fe:70:ba:42:b5:52:30:10:97:5b:ca:71:6b:bc:16:e6:33:34:
df:a5:de:b4:79:c7:64:b0:e1:8a:a1:22:00:2e:b1:e9:0f:bc:
b1:89:ae:b3:8a:33:25:2f:08:c5:5e:97:ea:b3:4d:af:b0:fd:
29:51:b3:fe:8a:6d:29:9b:0a:f5:72:6b:c6:58:ed:80:b4:0d:
d6:71:05:e4:df:37:37:86:1f:c7:7b:53:62:7f:1c:c4:22:3e:
cf:3f:45:e4:08:29:7d:d0:6b:6a:a2:17:9e:f3:e4:96:86:e3:
3d:8f:9a:f5:d8:49:62:be:4b:32:78:a5:71:fd:b8:9f:32:2e:
11:23:4f:ad:56:c2:13:27:25:1d:1b:43:c4:97:4a:b3:d6:91:
15:ba:84:e9:df:e4:f9:dc:96:46:61:33:e7:cd:0a:8e:09:28:
53:0f:23:a7:18:a7:67:e2:ae:df:94:bb:67:21:28:af:f3:37:
4e:c2:fc:82:4c:41:8a:fa:df:ba:84:ce:d0:9c:8b:e1:8c:a0:
8a:63:2b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:23 2026 by rpki-client