Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: Mj6kkmsH1MK604KkxwipdF/c6YgJcZtwX8WVMF76eh0=
Subject key identifier: 62:50:F1:F9:A9:7E:E1:C6:D8:A5:1D:11:E2:B9:36:E6:0D:AC:82:55
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 01A142036ED3DC3C4EA112CF86A81887037E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0CF1
Signing time: Fri 16 Oct 2026 00:01:23 +0000
Manifest this update: Fri 16 Oct 2026 00:01:23 +0000
Manifest next update: Sat 17 Oct 2026 00:01:23 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: ooln6IHtT0EybF5JxU5KP13jeCNzmUu0rZppWGvEYHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:03:6e:d3:dc:3c:4e:a1:12:cf:86:a8:18:87:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Oct 16 00:01:23 2026 GMT
Not After : Oct 17 00:01:23 2026 GMT
Subject: CN=6250f1f9a97ee1c6d8a51d11e2b936e60dac8255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:2d:dd:dc:ac:8b:08:19:ce:0a:ca:a8:f3:
3b:c0:90:5a:6c:e6:82:ec:08:71:80:e8:c2:3c:85:
5f:37:fc:38:5d:15:7d:78:2d:88:25:21:57:88:48:
dc:c4:33:87:48:6b:b8:2e:c3:ad:64:3a:7a:49:c9:
5c:bc:1c:c3:9c:ca:fd:b3:e2:c0:87:4e:3b:fa:35:
c9:ea:2d:b5:a2:38:f3:a1:e8:0b:ba:ad:80:62:fc:
db:d8:85:ea:f7:fe:94:bf:8b:56:e6:19:c7:d2:c8:
7d:ce:6a:a8:7b:ee:f5:13:c5:a1:ba:92:fa:fb:49:
71:41:60:dc:08:05:d0:4d:c9:52:49:e3:0f:c0:36:
85:bc:b0:8e:db:23:87:b4:4e:c1:fa:17:e2:7b:97:
fa:a8:67:92:fa:6f:fa:ee:46:b6:cf:5a:86:69:68:
06:73:3a:fd:b1:78:b3:e8:7d:4a:33:de:5c:6a:6f:
41:ef:f1:3b:8d:1c:ba:20:a8:8f:4b:12:29:16:29:
8b:85:0f:61:8b:09:84:e5:1f:23:c6:7a:cf:37:4a:
2c:bd:c8:76:7f:cd:eb:ce:0f:7d:fe:14:7b:0b:55:
71:62:d8:ce:8d:df:a0:34:71:f5:2e:59:e8:31:a6:
2f:77:4b:5a:eb:ba:3c:92:c5:3d:f0:58:05:a9:8f:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:F1:F9:A9:7E:E1:C6:D8:A5:1D:11:E2:B9:36:E6:0D:AC:82:55
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f6:fd:31:c9:83:b3:31:71:11:ce:83:1d:6d:f1:00:10:5a:
cb:7c:11:fe:e6:ed:18:69:66:46:0d:01:3d:27:42:ab:e6:b4:
5f:10:98:bc:a4:98:2c:dd:37:22:37:c8:f5:fd:ec:7c:87:43:
18:52:74:bb:f3:92:b3:7a:c4:16:a2:ad:df:59:c9:67:98:ed:
e5:cc:a6:8f:83:cd:a6:f9:cf:c4:ba:f4:bb:b9:70:94:52:31:
02:28:44:19:c6:ca:3b:d0:b1:0c:bc:cd:c3:b4:ce:4b:eb:91:
5d:fc:7d:cc:b2:63:12:f9:c5:00:ac:50:b7:dd:d9:ac:1c:2f:
d4:32:b7:18:5d:34:91:5b:3c:53:6f:a5:9f:ff:e6:82:79:6e:
18:36:1a:b7:4e:89:cf:41:85:53:ed:ba:c1:14:63:ce:2f:ce:
0b:12:9c:88:76:39:b6:4b:c8:71:e5:fc:9d:70:69:44:c1:fb:
4f:99:a1:f6:14:96:16:62:91:31:dc:bf:16:71:44:eb:2a:20:
2d:f4:41:ed:48:88:21:33:ab:8b:e5:e1:68:c3:d9:e8:34:e5:
50:ee:ca:62:4d:48:0f:e1:6b:44:fe:ba:9c:c7:81:4b:9e:9e:
45:67:60:30:eb:4f:5c:f4:67:85:c8:84:d3:58:e8:18:eb:96:
35:f6:a9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:03:44 2026 by rpki-client