
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier: XoWQtgMDigx6VvMQHUtf4cA4SYufE3nxSL0+4O1coyQ=
Subject key identifier: 82:6B:9B:9A:BA:43:12:C6:73:42:E0:E4:9E:2D:F4:DB:72:65:11:82
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F18E00CD204482C9C1890CFE286D8EA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number: 199D
Signing time: Tue 30 Jun 2026 14:12:43 +0000
Manifest this update: Tue 30 Jun 2026 14:12:43 +0000
Manifest next update: Wed 01 Jul 2026 14:12:43 +0000
Files and hashes: 1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
2: 1-Xo9FBNnt6IQf3DHY6l6FVVs9Io.roa (hash: 1M61p2hW3Z5J+kUgHhY13ljWHOQiC4BFBkjaF/siz74=)
3: 1jcNY5626hnNOCnMu1sTaGQ4WDA.roa (hash: c+tE0o6eIUl6HySh+TrLE9b5fSY7RiC/BC34enLyUb4=)
4: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
5: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
6: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
7: 5qh2tODDhtwENDRfaT7pfg4gTVY.roa (hash: nwGFbxvUeZsX9HZPbhOrGCLXNcXayzcMWJpsTsh4e20=)
8: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
9: BIG6nBuxQiXzo3A8VVUzmGCYUXg.roa (hash: fzvbtoojQe9O9HxvUDJgqzSsNS0LqxyijfXmKyO6zrU=)
10: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: pkxP80FeWflwi0F7Y0y2PQ1HxlYMIGmBkm+h43iRvMA=)
11: DNfeT75YIWg_GiEYi0OXwXzVsCE.roa (hash: p373o+Uf7zsdGjZbtQi0QVhe/Loppcgzl4NraszftMQ=)
12: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
13: EcVCYTCFbfuctisOnGpTpzze87E.roa (hash: AvUy4CNenHZ3+B409HhzJ1fMxMdjTbDHUphzokd1e30=)
14: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
15: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
16: U6dLDAejvUgnq5aOMEIUtrBzTBk.roa (hash: 2dgujFoVBvo9HpAJXnhdci16ozuiz9TD8/Uw/FW7qg0=)
17: YEhHyM9Ex_KKekH5VjBr3VxK3LI.roa (hash: uHnqXRv4X7k9WzE3QaUtv9JAv+AdztfPp846F5lhQ3M=)
18: YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa (hash: dMA7bJ3qBQAVvVANJ6N/cwoY5Mkkyuwl6eF8ht6OLk8=)
19: bpliBHQf1srTQdHcoNbSYzum3iw.roa (hash: MnV3pxRWCN85TFBKQGOedJbS7vH1cW3AnKuxQi66K04=)
20: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
21: eL3BOW3R9YF4NTYszpn-G4GicXE.roa (hash: eWdcg/wUnlcSSTHz0FoI6XetkTNSCLoEjSq0/aIE4N0=)
22: jHRwpwBbX-lEZAQUaNVhGoh4-38.roa (hash: 1wDI2XXXth808yD9Qxe5ic1fW+GBw0yvicdO69uEWKs=)
23: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
24: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
25: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
26: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
27: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
28: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
29: vYkoROpPCpTSAMpNJRxV38Xmb-0.roa (hash: IjyyO7EqFV9D2XeO1B6G5digiIuYSGK9sOSKLCrfBvA=)
30: vqM1TGLYbSuutfsH5sUFzk_Op_Y.roa (hash: JH4Y1aePxRVSkXzwEy2asQC4OWTRrATFM4PfgjHMeRk=)
31: xKPCZLn5NBwKOnGfN6Jfm7bqVhI.roa (hash: MULPMSCgu1soomGcBhyo6KncDRQ60sADMNncZpDFSk0=)
32: xikanlTZ0v14vJNsgTM-bs_TrVo.roa (hash: k8yL0zUwcHmo1s0l7jrHP/AK6MnJoFmCKEGJzsiquWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:e0:0c:d2:04:48:2c:9c:18:90:cf:e2:86:d8:ea:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 30 14:12:43 2026 GMT
Not After : Jul 1 14:12:43 2026 GMT
Subject: CN=826b9b9aba4312c67342e0e49e2df4db72651182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:4e:89:16:1e:0d:9e:0d:38:b0:ae:5e:a4:
dd:11:70:d8:60:6b:7c:55:aa:42:67:0e:2f:3c:ed:
7c:58:45:55:02:91:0c:93:85:f5:83:af:d9:59:84:
f8:4f:2b:c5:74:31:07:bb:34:d4:50:4b:7f:c5:9f:
74:47:bb:8e:78:66:3e:cb:f4:27:2b:ad:cc:d2:86:
41:56:d1:e9:03:24:31:20:5e:1e:2b:3b:76:0f:a2:
6b:60:ab:91:25:cb:ee:92:7e:f5:09:25:46:39:41:
fc:1b:d0:a5:bf:6e:e1:2e:0d:89:96:b6:7f:76:b8:
23:07:18:8a:7f:88:fd:8a:54:94:09:37:ee:c0:fc:
7e:16:41:d3:0f:6c:69:3d:83:4d:00:95:58:17:2b:
36:2d:8e:c2:bc:be:50:c9:6e:04:59:48:8d:19:20:
8b:58:f8:06:c8:32:b1:dd:6e:0b:b0:22:29:e5:89:
84:7e:79:af:eb:3a:97:ab:34:a3:37:cb:2d:ec:a4:
a0:33:a0:70:4e:d0:0d:cf:9c:29:16:5c:fb:62:63:
cd:f8:f8:94:10:98:58:35:dc:2a:28:de:06:e3:e4:
de:ca:cb:4f:34:b8:4b:09:4d:26:0e:bb:4f:83:45:
02:40:fd:04:9c:80:38:b4:08:6b:6d:54:52:3b:0d:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:9B:9A:BA:43:12:C6:73:42:E0:E4:9E:2D:F4:DB:72:65:11:82
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dc:fe:c0:8a:3a:6a:5e:18:84:26:35:ca:45:cf:18:fe:8d:
c2:23:ce:96:3e:47:5a:71:ab:b7:07:13:ee:ff:ef:7b:2d:2b:
51:49:0a:7d:61:41:94:2a:49:d2:36:4f:20:13:f5:9e:69:75:
eb:94:70:83:2f:a3:66:ef:b4:9e:fe:4d:ee:fd:b4:0c:78:a5:
82:85:a2:74:39:95:24:f7:66:67:a5:e7:7c:2e:34:f7:2c:e2:
af:d5:c3:f2:db:c9:27:d7:7e:24:92:55:54:3e:92:69:1e:28:
c6:51:42:49:3d:c6:78:e1:f9:68:01:2a:cc:d6:b4:cc:a1:1c:
8e:ca:7d:7a:bd:55:be:f0:c7:fa:e3:a3:93:93:54:3d:ba:d4:
33:8b:c5:84:6a:36:67:73:6a:1b:f8:de:fa:fd:88:18:3a:df:
b6:36:7a:dc:b6:21:fd:53:9c:4a:a0:ba:7b:59:ab:1a:fb:11:
58:e6:99:78:01:7d:f8:51:2c:e0:6f:bd:49:fe:67:de:46:b7:
1b:9e:cb:2e:e8:fe:c5:5a:e8:ee:1d:b6:af:44:93:fe:f0:5d:
fb:bd:b7:66:cf:d7:71:0d:36:49:fa:43:33:17:e8:97:b2:0c:
a9:95:7d:2f:78:23:96:c7:5e:6a:42:24:dc:98:6f:d8:a6:d1:
d8:00:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:37 2026 by rpki-client