Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: qGDL7X9MjU/65vBSK1dGTmK+Gan8W7sAyNhtZjgYfSE=
Subject key identifier: 78:01:1B:16:9D:46:09:98:4E:8B:22:5A:D4:01:99:70:0C:22:81:D9
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 01A001DD020C95534F42CF4DA276B27A6F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 20:00:56 +0000
Manifest this update: Fri 14 Aug 2026 20:00:56 +0000
Manifest next update: Sat 15 Aug 2026 20:00:56 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: eujlj9rb6wn/e7OIZOj2Porq0wu+sD66/z5SALbGp9A=)
2: PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa (hash: H/8+GgNdJOZH+P5jx7Yl7IzwfogX3Vj/jZBL/Jyz7y8=)
3: fFg7BMRzleH625x9WdiXPcleSgg.roa (hash: VJ0RLkXcuNA4Y8CWLeS6/R5pD7ua0+mj6mlNZsFqI9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:02:0c:95:53:4f:42:cf:4d:a2:76:b2:7a:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Aug 14 20:00:56 2026 GMT
Not After : Aug 15 20:00:56 2026 GMT
Subject: CN=78011b169d4609984e8b225ad40199700c2281d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:b9:e9:4c:ae:33:4d:54:7c:75:5c:3c:b8:
34:65:0a:c9:36:d1:d3:66:fc:24:51:a2:d4:2b:b7:
94:c6:ee:06:e9:e3:0f:56:07:7c:88:58:ee:97:9a:
fe:0d:27:6d:8e:f7:be:c6:d7:dd:ce:dc:98:cb:ee:
a1:fd:49:e7:6c:a8:b5:b1:f6:5b:9c:b4:72:94:fa:
ff:a8:0d:59:65:8d:83:8e:72:98:b8:a7:6e:f0:15:
58:0c:64:01:fe:3d:5a:9a:e4:a3:4c:fe:00:bb:8e:
ac:aa:c5:9f:19:22:5f:95:70:e2:7c:4d:13:dd:a0:
9b:58:3d:42:fd:cc:84:24:85:f2:12:61:d1:03:39:
f3:8e:9f:c4:91:2d:41:96:d4:24:ac:2e:f3:60:2e:
f7:c2:ec:a7:e3:3a:06:54:58:1d:82:63:76:8a:1f:
a9:a2:93:3b:4f:e3:42:f3:37:08:01:28:0f:4f:96:
bd:5f:73:cf:18:32:9e:1e:cc:92:1f:cf:a0:53:b0:
69:59:fe:e6:dc:44:b2:81:6d:99:cd:6e:58:2b:8f:
1e:44:67:9b:dc:0e:0a:33:4b:cd:28:26:ee:0e:4e:
31:56:b1:9c:87:4f:a2:51:96:66:2b:b2:e1:a4:6b:
60:7b:68:17:b3:71:7a:c1:6f:12:46:17:a8:f1:0c:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:1B:16:9D:46:09:98:4E:8B:22:5A:D4:01:99:70:0C:22:81:D9
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:67:91:c1:2c:59:e5:be:44:2b:61:6b:58:e5:62:bc:43:
6b:8e:a3:16:1b:cb:ee:56:48:22:09:ec:fc:41:93:a8:8e:eb:
d0:a4:5f:01:b3:8b:fc:56:e6:66:0f:bb:d2:fd:91:d8:b8:f1:
2b:a5:ad:97:a8:1d:b7:c2:0f:00:7b:b3:e6:86:1f:e0:7e:e5:
a8:dc:30:a0:44:35:ae:51:0b:1e:3b:c9:0a:cf:27:8b:19:1c:
ea:eb:f1:44:9a:67:c5:47:21:27:6f:29:39:4b:e6:40:75:d7:
33:76:6e:5f:57:d7:eb:d0:aa:22:45:3a:f1:a3:1e:39:8d:1d:
50:c7:9d:50:c1:b6:2c:ba:b1:86:18:ee:dc:a0:0e:ed:be:f2:
41:83:94:78:9a:7b:81:cb:19:da:a5:7e:26:44:c3:4d:2e:7d:
dc:b1:61:dc:0f:cf:7f:f8:c1:b1:45:d8:9c:45:00:46:df:06:
91:ef:db:da:8f:bf:5a:9b:c0:f9:f5:a7:7b:9d:3c:11:7e:b0:
1b:b0:bf:38:b9:09:04:87:ac:be:1c:8c:20:c9:d6:28:bc:5b:
5c:78:4a:a5:14:9a:de:b9:ff:e6:01:f3:cb:71:9e:2e:20:86:
c9:9d:4e:b7:06:1b:5a:f0:ae:dd:5a:87:21:a3:be:4d:cb:67:
30:36:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:25:43 2026 by rpki-client