Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
File: bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft (raw, json)
Hash identifier: yrXbHLKZ3NXXMpLOsdIi/Mr+K6uk/3JTrpYQg63+bHc=
Subject key identifier: 42:32:49:A8:52:CA:AD:ED:7C:DA:9E:66:D9:E0:08:FE:AB:56:31:1E
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 01A11A50B26ADDFB86622940484C1192F1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
Manifest number: 1A25
Signing time: Thu 08 Oct 2026 07:00:58 +0000
Manifest this update: Thu 08 Oct 2026 07:00:58 +0000
Manifest next update: Fri 09 Oct 2026 07:00:58 +0000
Files and hashes: 1: bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl (hash: +HHB8/BD7uK5GS/YdAsBveHbu38bEkFkMx4+p6qSSJw=)
2: q4MMxbvpWnkqIJJ1G1vh9k5IaD0.roa (hash: atJClVpeASPtSX6kEGrHIIjj/e8dWQQKfuBLHQmvtvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:b2:6a:dd:fb:86:62:29:40:48:4c:11:92:f1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Oct 8 07:00:58 2026 GMT
Not After : Oct 9 07:00:58 2026 GMT
Subject: CN=423249a852caaded7cda9e66d9e008feab56311e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:52:c6:23:38:90:a6:ee:97:7e:3c:75:cf:
e6:d1:c1:10:f5:bb:ea:f2:b0:56:d4:1a:99:b7:2c:
8a:f4:c2:6f:38:08:24:ba:46:fb:4c:a6:25:76:79:
e5:60:a8:c6:3d:aa:a6:ad:b4:4d:83:18:ad:28:59:
7b:94:21:99:bd:f8:6f:a3:d6:5d:52:32:bd:a5:f5:
75:6e:7e:a1:5e:2f:b3:0b:df:6d:c9:aa:17:3d:df:
12:b7:39:91:f1:4e:b6:98:da:d8:79:7e:fa:db:59:
65:df:b4:47:9e:5e:64:09:fa:66:e9:8e:a3:31:4d:
a7:85:5c:82:f9:44:4b:a5:2f:35:25:c8:19:63:c6:
97:d1:c4:7f:04:b2:80:f6:0f:dd:2f:49:b9:13:7f:
9b:37:ef:5f:7a:40:86:4c:d1:42:9c:7f:ba:56:4c:
c3:e2:5d:df:71:74:b2:3b:a0:d1:03:33:fe:4e:17:
76:86:4d:de:2b:b2:1d:f6:cb:b1:41:57:8a:91:d9:
f1:50:89:89:5d:88:cb:aa:45:bc:64:3b:e3:21:2b:
5f:95:ef:48:82:bd:39:d1:c1:e5:44:e1:ea:a5:f9:
96:5d:c6:fe:81:ce:43:7e:86:89:3c:08:fb:5e:74:
73:e2:fc:39:8c:42:a9:ba:fa:5b:e6:aa:87:ef:29:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:32:49:A8:52:CA:AD:ED:7C:DA:9E:66:D9:E0:08:FE:AB:56:31:1E
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cd:69:60:7c:d9:18:ca:15:26:94:8f:59:5c:08:f2:ef:ac:
d0:98:b2:bb:ca:e0:cf:b6:d5:cd:d6:c3:70:ae:aa:1d:a8:e2:
1d:a4:2a:26:87:96:d7:92:b0:d2:1a:62:20:15:fa:f0:f0:c1:
83:1e:28:35:1d:6c:04:ea:e5:76:6e:6a:c7:d6:e0:47:0a:64:
e8:48:88:e1:73:de:6d:73:15:f1:09:35:b2:6d:82:a6:0a:cd:
8b:65:ef:33:07:cd:57:71:47:4b:5e:17:cb:03:0a:9b:7e:cc:
9b:5b:80:c6:00:34:2b:67:91:37:0d:63:0b:5a:8f:8e:40:c6:
ca:4f:77:a0:3d:e7:33:d2:ab:c0:7f:3d:e3:16:33:3a:44:33:
fa:ef:e1:46:a8:7c:a8:2f:75:c1:60:92:7d:71:37:b9:0c:1c:
df:e4:56:96:26:e2:73:70:d8:27:64:61:69:87:94:5b:5f:27:
3d:81:8c:2a:c0:8b:dd:04:4c:47:55:f6:d0:29:93:82:1b:0d:
48:6a:77:40:04:17:a7:71:be:d7:65:10:98:18:0d:6d:9b:d0:
29:c4:06:c4:e4:a3:01:7c:4e:3e:94:08:b3:a6:af:68:c7:f2:
52:92:cc:d8:61:17:ba:8f:43:e1:72:60:d9:2f:47:0b:37:b9:
ab:c2:dd:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaULJq3fuGYilASEwRkvHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjI5MzIxMmQyNWQ0ODYzZTM4NmI5YzQ4MGRkYzliZTcz
ODEyNGYwHhcNMjYxMDA4MDcwMDU4WhcNMjYxMDA5MDcwMDU4WjAzMTEwLwYDVQQD
Eyg0MjMyNDlhODUyY2FhZGVkN2NkYTllNjZkOWUwMDhmZWFiNTYzMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveNSxiM4kKbul348dc/m0cEQ9bvq
8rBW1BqZtyyK9MJvOAgkukb7TKYldnnlYKjGPaqmrbRNgxitKFl7lCGZvfhvo9Zd
UjK9pfV1bn6hXi+zC99tyaoXPd8StzmR8U62mNrYeX7621ll37RHnl5kCfpm6Y6j
MU2nhVyC+URLpS81JcgZY8aX0cR/BLKA9g/dL0m5E3+bN+9fekCGTNFCnH+6VkzD
4l3fcXSyO6DRAzP+Thd2hk3eK7Id9suxQVeKkdnxUImJXYjLqkW8ZDvjIStfle9I
gr050cHlROHqpfmWXcb+gc5DfoaJPAj7XnRz4vw5jEKpuvpb5qqH7ykMMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIySahSyq3tfNqeZtngCP6rVjEeMB8GA1UdIwQY
MBaAFG3ykyEtJdSGPjhrnEgN3JvnOBJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYt
ZjQwMDQwMmI1MzZjLzEvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYtZjQwMDQwMmI1MzZj
LzEvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK81pYHzZ
GMoVJpSPWVwI8u+s0Jiyu8rgz7bVzdbDcK6qHajiHaQqJoeW15Kw0hpiIBX68PDB
gx4oNR1sBOrldm5qx9bgRwpk6EiI4XPebXMV8Qk1sm2CpgrNi2XvMwfNV3FHS14X
ywMKm37Mm1uAxgA0K2eRNw1jC1qPjkDGyk93oD3nM9KrwH894xYzOkQz+u/hRqh8
qC91wWCSfXE3uQwc3+RWlibic3DYJ2RhaYeUW18nPYGMKsCL3QRMR1X20CmTghsN
SGp3QAQXp3G+12UQmBgNbZvQKcQGxOSjAXxOPpQIs6avaMfyUpLM2GEXuo9D4XJg
2S9HCze5q8LdqA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:04:48 2026 by rpki-client