Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: xg1G9vHTXk696vfuHB8ytjW8lHDlOFfOknUVNRCO3r8=
Subject key identifier: B2:CB:00:8A:30:1D:E5:C8:5D:0A:FF:34:98:85:A1:76:E7:00:C2:00
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 01A13E94B00B12CFC1EFA67228901FE2EB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 19C2
Signing time: Thu 15 Oct 2026 08:01:34 +0000
Manifest this update: Thu 15 Oct 2026 08:01:34 +0000
Manifest next update: Fri 16 Oct 2026 08:01:34 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: q9PUvT/qKZmRd0/1P9l0J+5I4BoLfAjqWcn8pb/T2lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:b0:0b:12:cf:c1:ef:a6:72:28:90:1f:e2:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Oct 15 08:01:34 2026 GMT
Not After : Oct 16 08:01:34 2026 GMT
Subject: CN=b2cb008a301de5c85d0aff349885a176e700c200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:a9:fc:09:c4:ac:37:b7:b7:c9:bb:b9:41:
37:16:f0:b3:ab:65:db:2e:90:1e:3f:2d:62:eb:e5:
5d:bb:f4:41:e8:24:73:c9:c6:dd:16:55:3d:1f:f3:
51:7b:7f:4e:08:7c:eb:d7:f4:6d:1d:73:aa:4f:b9:
17:38:53:f0:ba:19:26:8a:05:25:1b:49:4a:88:af:
00:05:a7:10:c0:bd:a6:8a:36:c9:21:e1:5a:9b:89:
46:85:25:04:53:52:fe:22:81:47:27:db:e8:a0:59:
4e:83:39:9b:63:6e:79:43:06:5b:e7:84:c2:a3:7d:
8e:a9:3f:79:e9:12:c9:2f:a8:53:de:10:01:a9:06:
a1:6c:0c:5b:73:82:fc:33:08:f1:73:0f:0f:33:64:
46:46:98:d5:6d:e8:27:3f:20:dd:62:a6:be:bd:09:
c4:d0:b9:dd:08:61:67:b8:47:a9:0d:03:da:26:a0:
f2:c3:14:7c:01:dc:18:b0:da:0c:b4:8e:ed:4e:05:
8f:42:53:88:bf:d7:2c:17:99:6a:95:e2:e6:dc:e3:
16:e0:4c:06:df:4d:39:ff:71:dc:c0:b7:69:65:e5:
8d:72:3d:94:3e:e6:fa:2e:9d:15:fa:8f:b5:fa:06:
cb:b0:a7:45:65:b7:42:62:65:b8:b2:bd:45:ce:b9:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:00:8A:30:1D:E5:C8:5D:0A:FF:34:98:85:A1:76:E7:00:C2:00
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:28:86:80:78:12:a0:54:91:ba:bb:78:84:e9:e3:8a:b8:
91:bf:31:04:8e:d6:7a:e6:85:7e:ee:bb:ca:6b:df:f2:1a:2f:
0e:59:71:52:5a:e5:95:6f:b4:08:4f:8b:0c:48:39:ff:9c:5b:
e0:98:ec:9e:60:fe:38:5e:42:c9:72:9f:b1:c2:a9:71:e2:36:
ee:60:24:c3:c0:07:e6:59:27:cc:2b:a9:66:de:b5:1f:09:42:
bb:99:9e:35:cb:ff:80:69:7e:ca:1b:54:ba:58:cf:b6:a5:0b:
b6:d1:88:8c:b0:23:ee:67:7e:b2:1c:ee:15:56:f6:ae:62:e4:
6a:1b:48:a2:61:5d:93:7f:0f:65:43:6e:d1:34:2f:d7:9f:fa:
3d:34:dd:9e:db:25:39:c0:50:18:cc:11:8a:82:a1:6c:9e:5c:
c4:31:7f:7e:84:25:0e:cb:09:c0:cf:03:82:5f:9b:4c:f2:c7:
4b:c5:c3:36:e7:20:90:91:d9:70:3a:47:a4:47:89:eb:b8:5c:
01:97:a7:cf:9e:ca:2a:dc:c3:0e:00:e9:55:65:94:b9:69:27:
8d:2d:da:94:08:5f:00:cd:d8:2e:ec:66:e8:33:6d:30:4f:d0:
d5:eb:a7:a8:92:26:31:c6:64:db:6c:68:da:70:fd:2e:bb:5c:
25:20:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:56 2026 by rpki-client