Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: IIZX//43oDQHA8U8caY7auPsCK/P1Seh7Cn0KOrqBC0=
Subject key identifier: 58:E6:E5:67:B5:52:73:F3:F7:2F:EA:A0:3E:8E:A6:6B:43:5D:28:74
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 01A14C4FA73B076B30C90E2137C2C9D63A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 1196
Signing time: Sun 18 Oct 2026 00:00:50 +0000
Manifest this update: Sun 18 Oct 2026 00:00:50 +0000
Manifest next update: Mon 19 Oct 2026 00:00:50 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: 1c4AZ/fP6g9tgzQlqf8Uk2DYj6cerkmlv2urxW0ca4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4f:a7:3b:07:6b:30:c9:0e:21:37:c2:c9:d6:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Oct 18 00:00:50 2026 GMT
Not After : Oct 19 00:00:50 2026 GMT
Subject: CN=58e6e567b55273f3f72feaa03e8ea66b435d2874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:27:1d:db:cb:2a:80:37:6a:98:1e:8e:14:
48:47:e9:16:de:f8:54:74:98:3b:44:24:90:5e:6c:
a4:3d:e5:d8:6d:44:35:e3:f4:39:82:6b:97:6d:a3:
60:fd:b2:1f:c7:ea:ae:1b:61:a3:3e:08:7f:9b:82:
a7:2b:07:6a:b1:a6:95:38:2d:6b:0b:d1:75:e6:f0:
aa:98:c2:92:4d:86:bb:71:c1:e5:e9:61:2d:e3:c1:
36:d4:1d:90:cd:0b:10:e3:39:b5:5f:15:7f:d6:38:
ba:53:f7:24:46:82:d7:33:8b:74:02:86:62:74:ba:
02:ba:10:62:ff:4c:c3:20:20:df:36:2e:61:ab:ad:
1f:e5:2b:cd:82:f5:10:dd:8b:aa:f8:a7:c1:06:74:
f5:d7:33:7c:d5:0d:a5:d6:ce:f1:5c:9a:48:23:a1:
8e:53:89:33:31:d4:80:d9:f2:9d:96:20:b4:0f:c3:
3e:df:1d:9f:ae:fb:5f:13:a4:4e:07:f2:07:57:1e:
78:0e:a1:3b:61:94:df:18:2a:f1:da:7c:81:9c:1e:
b8:5b:0a:92:b9:de:0c:02:bc:a0:dd:f7:f9:46:d8:
e0:27:f2:e0:3c:1f:ed:5e:00:25:b1:58:e7:88:98:
7c:f5:6d:47:a2:5e:58:51:10:14:93:47:f4:e0:24:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:E5:67:B5:52:73:F3:F7:2F:EA:A0:3E:8E:A6:6B:43:5D:28:74
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d7:68:1f:b0:2b:40:3e:3a:e9:13:ec:5d:2d:9c:8f:a0:5a:
14:ff:49:78:6a:af:ea:e3:6a:9e:f3:d7:10:c9:e7:0e:f7:fb:
d9:97:bc:77:62:6a:d4:40:0a:75:c3:0f:95:11:79:95:77:28:
3d:0b:f1:df:e5:92:c8:59:ea:b7:97:37:9a:2e:b8:5d:8d:7e:
a1:56:04:42:c4:58:ca:e9:22:8e:e2:23:87:c9:e4:ce:c0:66:
3e:72:e3:96:15:84:57:85:58:98:6c:89:2e:ff:93:44:3e:08:
5a:3c:01:a9:a1:0a:db:4e:fb:4b:d9:f0:66:fd:de:78:1c:c2:
aa:c2:82:54:e4:62:4f:43:94:be:c1:83:0c:e1:e6:89:9b:3a:
a9:52:6e:0c:40:86:13:5c:f4:2c:5b:35:ac:0e:d9:91:47:df:
a5:67:a8:54:61:7b:69:a4:ef:f8:ee:b3:4c:02:6d:4a:53:8e:
27:85:84:1f:f0:f5:72:3a:e1:5a:e2:b5:c2:37:97:29:08:f9:
b8:d7:ef:38:a5:18:99:d3:5b:be:7b:da:7d:b7:05:08:3e:a2:
d1:d2:e9:c5:73:a9:28:72:03:b5:4f:93:45:5b:6b:21:bb:0e:
9e:7d:1a:07:15:8c:19:b2:ce:93:cb:05:6d:2a:53:52:3f:1f:
48:2b:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:21:32 2026 by rpki-client