
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier: L7dMAI0haa+qLFSuFTpfZiSHo2Ppas4MnbW/D8wgxk4=
Subject key identifier: FB:26:60:AF:25:16:5E:C4:4A:88:3C:86:A9:2F:65:B7:32:51:79:8C
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019E30721CE9D8145BE3B9B491FE75247E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number: 1917
Signing time: Sat 16 May 2026 11:00:45 +0000
Manifest this update: Sat 16 May 2026 11:00:45 +0000
Manifest next update: Sun 17 May 2026 11:00:45 +0000
Files and hashes: 1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=)
3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
6: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
7: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: 3W2oCcf8j4UhA/TsqyzBIEssxERBszAG6cjZRdHcW1c=)
8: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
9: HdGHnGCkN60BBCoXO82KCD8KQP8.roa (hash: z19vVo7hZRhugrpovSRveacrmaNy4ZTI7h7Sd6ab6rY=)
10: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
11: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
12: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
13: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (hash: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw=)
14: i-N27op-z7hkiqBEGNqq-kz27FM.roa (hash: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0=)
15: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
16: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
17: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
18: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
19: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
20: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:1c:e9:d8:14:5b:e3:b9:b4:91:fe:75:24:7e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: May 16 11:00:45 2026 GMT
Not After : May 17 11:00:45 2026 GMT
Subject: CN=fb2660af25165ec44a883c86a92f65b73251798c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:7d:b6:be:4a:1f:a3:e6:32:06:f5:ff:ff:
23:94:84:f4:29:76:54:15:b2:60:fa:92:e7:c5:69:
d2:37:d9:3c:79:5c:11:10:68:30:3a:98:30:12:2f:
4b:d6:a3:22:39:45:da:25:2f:44:f4:a3:6b:75:27:
82:d9:75:a9:db:2f:3e:5c:b9:d6:8e:fe:a4:bf:6e:
92:26:8d:9b:87:61:d0:4e:d4:13:45:91:ab:f8:ac:
ce:69:0f:d6:18:8f:0b:d8:56:4d:b3:56:24:bb:0d:
db:7f:8d:48:09:2e:dc:ca:81:1a:c8:42:d0:d2:a2:
53:df:1b:a3:49:5c:1c:6a:79:a0:55:ce:0b:e3:c7:
b5:34:7c:fd:09:c3:99:76:2a:d2:fa:ed:7e:3b:34:
8e:04:d9:5a:c2:0c:22:a0:17:d2:f5:9a:a6:9c:1e:
0b:76:b6:d2:c8:25:e8:a3:57:57:60:c8:12:36:d8:
8f:20:7d:f8:6d:9a:c0:ea:73:0e:16:f9:ea:b9:1b:
78:cc:e6:d3:15:90:25:d9:87:cb:39:e0:c9:15:82:
16:55:32:4f:ca:ca:72:5a:be:6d:c8:d1:b0:5e:4a:
5c:a1:dd:05:40:68:0f:af:54:bc:fb:4d:bd:f1:e9:
69:ba:b8:61:c2:18:8f:1f:de:b5:46:69:4f:e3:a1:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:60:AF:25:16:5E:C4:4A:88:3C:86:A9:2F:65:B7:32:51:79:8C
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:55:03:ed:c7:0e:41:ec:85:e2:e1:e7:82:a6:9a:05:92:ce:
dd:05:99:8e:25:b6:00:0f:94:2a:f8:c8:8b:db:df:d1:ee:0e:
c1:b1:24:c9:74:58:6c:18:fe:28:9c:ab:f4:bd:e6:11:c0:bc:
64:e4:c3:65:4a:b3:ea:b5:60:eb:29:52:82:4e:c0:8a:f9:f9:
cd:cf:f3:df:5d:92:f6:8a:21:aa:41:07:41:f6:9d:76:0b:a3:
57:2b:d9:b0:a8:cc:55:65:06:ae:e1:52:97:cc:9c:2e:db:15:
52:5b:42:9c:27:3b:dc:53:4e:52:5a:7f:f7:26:93:52:5b:91:
f5:0f:9a:bc:12:ee:15:ec:1d:d1:a5:c5:67:90:7a:2b:a9:60:
8f:9f:5f:8d:b1:86:31:70:a0:ce:21:4d:db:4c:4b:f8:d3:1e:
f6:4a:f3:d2:fb:80:7b:4f:69:19:eb:fc:b2:5a:6c:7a:28:2c:
01:a1:23:b6:64:58:46:8f:e7:43:1b:b3:c9:9e:08:96:a0:4e:
97:d1:17:ed:76:15:b2:3f:7f:9a:29:43:e4:00:3a:28:93:68:
e9:53:02:bf:8e:3d:78:c9:73:6e:42:9c:f0:95:c0:49:0a:77:
5e:88:5a:18:88:9e:d2:dd:97:7c:6e:ce:b8:a5:8f:07:da:f3:
75:cd:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:20 2026 by rpki-client