Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
File: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft (raw, json)
Hash identifier: 6Qp0F21XMcl/5ZxH6//U0GQpF3k6mkB6Vyvs6Y1m3ys=
Subject key identifier: 97:50:A9:22:BD:D5:C9:A5:DE:2D:B5:F9:73:2A:9E:C9:F0:52:82:4B
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Certificate issuer: /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial: 019FA0DFEC6F03C56C88B7DF60EB8DFB4F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:57 +0000
Manifest this update: Mon 27 Jul 2026 00:00:57 +0000
Manifest next update: Tue 28 Jul 2026 00:00:57 +0000
Files and hashes: 1: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (hash: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=)
2: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl (hash: G5s/xzcjtOetG4mUkubTPyZfCX4OMa128yz56Ys7mlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:ec:6f:03:c5:6c:88:b7:df:60:eb:8d:fb:4f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Validity
Not Before: Jul 27 00:00:57 2026 GMT
Not After : Jul 28 00:00:57 2026 GMT
Subject: CN=9750a922bdd5c9a5de2db5f9732a9ec9f052824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:d2:9e:c7:df:39:65:33:81:09:8a:b0:ef:
92:32:29:7d:fd:62:a2:70:29:5c:70:3d:e6:c1:fe:
42:5f:97:de:00:6b:13:bc:35:ca:d7:64:26:7f:1d:
72:f1:d1:ee:bf:bd:5d:d1:c7:bb:7b:7e:45:3c:45:
26:78:56:ca:ee:bc:79:76:6f:09:55:21:f9:e6:50:
b4:64:1e:05:ab:e2:73:65:23:c5:ca:65:dd:a5:6c:
66:05:3f:5c:7c:5e:99:b7:5e:cc:cd:82:b0:86:4f:
dd:c9:1d:99:e8:2b:1e:19:cc:84:72:c8:5c:fa:be:
89:f0:38:07:f4:bf:7a:4a:9c:17:db:35:e9:de:a2:
29:d9:c0:8c:1e:a2:b1:8d:1f:f5:45:df:c7:6e:5e:
4d:28:67:f0:65:e5:3a:23:fc:2c:a0:4e:bb:1b:b0:
da:c7:6e:e4:96:7b:a7:ea:17:a5:a4:16:7c:32:ab:
bb:9c:a6:78:e6:28:c5:06:e1:fd:a0:73:e1:ec:ef:
ca:ac:a2:1f:e3:ba:b9:4e:89:07:66:ee:ab:74:a0:
6c:ea:0b:09:78:e0:42:5a:09:f5:11:4f:8d:c6:3e:
da:80:b2:db:b6:fc:03:0c:21:3f:42:6a:e7:81:84:
9c:86:70:ba:78:6b:fc:c5:ea:ac:58:4f:e5:ce:d5:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:50:A9:22:BD:D5:C9:A5:DE:2D:B5:F9:73:2A:9E:C9:F0:52:82:4B
X509v3 Authority Key Identifier:
keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:01:84:29:a9:76:1b:e6:3a:d3:ab:11:f2:4e:8c:92:91:
c1:03:55:11:af:7b:ec:1d:f7:a9:bf:6f:66:35:8a:9f:90:6a:
66:45:a9:8b:34:48:e3:d7:7f:00:16:2a:32:19:b9:51:a5:c7:
4e:57:f1:a2:67:43:89:11:3d:ef:09:39:7e:be:8a:43:4a:37:
dc:8f:3b:fb:09:54:94:b0:de:e3:1b:c2:63:57:8e:f5:23:5b:
29:ee:1e:59:07:39:f9:74:50:2b:93:16:2f:ee:8f:90:b3:21:
33:13:31:69:05:c2:13:e9:d6:5d:eb:30:58:7d:01:0b:07:7f:
0f:dd:56:4e:78:77:56:b8:65:5f:ff:28:30:07:24:14:d5:81:
64:a4:bc:66:ee:61:e5:54:2a:5b:f2:22:0c:ad:81:77:14:4e:
4d:91:b5:5c:60:7b:6f:5c:1e:56:f8:1c:bc:6f:4f:8c:85:e1:
65:b4:aa:cb:85:d7:21:8d:51:17:0d:f4:d9:37:68:ce:c7:4c:
6d:9b:69:db:e1:c4:9e:8d:23:b8:44:71:79:e5:a2:eb:fa:36:
01:06:2a:eb:7c:9d:c7:62:91:f5:0a:79:4e:26:75:8c:49:33:
fe:89:4c:f4:09:7c:b1:eb:b1:c2:bf:f7:5e:9c:e6:a3:a5:52:
59:55:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:15:56 2026 by rpki-client