Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft (raw, json)
Hash identifier: S6Rct41FxCc3/UtXd+OOA11arjbEkGWEEUL7pciJNpU=
Subject key identifier: 7D:AF:EC:16:35:0E:BF:5B:E9:61:7F:D1:1B:FF:7F:92:78:FB:50:87
Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Certificate serial: 019F8644A78A262A4C70DD5E1A2A3B3EFDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
Manifest number: 01BD
Signing time: Tue 21 Jul 2026 20:01:13 +0000
Manifest this update: Tue 21 Jul 2026 20:01:13 +0000
Manifest next update: Wed 22 Jul 2026 20:01:13 +0000
Files and hashes: 1: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl (hash: l/F3cdFBY5vfBmJ91sMlJQANdN1art+QSbyut+o1+6E=)
2: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (hash: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:a7:8a:26:2a:4c:70:dd:5e:1a:2a:3b:3e:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Validity
Not Before: Jul 21 20:01:13 2026 GMT
Not After : Jul 22 20:01:13 2026 GMT
Subject: CN=7dafec16350ebf5be9617fd11bff7f9278fb5087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:0a:7f:f9:17:2c:f3:fe:5c:0f:9c:03:c1:
38:16:50:50:c8:ad:d6:24:59:31:fa:62:97:6e:4d:
37:d8:79:41:32:b9:8f:ee:f4:9a:88:c3:d0:39:22:
6e:5c:23:9f:4b:ec:7e:33:2e:d6:81:c5:42:93:61:
6a:e7:27:97:e2:19:38:15:bd:63:f4:87:d6:44:8d:
66:62:b1:36:89:c8:53:ec:83:46:32:fe:b8:c4:bd:
7d:14:f0:d8:7b:24:88:a8:83:b4:5b:d2:86:73:b0:
5b:e7:e4:72:d9:ed:ab:6e:f6:f2:67:40:41:11:e8:
1e:e2:8f:db:bd:eb:90:df:5f:11:24:9d:1b:0f:fb:
8d:75:b3:9e:c9:ad:62:b0:52:1c:ea:b4:af:2e:74:
00:c5:d6:a4:4f:f8:68:ae:8e:eb:6d:32:ae:d8:db:
66:55:be:94:b7:08:c5:19:05:7f:24:d2:28:aa:88:
c3:4e:1f:3d:97:67:68:19:4b:af:63:ec:10:fb:97:
18:24:95:14:ee:d2:91:2a:17:8f:63:f8:72:4f:d2:
32:76:4e:06:d1:b9:ac:61:be:c6:d9:ec:a3:f2:f0:
a9:8b:27:80:c0:4c:cb:6d:a8:fa:42:eb:ab:9f:a8:
2d:72:22:92:ee:24:96:79:a5:f6:cc:07:70:8a:4c:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AF:EC:16:35:0E:BF:5B:E9:61:7F:D1:1B:FF:7F:92:78:FB:50:87
X509v3 Authority Key Identifier:
keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6d:a6:46:96:39:79:4d:ac:ed:8b:f4:f4:77:10:43:c2:69:
69:b8:7c:f0:32:6d:1f:5f:76:17:c8:1f:4b:36:14:1c:f0:ff:
ab:66:f6:05:98:55:e4:88:d0:bb:f1:49:14:7c:9e:32:13:c9:
58:02:1b:c9:7e:8a:28:2b:c7:1e:1b:23:5d:e0:a3:7c:32:fb:
b0:5c:4b:cf:d4:f1:d2:9f:ba:49:22:7e:21:4e:ef:75:2e:ce:
39:0d:be:21:77:a9:9d:45:d3:14:ba:85:c4:12:fd:ee:63:4b:
29:dd:64:15:f6:15:f9:72:e0:61:46:02:63:5b:a1:40:78:5f:
a3:78:58:7e:32:15:1e:3c:c9:2a:47:3c:0a:11:17:ee:ff:8c:
61:02:26:94:36:18:66:64:39:b9:1e:a5:73:1d:37:c6:4a:ea:
4b:c5:e3:d4:dd:9e:d8:78:63:9f:d5:76:b2:a3:3e:a2:3a:02:
d6:0b:80:52:f3:d5:2c:3d:1f:6e:13:c1:43:0d:e7:32:65:e3:
f5:a1:a6:6d:e6:89:f3:83:69:f8:af:82:f5:af:3b:e6:69:f4:
29:2b:b5:56:c6:48:2a:b6:8b:0a:11:53:2f:69:57:bd:fb:46:
5c:e3:36:f8:cb:7a:03:f4:d5:10:da:5b:f5:07:8d:1a:77:69:
ac:3e:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:45:33 2026 by rpki-client