Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: N6zQ1c7kGXxEVEQ6schPMY6aZwLKKU4X8eWeyhYBLQw=
Subject key identifier: 89:80:59:68:08:7C:3E:FE:B7:B4:A9:49:03:73:5A:77:02:31:B2:A6
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 019F183143FD1ED0B9C5BB1C4687677496EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 11:01:49 +0000
Manifest this update: Tue 30 Jun 2026 11:01:49 +0000
Manifest next update: Wed 01 Jul 2026 11:01:49 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: BtmnU5p8kAp4UZ8dCKW69WWSJkk2bbwpFE3aJBFkUbs=)
2: PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa (hash: H/8+GgNdJOZH+P5jx7Yl7IzwfogX3Vj/jZBL/Jyz7y8=)
3: fFg7BMRzleH625x9WdiXPcleSgg.roa (hash: VJ0RLkXcuNA4Y8CWLeS6/R5pD7ua0+mj6mlNZsFqI9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:43:fd:1e:d0:b9:c5:bb:1c:46:87:67:74:96:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Jun 30 11:01:49 2026 GMT
Not After : Jul 1 11:01:49 2026 GMT
Subject: CN=89805968087c3efeb7b4a94903735a770231b2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:88:e9:20:2a:20:75:69:19:b4:44:c4:c6:
e1:52:dd:bf:d9:f1:fe:9c:21:0b:76:b2:f9:cd:ea:
e4:31:5c:f4:19:c6:25:8b:c6:a5:a4:96:6c:31:d7:
49:c5:05:73:6d:b1:29:c0:c3:31:e2:ac:50:2a:03:
2f:87:5a:65:77:6c:8c:92:60:07:05:59:db:89:d0:
8d:58:76:06:c6:53:92:04:f9:b1:5c:7b:41:c8:19:
21:8a:f3:a1:1a:35:8e:f9:a5:dd:5f:bf:00:02:5b:
2d:ed:5e:a9:85:a3:33:da:db:2e:02:f3:73:99:b1:
30:71:cd:24:3a:95:c5:d2:a4:a7:9c:52:d3:36:01:
50:4c:64:17:a8:d3:70:93:8d:40:58:e5:94:22:4a:
fe:59:63:05:cd:1d:30:10:ae:38:21:1f:6e:a6:63:
a6:d7:5f:2c:3c:8f:92:be:b3:de:96:9f:8c:90:45:
e5:a8:d8:16:51:b0:73:b4:38:e8:58:65:92:aa:05:
01:bd:9a:09:0b:54:a2:cc:80:4b:36:0c:92:09:ab:
71:3c:57:c4:d9:ec:25:16:3f:7c:9e:24:b2:4a:1e:
c8:a1:b3:56:18:7c:1b:0c:44:62:5d:f9:a0:72:2d:
62:5a:1f:de:aa:18:26:39:f1:8a:f4:68:bf:f7:46:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:80:59:68:08:7C:3E:FE:B7:B4:A9:49:03:73:5A:77:02:31:B2:A6
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9e:8b:e3:56:9f:f7:c2:21:78:4c:14:78:b2:16:9d:3e:05:
8a:60:e8:2a:78:93:d3:88:19:c7:b8:ab:cd:5a:0f:dd:b4:62:
1d:97:6d:ce:c8:e5:2c:1f:13:63:05:bf:51:86:aa:81:92:7b:
eb:f7:62:23:be:01:e4:84:ad:1c:da:e2:83:f4:40:f2:0e:a4:
a7:74:ba:3c:f2:0d:04:12:38:69:1d:da:79:0c:e4:e5:03:94:
fe:4b:7f:d2:2b:2d:17:c6:92:98:55:72:d6:bb:f3:5f:c7:08:
92:cc:ec:fe:1d:1f:bb:72:30:98:c7:79:f3:a2:04:1b:c9:75:
bb:cd:f2:8a:86:3f:9c:fe:c4:1c:67:b7:e3:64:61:98:2d:f9:
93:c2:e4:69:8b:90:45:17:8c:76:8e:45:93:c0:5e:1e:6c:a1:
9d:59:4b:13:ea:77:e0:64:f3:4b:6f:2b:f7:8f:d4:df:42:4b:
08:4f:2d:41:08:97:e0:e5:42:13:e0:e0:71:59:4e:c7:91:cb:
2c:fc:9d:32:0f:e8:b3:6a:c7:51:ae:c4:a8:75:21:72:c9:38:
81:fd:48:92:89:a8:52:d1:83:49:7a:44:52:7f:06:3a:10:e1:
46:5c:4c:d9:07:5c:53:0f:a0:6e:51:4b:a5:5f:01:a6:f0:ca:
78:6c:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:21:10 2026 by rpki-client