Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: adwhi3HjRTUuPkGR51L4wnE4Zqvt0M2XeLBbsXCmU3c=
Subject key identifier: 96:64:D3:05:56:B8:EC:56:A7:00:18:A9:0E:05:C4:0E:23:96:20:88
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 019D386654B211B899CDF1E22A68709DC860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa (hash: 30n2Bw5522A46gw1W2HezcGrkjx97JHsFkbK0N2tgYE=)
2: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: imzwvWBWkZo4zBdZ9aYN9DjhT5RRPUifRvLieCAhGzc=)
3: mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa (hash: sr/dXfSSlPIqMnWe8S1qR8pWu+O2s9TKt2RJh6kkvX4=)
4: tfHdDRVXG7intRn8ynqb-cwa37E.roa (hash: C4IgEy8F2zxJrndcjUMLwRBcCn03RIvDFs2z8wsXHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:54:b2:11:b8:99:cd:f1:e2:2a:68:70:9d:c8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=9664d30556b8ec56a70018a90e05c40e23962088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:5a:5f:e4:cf:f6:09:62:a2:bd:31:96:65:
c7:18:3e:ae:f6:5e:1e:6e:96:7f:72:2d:93:cd:93:
6f:2b:c2:65:b8:b4:2f:2c:f6:e9:88:bd:08:f9:19:
97:47:68:33:27:27:bb:4a:fe:85:f8:59:48:ad:73:
48:fc:fb:ed:a7:6a:e2:8b:07:52:43:94:f5:7f:e9:
19:b1:67:b7:d3:4d:a8:09:8c:56:38:85:cd:38:d9:
33:e3:66:cf:c7:b4:4e:5b:f9:b4:58:ff:ba:45:fb:
af:01:f6:12:9b:f8:ff:f4:66:0c:00:f0:61:7a:b4:
c7:b7:51:cc:01:b2:3c:3f:a8:16:a5:ae:3d:60:51:
3a:ae:c1:c6:02:92:6b:94:88:ec:02:b7:36:44:74:
fd:cd:d5:f8:56:55:3a:e6:14:06:cb:93:7b:19:63:
5b:de:cf:83:da:c0:a4:9d:a7:44:bd:6d:0e:46:7b:
07:02:4b:43:e2:5d:40:f3:ce:90:c4:5c:56:90:95:
65:1e:a5:a6:cc:55:c1:a2:b5:6f:d8:cd:72:b8:e8:
c9:3e:98:3f:d0:99:14:04:9f:af:f6:74:39:a5:b4:
fb:7a:32:8e:d2:f2:f4:e5:ef:46:c6:29:2d:74:9d:
ba:13:a2:1f:87:e0:cf:db:9c:d2:67:ce:21:50:f3:
60:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:D3:05:56:B8:EC:56:A7:00:18:A9:0E:05:C4:0E:23:96:20:88
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9a:e8:78:45:f6:e0:58:02:31:85:2c:c4:37:87:98:47:1c:
42:dd:45:82:58:1e:61:b1:2a:f7:58:44:15:c2:bc:7e:a0:22:
e5:b3:49:28:e7:87:65:e2:03:ce:9c:53:f0:dc:12:a3:c9:ff:
15:c5:37:4a:94:4f:49:70:6a:63:6a:4c:a2:f6:fb:4c:99:ab:
c5:bb:ba:cd:73:91:73:07:af:99:97:ce:53:8f:26:a7:92:04:
aa:0e:5a:26:8a:12:74:02:37:09:66:fb:eb:5b:08:00:84:32:
68:94:54:ba:24:cf:8d:95:25:36:1a:65:fe:bb:ca:ec:21:67:
2d:ad:c7:5c:f0:d7:b8:da:4b:67:d5:f6:39:9b:9c:aa:67:ce:
f9:e0:a8:04:27:f6:6f:21:dd:36:e7:d6:1e:79:ca:5e:97:9c:
34:d6:c5:36:a4:85:25:ca:4d:79:db:5b:52:7a:31:c3:35:79:
66:ca:7b:43:9c:78:0b:0d:70:dd:65:89:48:de:43:0a:9c:2f:
16:8a:05:bb:e1:22:a8:b6:41:d2:80:57:04:15:fb:99:8a:d1:
38:55:2f:d3:8b:8f:cf:d9:ad:06:b1:71:ce:ad:55:f5:a7:14:
78:11:20:40:0b:7b:21:ab:46:e5:4e:22:63:52:6f:a8:a7:5c:
f8:6a:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:50 2026 by rpki-client