Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: uDJnYTq+789v7EKcYZoz0T1v1C9G34JzaCodjMaMqYw=
Subject key identifier: 99:1E:74:69:3E:B9:BA:6F:24:6D:C2:C6:37:BF:EA:35:6F:FF:ED:45
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 019D394141CF9B541596A4CF1894BA217914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 0BED
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: HdluTxXl-pWaHGWyDsEkzMIGqPk.roa (hash: 3QRrZkPi7nW4Xst1si6pXGHNP7cktniynmG+cW94wv4=)
2: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (hash: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM=)
3: TsdNQD-ii_AJJKvRxzoA6e18eOY.asa (hash: MN5JLEUCVUn9RZ966N3nhNhFms77tb7Wz1RFZB7pjz0=)
4: _WOzrOOEaw0M1QQC2qKDkPSA1xg.asa (hash: YHkFhzYhWSquY7kwqlUWNVc4nw7ZgDDix9HeI13BrFs=)
5: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: baIqe1ZsDoKQuf3K8S46Olwukn0lV9AVu/mS21xaBbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:41:cf:9b:54:15:96:a4:cf:18:94:ba:21:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=991e74693eb9ba6f246dc2c637bfea356fffed45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:31:e2:d6:d6:fa:08:8a:a3:cb:14:01:e8:
7e:75:3a:c4:07:9c:b1:b1:a6:2a:bc:35:d0:b2:4b:
1d:05:3c:5f:48:f7:ce:2e:74:0b:7b:fc:15:05:40:
3d:62:55:58:87:68:f3:33:6d:c9:5c:65:0e:80:29:
fb:0f:d6:0c:e7:7c:f4:0a:58:f2:21:14:9b:87:ca:
37:e7:bd:8c:4e:a1:8a:24:b3:8b:d2:38:da:f1:10:
6b:e4:54:c2:4d:06:5b:2b:7c:7e:9a:0e:bb:a3:1f:
29:d3:a6:31:28:78:b8:81:78:e3:41:bd:fc:6f:cd:
3d:9f:26:62:b6:79:cf:18:23:46:84:b3:ac:e4:f0:
6d:71:ed:17:2f:2d:b6:68:81:8c:15:f1:ea:9a:8a:
f2:6f:07:d4:bd:b5:e9:46:c3:b0:d8:b2:40:7a:fe:
f2:8d:c2:a8:14:e1:34:c6:a5:f1:61:87:46:a8:c8:
05:e8:33:cb:12:cf:64:b4:8a:2d:13:9f:c7:29:ee:
f7:cd:62:20:49:a2:bc:e7:bf:fb:cc:16:b7:94:3e:
f1:14:97:97:a7:cc:3c:25:a5:2a:4f:57:b8:2c:07:
73:0e:3a:b5:49:67:9b:07:79:79:95:6d:33:df:99:
bf:05:36:03:e0:36:ef:e3:57:e3:6b:92:42:86:0c:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1E:74:69:3E:B9:BA:6F:24:6D:C2:C6:37:BF:EA:35:6F:FF:ED:45
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cb:41:fd:b5:58:85:e4:84:62:85:34:80:a4:09:d3:8f:84:
25:77:24:a5:82:5a:01:4a:e8:ab:6f:8d:1f:05:ae:47:75:d9:
f8:f8:cf:3c:04:50:01:65:83:30:77:06:e5:cb:bd:8c:02:c5:
d4:ab:97:ad:86:2a:09:9e:85:7e:83:e8:f6:9f:4c:fc:0f:8f:
70:2e:72:61:b4:39:9e:ee:ef:b8:46:4d:d9:0b:78:28:34:ef:
85:9c:0b:96:89:de:81:a8:15:2f:28:81:56:98:e5:07:24:86:
ba:59:59:f4:cd:9c:94:ee:a8:74:e7:f3:e5:ca:29:ef:b5:13:
a3:39:de:37:27:d7:f1:aa:e9:4f:e4:94:28:01:04:ac:97:09:
a2:b2:8a:33:84:36:b1:9e:04:c3:6d:b3:de:72:4d:4f:8d:83:
ca:e0:32:d2:25:ff:d7:79:e0:b8:30:7f:ee:cc:01:22:72:a8:
f8:c6:3e:3d:19:d1:f6:d0:02:16:b3:aa:89:19:ff:47:78:aa:
75:f1:90:62:2f:1c:d3:18:2b:b6:05:0a:c7:7a:73:49:ba:15:
b8:33:69:e9:ad:2f:4f:00:b2:7b:e6:50:b3:2f:91:25:b4:76:
f8:95:16:70:23:88:a7:a8:6b:bb:77:d3:06:8b:0b:b2:21:89:
a2:ed:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:56 2026 by rpki-client