Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: 7inrIOxMyYiTRbzcvOV3y9rRJJoYVgx9ipVzAqYtEWE=
Subject key identifier: D0:B9:B6:52:B9:43:3B:B7:F8:F6:4B:6C:D8:F8:0F:8D:8B:05:39:5C
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 019FA2600DC144E22F40A71AC694613FD952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 19D4
Signing time: Mon 27 Jul 2026 07:00:31 +0000
Manifest this update: Mon 27 Jul 2026 07:00:31 +0000
Manifest next update: Tue 28 Jul 2026 07:00:31 +0000
Files and hashes: 1: XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa (hash: 30n2Bw5522A46gw1W2HezcGrkjx97JHsFkbK0N2tgYE=)
2: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: AZerG26tN4QUSnZEFVhH+cmqF0Ao9DZwiTd4qnHBXYE=)
3: mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa (hash: sr/dXfSSlPIqMnWe8S1qR8pWu+O2s9TKt2RJh6kkvX4=)
4: tfHdDRVXG7intRn8ynqb-cwa37E.roa (hash: C4IgEy8F2zxJrndcjUMLwRBcCn03RIvDFs2z8wsXHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:0d:c1:44:e2:2f:40:a7:1a:c6:94:61:3f:d9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Jul 27 07:00:31 2026 GMT
Not After : Jul 28 07:00:31 2026 GMT
Subject: CN=d0b9b652b9433bb7f8f64b6cd8f80f8d8b05395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:40:0c:b5:45:53:bc:3c:97:fc:ae:10:fb:
ff:e6:ce:70:44:64:94:7b:04:ab:d0:ef:0a:50:76:
84:d3:dd:83:7a:14:84:54:0a:cc:5c:dc:41:f4:02:
fe:8a:a0:7a:8b:86:c9:77:74:66:86:cb:f2:36:aa:
e1:f2:3c:a6:f4:c0:f9:af:e1:0c:4e:2c:f4:4a:ea:
e9:2d:cf:d3:ca:57:a7:12:6c:ad:bc:67:d5:e0:b4:
57:fd:33:02:d0:00:63:ca:57:8f:5e:b0:51:f1:59:
35:e1:b3:4c:a4:b4:c1:d5:9b:2f:04:3c:3d:4f:9f:
db:2c:b3:d8:97:63:de:68:4d:fc:ad:b3:b8:ba:91:
ee:b7:53:d6:05:8d:36:ae:76:41:ab:d1:05:52:4b:
7c:bd:4e:dd:58:45:10:7c:d2:57:a8:51:c2:b9:eb:
8d:18:9e:8d:9e:2e:5d:18:45:ec:bb:eb:fb:c3:9a:
b6:80:d7:7f:52:47:8a:a2:13:46:ce:11:c2:44:49:
7c:f2:3d:a3:91:73:7f:a6:41:2c:38:5d:ef:0a:9d:
e0:fa:d2:58:c3:e4:50:22:a2:af:63:03:6a:3a:a6:
68:d3:4e:12:01:ca:f7:1f:61:b3:1c:10:ae:0f:01:
31:03:4b:db:36:88:b5:97:17:49:f3:5b:0d:33:4c:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:B6:52:B9:43:3B:B7:F8:F6:4B:6C:D8:F8:0F:8D:8B:05:39:5C
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b3:3c:26:0b:20:a9:95:b3:33:0c:cd:a9:6a:eb:2c:9b:95:
70:b0:39:52:71:34:b1:19:17:ad:f3:d5:8e:db:68:cc:5a:cd:
eb:27:d6:b2:f9:3b:94:2b:aa:5b:25:19:2e:ef:28:bb:a2:8b:
b8:3c:a3:bc:4d:56:61:0a:8a:7d:67:ba:ff:7f:c8:38:50:4e:
f8:f0:d4:a9:93:f0:43:2d:9c:83:f7:ce:bf:bd:cf:dd:b0:8d:
9a:f4:5b:9a:8c:8f:dc:68:af:2d:46:e5:e4:5d:ea:0f:bd:0a:
97:ec:17:77:d7:be:a7:69:e1:c4:5f:e0:f6:7d:b2:96:35:c3:
5c:08:75:25:c8:c3:63:56:2b:28:ff:7e:d4:81:d4:69:ce:b9:
b0:fd:d1:7e:ee:85:8a:b5:15:ce:d0:7e:18:96:44:3f:cf:da:
b7:01:e8:75:04:52:a3:1f:4b:54:00:77:1c:d1:21:d0:29:71:
53:60:33:1c:da:6d:54:cf:c7:1b:a4:a4:a4:77:c5:37:cf:70:
49:6d:0d:d7:27:88:7d:06:7e:d4:9c:71:43:cf:90:b5:f7:a4:
af:be:6f:e5:10:f8:b5:7a:78:a8:33:4e:1e:04:08:ca:6c:6c:
cc:a2:98:c7:ac:95:ea:3d:ac:db:ec:49:d5:30:f4:9e:1d:5b:
6e:b3:84:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYA3BROIvQKcaxpRhP9lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl
ODg1YTAwHhcNMjYwNzI3MDcwMDMxWhcNMjYwNzI4MDcwMDMxWjAzMTEwLwYDVQQD
EyhkMGI5YjY1MmI5NDMzYmI3ZjhmNjRiNmNkOGY4MGY4ZDhiMDUzOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsANADLVFU7w8l/yuEPv/5s5wRGSU
ewSr0O8KUHaE092DehSEVArMXNxB9AL+iqB6i4bJd3RmhsvyNqrh8jym9MD5r+EM
Tiz0SurpLc/TylenEmytvGfV4LRX/TMC0ABjylePXrBR8Vk14bNMpLTB1ZsvBDw9
T5/bLLPYl2PeaE38rbO4upHut1PWBY02rnZBq9EFUkt8vU7dWEUQfNJXqFHCueuN
GJ6Nni5dGEXsu+v7w5q2gNd/UkeKohNGzhHCREl88j2jkXN/pkEsOF3vCp3g+tJY
w+RQIqKvYwNqOqZo004SAcr3H2GzHBCuDwExA0vbNoi1lxdJ81sNM0wk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC5tlK5Qzu3+PZLbNj4D42LBTlcMB8GA1UdIwQY
MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt
Mzg2NjlkMWUyMzAxLzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx
LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbM8Jgsg
qZWzMwzNqWrrLJuVcLA5UnE0sRkXrfPVjttozFrN6yfWsvk7lCuqWyUZLu8ou6KL
uDyjvE1WYQqKfWe6/3/IOFBO+PDUqZPwQy2cg/fOv73P3bCNmvRbmoyP3GivLUbl
5F3qD70Kl+wXd9e+p2nhxF/g9n2yljXDXAh1JcjDY1YrKP9+1IHUac65sP3Rfu6F
irUVztB+GJZEP8/atwHodQRSox9LVAB3HNEh0ClxU2AzHNptVM/HG6SkpHfFN89w
SW0N1yeIfQZ+1JxxQ8+Qtfekr75v5RD4tXp4qDNOHgQIymxszKKYx6yV6j2s2+xJ
1TD0nh1bbrOElg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:44 2026 by rpki-client