Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
File: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft (raw, json)
Hash identifier: cQaR9MS3q5Y6ovYuyls8yvfutozPHMos0LhrxiMuJ8E=
Subject key identifier: E8:05:64:AA:69:8D:42:E3:82:D8:21:03:A1:D9:17:DC:D8:51:8A:32
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Certificate issuer: /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial: 01A17BF20BA60E76FFCCCC92084BDB91E43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:22 +0000
Manifest this update: Tue 27 Oct 2026 06:00:22 +0000
Manifest next update: Wed 28 Oct 2026 06:00:22 +0000
Files and hashes: 1: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (hash: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=)
2: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl (hash: ApjL3apJuSycZbe9YHipn07CEhyHv4eRz+GqODx7r2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:0b:a6:0e:76:ff:cc:cc:92:08:4b:db:91:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Validity
Not Before: Oct 27 06:00:22 2026 GMT
Not After : Oct 28 06:00:22 2026 GMT
Subject: CN=e80564aa698d42e382d82103a1d917dcd8518a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:7c:a0:6e:1a:18:b3:8b:2f:cc:3f:35:25:
a9:f8:41:24:54:11:c0:e8:6d:37:65:c2:62:10:98:
9b:d1:7f:2c:f2:c7:51:00:a9:0f:f2:3e:9b:8e:dc:
50:b6:b3:a6:d9:2a:07:12:d6:34:66:75:b1:1e:cc:
06:66:11:38:92:4d:78:6a:09:66:c2:76:fe:97:56:
09:ac:40:49:9e:4b:cf:97:96:e1:7a:a1:36:12:f6:
57:59:67:e9:83:21:21:24:8d:ee:cc:1f:c4:79:9e:
f6:b0:fa:77:2f:5f:fd:ed:8f:8a:9f:bb:aa:c8:80:
95:bb:72:57:ab:3d:09:15:6c:1b:20:b9:d6:a0:e2:
ee:e6:84:9c:9f:a2:ba:34:dc:1e:be:77:d7:6d:47:
92:aa:72:42:d5:06:2e:1e:71:88:78:82:56:3c:f4:
fb:2d:70:0d:28:34:fe:ae:fb:b3:6a:d1:ac:e2:73:
9c:39:f5:d5:b6:fe:e1:0d:75:3b:a8:8e:f1:2d:9f:
4c:4a:01:15:d0:a2:4d:eb:4e:da:40:4f:de:b3:d8:
0f:be:0e:7a:dc:ab:b6:4a:2d:97:7c:b5:6e:6e:35:
bd:3f:f5:d4:cf:f9:2b:65:5a:0f:0d:4c:be:f0:5b:
4a:87:a8:b1:8d:aa:13:a3:d2:9d:c7:c3:bb:eb:0c:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:64:AA:69:8D:42:E3:82:D8:21:03:A1:D9:17:DC:D8:51:8A:32
X509v3 Authority Key Identifier:
keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:2a:5e:c0:e8:90:a1:c7:31:d6:fc:d8:61:a1:b3:44:88:
80:37:80:58:7b:c7:9b:98:bf:11:61:c5:0b:78:b7:c4:4a:8c:
6e:7e:62:ca:23:8b:6d:c5:a7:db:5a:ba:98:0e:63:f7:d7:a6:
17:ae:83:0b:7d:5f:67:70:ff:4b:1c:2f:5c:f9:86:60:80:d5:
d2:80:bb:62:d0:fe:32:ff:a0:b4:68:f8:14:28:72:70:ae:5c:
68:02:03:58:5e:3b:e2:39:f7:bc:a2:f8:54:d4:47:e9:df:d6:
45:33:b8:5b:35:66:1b:67:9b:80:d4:a5:a7:fa:09:7c:ae:b2:
90:da:c4:f8:26:da:0e:11:94:2c:54:08:81:7c:f7:35:1a:63:
73:8f:91:f0:12:6f:76:e4:4d:35:c2:91:5e:1e:b1:f1:7c:2e:
59:f2:c5:57:66:08:63:c8:37:3e:0f:90:40:e7:3c:7e:ee:fe:
2b:70:20:43:a4:8a:cd:1c:4a:83:f3:96:f7:73:86:86:3e:1c:
b8:54:43:14:3e:4a:84:ee:91:cb:33:36:ea:44:37:5d:41:3b:
fd:32:4f:91:5d:2f:21:3b:ea:5d:6d:34:ea:b9:ed:90:f4:e4:
43:42:22:19:fe:b5:12:bd:11:2f:c0:48:7f:59:30:bd:9f:60:
81:f3:1b:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78gumDnb/zMySCEvbkeQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZmRjNGRhNWRmMzUwNWY1ZjY2YzQwNjE3NDFjMjNhOWVj
ZTBiZTcwHhcNMjYxMDI3MDYwMDIyWhcNMjYxMDI4MDYwMDIyWjAzMTEwLwYDVQQD
EyhlODA1NjRhYTY5OGQ0MmUzODJkODIxMDNhMWQ5MTdkY2Q4NTE4YTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQV8oG4aGLOLL8w/NSWp+EEkVBHA
6G03ZcJiEJib0X8s8sdRAKkP8j6bjtxQtrOm2SoHEtY0ZnWxHswGZhE4kk14aglm
wnb+l1YJrEBJnkvPl5bheqE2EvZXWWfpgyEhJI3uzB/EeZ72sPp3L1/97Y+Kn7uq
yICVu3JXqz0JFWwbILnWoOLu5oScn6K6NNwevnfXbUeSqnJC1QYuHnGIeIJWPPT7
LXANKDT+rvuzatGs4nOcOfXVtv7hDXU7qI7xLZ9MSgEV0KJN607aQE/es9gPvg56
3Ku2Si2XfLVubjW9P/XUz/krZVoPDUy+8FtKh6ixjaoTo9Kdx8O76wxzrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgFZKppjULjgtghA6HZF9zYUYoyMB8GA1UdIwQY
MBaAFAX9xNpd81BfX2bEBhdBwjqezgvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt
MTRhMDgyNWI1MjkxLzEvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx
LzEvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3AqXsDo
kKHHMdb82GGhs0SIgDeAWHvHm5i/EWHFC3i3xEqMbn5iyiOLbcWn21q6mA5j99em
F66DC31fZ3D/SxwvXPmGYIDV0oC7YtD+Mv+gtGj4FChycK5caAIDWF474jn3vKL4
VNRH6d/WRTO4WzVmG2ebgNSlp/oJfK6ykNrE+CbaDhGULFQIgXz3NRpjc4+R8BJv
duRNNcKRXh6x8XwuWfLFV2YIY8g3Pg+QQOc8fu7+K3AgQ6SKzRxKg/OW93OGhj4c
uFRDFD5KhO6RyzM26kQ3XUE7/TJPkV0vITvqXW006rntkPTkQ0IiGf61Er0RL8BI
f1kwvZ9ggfMbQw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:50:21 2026 by rpki-client