Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: nAq41+rsXsoC/dguuqjueOxa+vYwa+ecnugE3PQDldo=
Subject key identifier: 81:30:06:3B:60:B5:76:D6:D4:37:35:ED:C3:B7:66:EA:37:73:89:C1
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019F189E5544BC62F78729FA2331683CFA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 06A9
Signing time: Tue 30 Jun 2026 13:00:57 +0000
Manifest this update: Tue 30 Jun 2026 13:00:57 +0000
Manifest next update: Wed 01 Jul 2026 13:00:57 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: kc+Hvz4W5HAgFhbqKFF4oqos/GPpAXW3BKvl5QUUKOs=)
2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:55:44:bc:62:f7:87:29:fa:23:31:68:3c:fa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Jun 30 13:00:57 2026 GMT
Not After : Jul 1 13:00:57 2026 GMT
Subject: CN=8130063b60b576d6d43735edc3b766ea377389c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:6d:2a:83:0d:34:49:e8:4b:35:42:c5:5b:
e9:75:52:54:f3:f6:05:21:89:e6:be:8f:8b:c5:c1:
f5:7f:ee:40:fd:72:84:db:17:f8:b1:e3:0b:7a:6a:
f8:e9:0d:65:aa:d3:ac:02:c0:4a:4e:9a:d1:44:40:
f4:6a:56:b1:db:31:d6:0f:81:cb:fe:02:fb:ba:d5:
ed:83:53:a4:fb:89:5b:2e:6d:ff:4e:63:30:98:e5:
55:f5:66:3e:db:ac:84:7f:9e:bb:85:78:d4:b2:83:
6c:bc:8b:19:ed:a8:4c:23:13:87:5b:79:ba:31:52:
88:c2:ae:3d:ec:7e:b2:35:98:3e:76:d4:ac:a2:16:
15:9d:f8:3d:97:b0:f1:5c:8d:c2:80:07:97:e0:05:
e7:b5:b0:89:13:60:4e:d3:82:fe:c5:d6:6a:85:d8:
d3:88:73:81:50:c7:cd:5f:88:ad:a9:5e:49:33:e9:
04:74:63:f2:0f:cf:1c:47:37:b8:eb:04:39:16:b4:
1a:24:22:64:56:1a:51:ed:61:19:50:5e:f2:33:59:
95:c1:fe:ec:30:d9:7d:a2:ae:05:12:45:b6:19:3b:
7e:6f:c2:cc:17:b4:ac:ed:6e:70:a8:b1:ce:03:ad:
b9:d6:08:66:e1:e0:99:15:61:7b:03:32:5d:89:97:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:06:3B:60:B5:76:D6:D4:37:35:ED:C3:B7:66:EA:37:73:89:C1
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:82:6e:33:b0:99:4b:0d:16:32:98:f9:46:64:54:65:f0:d7:
18:44:bd:2f:eb:8a:1e:2c:a9:94:2d:ed:9a:aa:83:f5:48:a9:
e8:98:d2:12:b2:2c:3c:0d:9c:70:2c:b5:02:45:03:0a:66:2f:
be:30:da:d5:18:53:a5:23:2a:8b:7e:25:d0:7e:20:f7:b9:44:
ee:79:29:c4:1a:64:71:bd:87:e2:44:26:e0:a2:9b:9d:0f:97:
bd:c7:c7:9c:a6:f6:b8:e0:f8:be:4d:df:ef:db:43:a8:b0:9f:
cd:1f:f1:6c:90:06:35:2f:f6:48:b1:fd:c1:54:b1:7d:de:66:
86:ad:11:03:bd:71:79:6f:86:37:8a:64:75:69:77:58:a2:07:
79:5c:b7:3b:7f:cb:ed:a0:79:0c:31:7b:39:56:62:98:dd:26:
2d:3d:57:b9:7f:d8:6a:3b:ad:f8:b6:26:4d:af:60:69:32:53:
dd:e4:58:a1:41:0a:33:22:3b:a4:43:52:84:e3:ee:08:ba:66:
96:d5:ab:65:06:64:59:1b:96:bc:9a:37:9d:6b:5f:3e:b0:34:
9c:07:27:02:5d:10:a0:83:b5:b9:7b:bb:4b:f8:ea:ed:c9:be:
1d:e6:9d:46:7d:36:a5:87:11:45:46:4a:9a:9e:3a:ef:bd:7c:
d7:0c:e8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnlVEvGL3hyn6IzFoPPp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjIyMWY1ZjA0Y2Y5ZDk2ZGRlYTQ0MjUxYjJiODIzZjcx
MTQ2NjMwHhcNMjYwNjMwMTMwMDU3WhcNMjYwNzAxMTMwMDU3WjAzMTEwLwYDVQQD
Eyg4MTMwMDYzYjYwYjU3NmQ2ZDQzNzM1ZWRjM2I3NjZlYTM3NzM4OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d9tKoMNNEnoSzVCxVvpdVJU8/YF
IYnmvo+LxcH1f+5A/XKE2xf4seMLemr46Q1lqtOsAsBKTprRRED0alax2zHWD4HL
/gL7utXtg1Ok+4lbLm3/TmMwmOVV9WY+26yEf567hXjUsoNsvIsZ7ahMIxOHW3m6
MVKIwq497H6yNZg+dtSsohYVnfg9l7DxXI3CgAeX4AXntbCJE2BO04L+xdZqhdjT
iHOBUMfNX4itqV5JM+kEdGPyD88cRze46wQ5FrQaJCJkVhpR7WEZUF7yM1mVwf7s
MNl9oq4FEkW2GTt+b8LMF7Ss7W5wqLHOA6251ghm4eCZFWF7AzJdiZf7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEwBjtgtXbW1Dc17cO3Zuo3c4nBMB8GA1UdIwQY
MBaAFAXyIfXwTPnZbd6kQlGyuCP3EUZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgt
Y2JmMmEzYjZhMjg0LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgtY2JmMmEzYjZhMjg0
LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYJuM7CZ
Sw0WMpj5RmRUZfDXGES9L+uKHiyplC3tmqqD9Uip6JjSErIsPA2ccCy1AkUDCmYv
vjDa1RhTpSMqi34l0H4g97lE7nkpxBpkcb2H4kQm4KKbnQ+XvcfHnKb2uOD4vk3f
79tDqLCfzR/xbJAGNS/2SLH9wVSxfd5mhq0RA71xeW+GN4pkdWl3WKIHeVy3O3/L
7aB5DDF7OVZimN0mLT1XuX/Yajut+LYmTa9gaTJT3eRYoUEKMyI7pENShOPuCLpm
ltWrZQZkWRuWvJo3nWtfPrA0nAcnAl0QoIO1uXu7S/jq7cm+HeadRn02pYcRRUZK
mp4677181wzoQg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:45 2026 by rpki-client