Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: NdOxYlmCBOaNLCqCTRQ8qvQP5CAkGlRNao9PxfvtJLQ=
Subject key identifier: F2:99:2E:A7:B5:74:6A:AF:FB:47:AB:21:F6:7F:54:D2:B4:8C:E5:70
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 019D3941B22342CE91B158190162E0CB4D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0A78
Signing time: Sun 29 Mar 2026 11:01:39 +0000
Manifest this update: Sun 29 Mar 2026 11:01:39 +0000
Manifest next update: Mon 30 Mar 2026 11:01:39 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: jWkkP9cR5x/QVPvbY46JyeTnZarKAVR4sXUXVezP/5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:b2:23:42:ce:91:b1:58:19:01:62:e0:cb:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Mar 29 11:01:39 2026 GMT
Not After : Mar 30 11:01:39 2026 GMT
Subject: CN=f2992ea7b5746aaffb47ab21f67f54d2b48ce570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:f1:61:13:c6:4a:d9:0c:6b:f1:f2:22:f9:
9c:84:ed:6a:40:94:69:a3:6f:20:60:4d:e6:1b:01:
07:16:88:ae:86:01:a8:ba:0d:57:ab:a5:b4:a8:86:
76:83:cb:96:0d:f1:a2:87:e4:11:12:e0:b4:af:05:
2e:32:91:46:2f:02:d2:d2:62:a4:f1:61:76:19:ef:
e5:e9:0b:36:59:5d:fa:83:ab:1b:de:35:6c:49:d0:
4d:3d:88:68:7d:78:da:65:56:ef:69:18:42:e1:76:
bf:95:40:c5:cd:e8:46:91:aa:62:24:c2:ae:09:a9:
93:a7:f4:23:2d:00:47:d5:13:5a:62:58:60:9f:43:
e3:dc:61:1b:42:79:bd:41:ff:72:d0:78:77:73:35:
e4:6d:0d:3f:95:47:61:0b:f5:06:ca:14:cd:cc:cc:
2b:63:33:4b:c1:93:d6:b9:ab:29:cd:7d:a7:dd:ba:
fc:31:86:e1:31:08:1c:df:bc:3e:c1:e1:11:1d:f6:
50:69:4e:8f:fb:a4:3a:30:ba:26:36:7c:45:b0:40:
5b:86:62:76:a8:c9:ed:ea:9b:6b:96:42:a7:9f:05:
56:3b:30:b6:d5:8f:cc:dd:85:c1:f3:be:ef:97:e1:
6d:38:0b:ad:30:ee:22:13:bb:22:01:30:a4:71:6f:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:2E:A7:B5:74:6A:AF:FB:47:AB:21:F6:7F:54:D2:B4:8C:E5:70
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f7:7b:37:d5:df:7a:b6:b1:80:1a:a1:b2:60:a4:5a:fc:11:
8b:24:de:97:fd:aa:22:13:1c:55:9d:f0:b4:61:fb:2d:7a:ba:
7b:5c:9d:b6:df:88:a5:08:bb:98:4d:fd:8d:79:ea:d6:77:b0:
bb:6d:fb:6c:b4:44:0a:da:6b:78:68:08:c0:df:c5:d2:11:11:
65:38:75:98:07:aa:0f:9c:c8:0d:5f:2b:1f:1a:2f:aa:62:d8:
c1:09:22:bb:bf:ba:5c:e0:32:c7:66:b8:35:62:ca:c4:a7:ed:
86:35:f1:98:a2:98:8b:c0:90:cb:0a:9a:92:bd:e8:6a:4a:8f:
25:9f:2e:88:f8:1e:cd:5b:f5:17:0c:a6:10:01:f9:6b:74:80:
69:d7:40:2a:4f:a1:63:f7:06:da:e4:3c:92:cd:a7:ad:bd:a1:
6b:78:56:5f:63:dc:3d:92:5d:14:4f:4e:f5:82:89:d5:ef:db:
96:0c:86:bf:fb:90:ef:af:fb:ca:13:17:8a:2a:94:fb:38:63:
03:37:ee:43:03:38:f0:23:8a:9e:66:e8:e2:e7:41:75:40:a7:
6e:8d:5b:4e:ce:5f:a1:d2:9e:b8:a3:6a:9a:27:ee:b8:af:61:
f9:36:05:b7:e0:76:ba:c7:7e:0b:a5:42:bb:9d:b3:5a:3b:b8:
b1:56:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:36 2026 by rpki-client