Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: GPKqpHqUBxNuVwq7KMzYVMnf2I+jCik1Il5ka7eF1AM=
Subject key identifier: 5A:91:05:B7:41:E9:FA:CB:66:A9:98:1F:E6:13:DA:F9:41:A0:C9:75
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 01A001DCB0A3F2A5A3864B042476E2B17C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 191E
Signing time: Fri 14 Aug 2026 20:00:35 +0000
Manifest this update: Fri 14 Aug 2026 20:00:35 +0000
Manifest next update: Sat 15 Aug 2026 20:00:35 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: fs04apco1ATPMKfYUSgnySN8zIkfW4oDYs4bOu2VXrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:b0:a3:f2:a5:a3:86:4b:04:24:76:e2:b1:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Aug 14 20:00:35 2026 GMT
Not After : Aug 15 20:00:35 2026 GMT
Subject: CN=5a9105b741e9facb66a9981fe613daf941a0c975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:2a:60:dd:5e:99:a7:07:c0:c4:93:4d:aa:
a5:30:20:2f:8a:33:52:3e:aa:27:ee:11:4a:cc:4c:
82:4d:63:b7:28:88:b5:40:77:ac:af:ae:81:95:96:
84:3f:41:8c:33:4c:84:93:d4:b6:72:d6:7f:bc:4a:
eb:b7:f6:d3:a1:d3:13:f3:c3:88:1d:70:f8:ad:0d:
5e:6b:e0:8e:5b:b8:3d:41:9c:c4:8f:bf:d1:32:65:
df:c8:46:16:ca:4a:05:f3:47:2e:91:e2:1b:56:ac:
ff:f1:a2:1a:d8:26:cf:fa:aa:85:aa:6c:14:92:60:
d9:3e:a6:90:63:46:7a:cf:ad:58:5b:5f:ae:a4:17:
a5:d8:b3:68:27:b1:b7:7a:e7:fb:dc:90:6d:3a:c5:
69:85:8d:27:71:b3:ec:c4:c5:bd:39:7a:aa:3b:76:
84:8b:27:57:6b:b1:1b:fc:f0:b1:2b:e4:a4:b2:d9:
e3:b3:ad:36:a6:3f:65:47:dd:e8:6d:c5:2c:0c:bd:
74:8e:22:9d:e3:23:c4:b2:de:e0:75:02:d4:f8:bf:
10:a7:bf:43:dd:ea:0d:5b:b2:64:48:f7:00:e2:47:
2d:16:08:78:98:c6:dc:49:c3:6c:6e:80:76:d8:ba:
4f:72:be:2c:8b:fd:bc:8f:44:43:61:0b:79:dd:1f:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:05:B7:41:E9:FA:CB:66:A9:98:1F:E6:13:DA:F9:41:A0:C9:75
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:13:83:0d:eb:61:1e:ee:0e:fe:1e:f2:13:c8:68:de:36:64:
45:f0:92:4a:1f:21:74:ae:59:2b:e9:35:a4:e0:ff:71:07:02:
44:36:8e:e0:67:cf:fe:8b:5c:07:97:57:db:a6:29:91:6a:1e:
68:c2:5f:5d:8a:b1:5d:43:df:33:43:d3:3f:c5:a1:ad:ae:31:
25:5a:4c:dc:6e:b1:aa:46:f5:a6:f4:6b:db:89:39:e0:94:0f:
5d:68:99:ed:c1:97:f1:02:81:4b:ff:e0:ed:d4:a4:59:23:f0:
d8:26:3a:d2:d0:ae:c9:09:60:b5:b7:03:26:f2:7e:96:f3:19:
3c:fa:d3:7b:7e:d5:7b:60:86:71:b1:80:c9:15:bf:69:dc:28:
c1:45:0c:3d:da:cd:3f:9a:70:b6:52:4a:65:56:7a:b8:64:ee:
8d:59:84:bf:16:a7:86:bd:d9:d9:2b:fd:30:ea:37:43:68:fb:
5b:11:10:ed:c6:39:3c:76:2f:0c:5c:c9:c3:f9:8b:cb:a3:76:
8b:b9:35:ed:79:51:5b:f8:bf:e6:c6:b5:9c:eb:eb:7d:ce:b8:
d1:91:ef:03:57:b2:9c:b8:9a:e5:a1:9f:88:c9:52:b7:01:e4:
2c:69:87:e1:2b:e2:e7:1a:a6:44:b3:f4:17:85:29:cd:80:b5:
bb:61:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:43 2026 by rpki-client