Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: pX/sFP3qd+Om1SsJ5LJVoTMAiIp7DkmXGwMbaED05QE=
Subject key identifier: 87:CB:95:86:8C:1C:A1:C3:BD:3F:12:1A:1F:C4:FD:5E:3E:AD:2E:A3
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 019EB9C65C39A34E42A260F6CB1F02E1DA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 165A
Signing time: Fri 12 Jun 2026 03:00:45 +0000
Manifest this update: Fri 12 Jun 2026 03:00:45 +0000
Manifest next update: Sat 13 Jun 2026 03:00:45 +0000
Files and hashes: 1: CCOsqAacrS8dBTl4tQBwpoCnadM.roa (hash: YYtqMm75d9ZnPheKTmSgCCjQh+tr4ThzJq28f22P15I=)
2: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: d+OJusIn2q2/GoY4TPCxoBrSeVz2/ifW/kNVsf4045s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:5c:39:a3:4e:42:a2:60:f6:cb:1f:02:e1:da:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jun 12 03:00:45 2026 GMT
Not After : Jun 13 03:00:45 2026 GMT
Subject: CN=87cb95868c1ca1c3bd3f121a1fc4fd5e3ead2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:61:5f:ba:36:43:18:16:72:77:2f:63:ee:
18:0a:d3:71:9a:ad:3a:1f:33:8e:7c:fd:9e:6a:a4:
92:3c:0f:8c:3c:fb:ab:ed:ae:8a:2a:4f:39:13:93:
5a:46:7f:46:db:0d:29:ad:ed:b3:ef:0d:f4:a3:3e:
e7:02:09:c4:36:32:84:2c:80:7c:f7:aa:78:3b:0c:
db:65:f1:71:a8:5c:2f:f1:07:51:6c:34:61:4f:5f:
fd:90:d3:4d:71:61:0b:2a:28:9e:09:25:51:ff:c6:
99:52:3b:85:6c:4f:cd:df:0a:88:d7:49:ef:ad:2e:
5d:58:9b:b4:29:84:ab:c3:76:fc:4f:aa:e5:4a:17:
8c:2a:e5:76:bf:fd:13:c9:45:7a:5d:a2:b6:15:68:
f8:53:97:4e:bc:d3:13:90:21:58:d8:fe:f6:ac:8e:
89:3b:9f:d5:fc:19:21:be:cf:3e:5e:39:6b:c2:d8:
84:6d:84:1e:e9:cd:0f:2a:e7:33:85:13:b7:25:c5:
c0:c4:d0:e2:51:88:3d:41:d0:dd:a8:d0:2d:da:9d:
d2:3e:98:3b:54:05:e1:ad:e0:e6:cb:ca:c7:89:34:
cc:6f:29:41:20:a5:14:9f:96:2f:86:05:9a:7a:1f:
c8:12:47:ee:69:d1:ed:7d:90:5b:ba:59:7c:9f:af:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:95:86:8C:1C:A1:C3:BD:3F:12:1A:1F:C4:FD:5E:3E:AD:2E:A3
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bc:2e:93:3d:ae:d7:62:0e:f6:0c:7a:ed:28:da:66:a3:31:
0d:f0:af:42:a6:34:31:d0:ae:d6:58:ca:66:f7:67:df:94:f5:
93:0c:ab:92:75:80:69:67:36:62:17:21:9a:18:e9:c0:4d:59:
de:0f:86:e9:01:62:dc:e0:eb:cf:a4:f8:5b:1c:cd:3b:f8:89:
eb:e2:ca:47:5b:6f:19:4d:3c:ea:cb:9a:dd:f7:88:6d:1b:33:
b5:e7:3b:82:2e:88:69:9e:fe:36:e8:63:aa:6d:f2:ab:f1:08:
ec:32:ac:8d:00:05:7e:49:0b:25:cd:e9:09:cf:d1:1a:35:f6:
f2:c8:04:55:4b:21:77:fa:cd:96:77:1b:d0:88:3e:3b:7d:87:
67:cd:4c:32:86:04:3b:4b:f6:03:b3:16:38:c8:53:5e:10:b9:
b9:db:4e:c8:fb:2b:2c:94:b7:bc:7e:88:76:47:d1:8c:fb:36:
b2:22:c9:fe:92:f5:0a:dc:ba:84:9b:e4:c7:5a:76:57:21:f1:
a7:ea:2c:c6:3c:e9:0a:48:46:03:af:32:e9:03:b8:83:6a:c6:
a3:61:65:78:ef:3b:78:98:af:4e:1d:cb:07:c5:3a:2c:4f:89:
d4:06:df:d3:4f:e2:54:5f:52:c5:e2:2b:08:8f:27:00:65:52:
a6:e8:56:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xlw5o05ComD2yx8C4doVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTdjYmNjZWUzNmIyNGVjYmQ0NjNmN2QxMDJhYmM0ZmU0
MGUxNGQwHhcNMjYwNjEyMDMwMDQ1WhcNMjYwNjEzMDMwMDQ1WjAzMTEwLwYDVQQD
Eyg4N2NiOTU4NjhjMWNhMWMzYmQzZjEyMWExZmM0ZmQ1ZTNlYWQyZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZxhX7o2QxgWcncvY+4YCtNxmq06
HzOOfP2eaqSSPA+MPPur7a6KKk85E5NaRn9G2w0pre2z7w30oz7nAgnENjKELIB8
96p4OwzbZfFxqFwv8QdRbDRhT1/9kNNNcWELKiieCSVR/8aZUjuFbE/N3wqI10nv
rS5dWJu0KYSrw3b8T6rlSheMKuV2v/0TyUV6XaK2FWj4U5dOvNMTkCFY2P72rI6J
O5/V/Bkhvs8+XjlrwtiEbYQe6c0PKuczhRO3JcXAxNDiUYg9QdDdqNAt2p3SPpg7
VAXhreDmy8rHiTTMbylBIKUUn5YvhgWaeh/IEkfuadHtfZBbull8n68NvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfLlYaMHKHDvT8SGh/E/V4+rS6jMB8GA1UdIwQY
MBaAFPwXy8zuNrJOy9Rj99ECq8T+QOFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODct
MTM2NTg3NWM3ZTg1LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODctMTM2NTg3NWM3ZTg1
LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLwukz2u
12IO9gx67SjaZqMxDfCvQqY0MdCu1ljKZvdn35T1kwyrknWAaWc2YhchmhjpwE1Z
3g+G6QFi3ODrz6T4WxzNO/iJ6+LKR1tvGU086sua3feIbRsztec7gi6IaZ7+Nuhj
qm3yq/EI7DKsjQAFfkkLJc3pCc/RGjX28sgEVUshd/rNlncb0Ig+O32HZ81MMoYE
O0v2A7MWOMhTXhC5udtOyPsrLJS3vH6IdkfRjPs2siLJ/pL1Cty6hJvkx1p2VyHx
p+osxjzpCkhGA68y6QO4g2rGo2FleO87eJivTh3LB8U6LE+J1Abf00/iVF9SxeIr
CI8nAGVSpuhWuA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:37:59 2026 by rpki-client