Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: kVWNZqcgPW3aCY7uaPzIc+Ipm86pAHXc2UtdEivWOhs=
Subject key identifier: 30:97:3C:26:92:B8:7C:08:B2:BE:78:1A:05:E3:3B:28:00:7E:65:CF
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 019D394147ADA51A6D62F932A133AD663AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 11:01:12 +0000
Manifest this update: Sun 29 Mar 2026 11:01:12 +0000
Manifest next update: Mon 30 Mar 2026 11:01:12 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: 11pwgeTT2T5XRckZjKNH2B4urDimIADK332aDLDPbA8=)
2: PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa (hash: H/8+GgNdJOZH+P5jx7Yl7IzwfogX3Vj/jZBL/Jyz7y8=)
3: fFg7BMRzleH625x9WdiXPcleSgg.roa (hash: VJ0RLkXcuNA4Y8CWLeS6/R5pD7ua0+mj6mlNZsFqI9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:47:ad:a5:1a:6d:62:f9:32:a1:33:ad:66:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Mar 29 11:01:12 2026 GMT
Not After : Mar 30 11:01:12 2026 GMT
Subject: CN=30973c2692b87c08b2be781a05e33b28007e65cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:c8:3b:84:94:8c:47:76:d3:46:83:a2:9f:
5f:ea:34:9a:5f:b7:af:19:51:95:95:d3:f7:93:84:
ea:65:cc:c1:7b:aa:87:7e:89:19:51:87:a9:32:76:
8e:30:2b:b5:65:1d:7a:8a:3a:9d:20:19:83:a4:0b:
b4:85:86:e9:92:dc:90:9d:fc:64:4d:2b:fb:d0:b3:
ca:aa:f7:73:d7:5c:a6:30:45:40:67:b2:f4:ae:f0:
a9:08:5c:30:fc:85:34:e8:7e:5d:bd:e3:3c:a0:e5:
49:90:23:1f:ac:68:65:87:ac:18:6d:98:7c:73:da:
ce:27:b7:d4:d8:9b:cf:8a:91:be:c3:9e:b5:8c:86:
a0:60:13:d0:64:5f:ad:50:50:e0:7b:d0:ce:68:67:
df:0c:fa:b0:9b:db:73:d7:0f:67:41:46:34:82:31:
19:df:8f:03:b2:5a:6b:24:1b:b8:34:b6:71:86:69:
92:04:d5:63:4c:db:6e:3f:f9:32:ae:bc:f1:8b:dc:
35:0d:8e:bc:4c:6a:b8:40:08:d0:45:22:d8:cc:b3:
48:f7:91:ff:f2:2f:ef:e1:50:e6:f2:d2:58:e6:71:
c6:fe:2d:78:32:99:6d:d5:0c:4f:7e:65:d5:6a:a4:
fb:41:fe:7b:99:46:a6:e7:fa:54:71:6e:9a:16:fe:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:97:3C:26:92:B8:7C:08:B2:BE:78:1A:05:E3:3B:28:00:7E:65:CF
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cb:4f:1d:48:38:2b:0c:30:9e:6b:68:ee:bf:6a:dd:e0:70:
46:2f:e3:60:8d:7e:bb:f5:24:ed:30:d7:f0:e1:ce:f7:6d:02:
06:c7:39:a5:ae:c8:f5:96:de:f5:fd:3c:fe:49:2a:e1:3b:c1:
bf:40:4c:8c:f4:00:51:bc:70:96:31:b9:2a:7e:b8:22:1b:59:
95:ee:ee:ee:dd:22:7d:ca:e7:41:84:b8:69:99:d2:db:75:d1:
4e:b1:00:33:52:08:8c:70:2a:2b:32:c4:ba:d6:31:64:92:4c:
6d:41:0d:69:a3:8e:37:7c:07:27:26:6f:f7:ad:4c:c3:4b:21:
de:c1:44:44:c7:e6:dc:3d:b0:7d:19:4b:a6:a8:6b:32:d6:63:
55:26:ce:05:c0:e5:f1:f9:01:17:23:b1:69:6d:92:b5:90:ec:
7e:6b:ea:cb:37:69:fe:0e:08:2d:2e:f0:72:30:b3:f1:aa:00:
21:4c:9a:d0:f2:ae:78:be:2b:67:3c:cf:fe:5e:e4:f0:a1:f0:
85:a9:06:99:d0:fa:4b:00:1e:3d:47:f3:a7:b9:86:0b:4f:9c:
59:7f:34:b0:bd:9a:58:e3:65:9b:6c:a9:d6:1c:bb:8e:84:59:
f8:52:bb:0d:2e:3d:8a:06:f2:cf:c7:c5:6a:bc:5f:b7:53:8b:
17:d1:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:28 2026 by rpki-client