Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: w6lGRaAeQMUL36jWiv1SvQvayvV6IE92rYmvIexxVrY=
Subject key identifier: 4B:B4:ED:8C:62:BF:79:63:27:2B:4F:DA:AC:49:38:01:CB:F5:8A:12
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 019D3977D1C6292663111B66794596F6C213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 0F7A
Signing time: Sun 29 Mar 2026 12:00:46 +0000
Manifest this update: Sun 29 Mar 2026 12:00:46 +0000
Manifest next update: Mon 30 Mar 2026 12:00:46 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: VtmZY1oHSKtTIX3WxIfZ352XiEvDYJ0uWlUasFjas8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d1:c6:29:26:63:11:1b:66:79:45:96:f6:c2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Mar 29 12:00:46 2026 GMT
Not After : Mar 30 12:00:46 2026 GMT
Subject: CN=4bb4ed8c62bf7963272b4fdaac493801cbf58a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:e3:22:f7:54:ff:dd:58:54:86:76:56:72:
b9:ed:bd:08:3c:02:46:4a:fc:49:38:d8:79:9b:33:
29:fb:6f:93:1a:74:9e:f1:24:af:c3:80:ab:a8:b0:
59:e3:f2:b0:38:6d:03:9a:6f:39:25:b0:de:93:87:
a9:d6:b9:af:72:f2:64:92:d1:21:1b:7f:0b:d3:45:
20:5c:43:2b:63:06:3d:ab:09:9f:a8:01:a0:a4:8e:
38:b4:87:a6:60:4c:3a:89:34:44:93:4a:05:91:60:
27:2a:64:f3:d5:31:14:21:79:64:6b:d5:b4:b7:ff:
37:e3:b4:62:13:c4:ca:e2:d2:c2:27:6c:38:68:c5:
43:04:b9:4c:87:c6:7d:e2:15:34:06:b8:af:de:51:
bb:1d:b9:f7:47:3e:79:31:9e:91:47:f9:56:c9:2b:
3b:68:98:65:70:29:0c:0c:4a:f1:53:71:24:31:8a:
2d:b3:57:99:50:90:f1:b7:f2:e6:4e:69:6c:4f:4a:
7e:9c:cf:14:17:3a:b9:99:da:b7:24:9c:26:1e:8e:
04:f8:b0:71:3a:09:4c:90:fb:33:f3:37:2d:7c:bf:
af:cb:11:2e:e7:b1:da:a6:bc:3e:f5:b1:00:3a:93:
2b:f5:72:15:df:65:ef:b2:38:cc:e1:94:ce:e1:5f:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B4:ED:8C:62:BF:79:63:27:2B:4F:DA:AC:49:38:01:CB:F5:8A:12
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:45:54:0e:72:0f:98:c1:98:24:f0:1c:52:23:dd:04:91:
99:46:d2:70:a8:8f:e7:5e:3a:76:27:12:ad:cb:e9:45:1c:e6:
49:1f:39:3e:b6:7b:12:39:6f:54:41:9e:7a:d8:7b:1c:75:5f:
e1:e7:6d:bd:27:2f:8a:b1:63:eb:5b:b3:b1:22:a3:00:8a:e3:
de:08:ff:9c:62:5a:7d:eb:17:7d:db:87:23:54:d1:b8:70:fe:
91:0d:1a:19:f5:20:7d:18:c5:7c:f5:07:06:e5:b1:6d:c3:11:
23:2e:38:a5:54:d1:de:16:bb:43:f5:1b:f3:a9:2c:40:77:82:
2e:41:79:ba:73:6f:19:96:8c:81:72:91:3b:03:3d:5f:3e:95:
f9:fe:89:07:b3:7a:97:03:96:62:b1:46:30:f3:3e:db:21:d9:
91:61:e6:6a:06:b1:2f:35:3d:d9:08:45:fe:52:2f:7f:9e:33:
08:40:9e:ee:ba:d2:b8:43:57:89:bf:99:54:53:f1:5c:0c:37:
ea:d4:a5:b6:30:47:c0:3b:61:e0:f1:61:c0:ea:e2:36:54:24:
29:d4:1d:23:4f:92:53:84:aa:02:c1:c9:10:72:65:a3:ec:2f:
ca:89:90:a1:fd:6b:6b:ed:90:4b:f6:60:38:fb:2d:32:86:29:
fc:87:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:12 2026 by rpki-client