Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: +kikhc4aP5xmL2f35QqeVLBxAHC5+2+Mf6rxowdRfiQ=
Subject key identifier: CB:52:C0:0A:57:41:2F:59:EC:40:A6:1F:D1:B6:F6:A8:B7:58:0F:C1
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 01A19B7D1D8C7A49BAEDC3DF6AAA907BE4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1ADB
Signing time: Mon 02 Nov 2026 09:00:30 +0000
Manifest this update: Mon 02 Nov 2026 09:00:30 +0000
Manifest next update: Tue 03 Nov 2026 09:00:30 +0000
Files and hashes: 1: 8UQ12RUPPEvdMji-ZyJml8s8f5w.roa (hash: x37qOhjZGVYP01a7al4BChLeleCGAwV9M3Yfmjfcv5k=)
2: XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa (hash: 30n2Bw5522A46gw1W2HezcGrkjx97JHsFkbK0N2tgYE=)
3: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: OBTuIRED/tZRwmQHAFOP0cIUdH7gDIC3iwQ846SZiGs=)
4: mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa (hash: sr/dXfSSlPIqMnWe8S1qR8pWu+O2s9TKt2RJh6kkvX4=)
5: tfHdDRVXG7intRn8ynqb-cwa37E.roa (hash: C4IgEy8F2zxJrndcjUMLwRBcCn03RIvDFs2z8wsXHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:7d:1d:8c:7a:49:ba:ed:c3:df:6a:aa:90:7b:e4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Nov 2 09:00:30 2026 GMT
Not After : Nov 3 09:00:30 2026 GMT
Subject: CN=cb52c00a57412f59ec40a61fd1b6f6a8b7580fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:a5:de:51:b7:36:fd:1d:a8:d0:86:79:ec:
7d:4b:a8:61:e4:00:56:dc:20:d4:4b:0e:a0:ed:5c:
28:5d:30:47:e1:ff:5e:fb:d2:9e:67:6d:f0:18:af:
d9:34:7a:0a:21:09:78:11:cf:9b:e7:16:fc:16:15:
c9:15:28:79:d8:2b:fa:ed:91:33:bf:56:b2:1b:6f:
61:24:57:26:e0:bc:b4:7e:c9:25:06:4a:2f:1a:e2:
7b:00:af:7f:eb:8a:a3:78:37:00:e9:6f:f4:52:2a:
ff:5b:0f:b6:b7:9e:c1:4a:08:76:77:95:ed:e5:e3:
a1:49:25:2f:e9:03:67:f4:81:3e:27:62:4c:bf:e7:
93:85:fa:f1:81:f8:c4:9a:44:c4:ac:2c:cd:7f:73:
a8:d5:26:10:7c:94:ab:6d:a7:e8:0b:ca:8a:c5:62:
50:38:37:8f:62:b9:00:e8:be:08:3c:53:71:57:e0:
c5:7a:24:e4:b9:82:9f:7f:70:53:d2:ee:91:5e:fd:
0b:10:d8:13:04:61:72:48:de:ec:ab:0a:83:72:88:
b2:1a:cf:da:25:18:53:ce:89:b9:1c:fc:bb:d6:33:
6e:6f:47:a6:3f:92:52:ac:16:30:c9:77:87:5b:4f:
6b:38:b5:d6:34:c1:1f:98:85:17:c0:bd:e5:4e:a4:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:C0:0A:57:41:2F:59:EC:40:A6:1F:D1:B6:F6:A8:B7:58:0F:C1
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:60:f1:9c:4d:ff:26:ae:8a:0e:4e:74:0f:00:79:14:f9:b6:
05:46:c7:23:49:2b:c7:09:4e:32:1e:59:8b:f3:40:dc:d6:da:
7e:27:cf:c5:ae:51:2e:1c:c1:6f:b9:9c:14:22:02:20:d1:d0:
57:59:6b:9f:cf:c6:9c:5b:17:15:fc:06:a0:c1:b4:af:c4:25:
b0:45:a4:f4:71:72:62:27:7d:dd:de:bf:65:6f:60:d9:3a:62:
2e:c6:b3:46:31:4e:b5:75:72:40:69:31:0a:e1:41:59:bd:83:
59:68:b4:ac:fc:ee:cb:12:d3:a1:9f:55:19:8e:0f:78:35:aa:
7e:ed:4e:c2:41:10:13:71:5b:3e:b8:fb:be:57:63:4f:1a:86:
b7:ca:e7:06:2d:50:d1:01:91:43:f3:5c:48:cd:99:91:ad:f5:
4d:05:d6:62:51:bc:e4:a8:b2:97:65:54:37:af:f5:9a:83:9c:
e1:d8:44:35:aa:e4:87:b9:40:12:2f:c8:37:e9:94:54:ef:af:
85:ab:df:7a:50:a9:3d:22:ec:f7:6e:3f:2e:73:9b:d9:9a:0e:
f4:6f:dd:e4:09:07:15:c8:69:f6:6d:fb:b6:07:28:22:0d:c4:
ae:58:44:61:8d:16:8f:b5:b8:70:6b:29:04:72:b2:44:26:e8:
a2:57:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:43:35 2026 by rpki-client