Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: i6HuvBdWZ3ZOpSWW8/FD3tnqY0wsRu0uxbVp6htScR4=
Subject key identifier: 0B:23:2A:47:F0:AE:B7:2C:02:87:E8:C5:28:25:59:8C:C6:95:8B:FB
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019D371B9869D3C1E29B2AC59E08A3D5C32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 17D6
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: zKUGUz80bEm4wWgSNaXW4bC9h8gccE6Up5gs4Z8tTnk=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:98:69:d3:c1:e2:9b:2a:c5:9e:08:a3:d5:c3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=0b232a47f0aeb72c0287e8c52825598cc6958bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:7d:fe:02:31:f8:04:8f:72:81:27:d0:c0:
6c:06:35:8d:45:4c:7a:0f:94:a6:1c:c4:9b:11:85:
c9:e3:ab:52:47:6e:a2:9d:35:5e:f4:43:44:d3:c5:
35:37:5d:26:d1:ec:5e:de:88:b0:d4:18:64:60:ab:
b6:00:76:78:4d:a3:8d:02:44:07:dc:e1:7c:94:50:
27:c0:7f:05:0f:02:f3:cd:6b:5c:0b:ee:73:91:38:
3a:75:0c:aa:4b:db:e1:ef:81:6f:c0:cc:50:78:0e:
05:82:26:9c:ca:c7:85:14:61:5e:d4:8d:1b:02:b1:
7f:72:ea:88:94:5b:c1:a1:f1:4e:b4:8e:f1:8d:b7:
67:81:9e:0f:b9:42:a4:eb:e1:92:c9:14:a0:4c:86:
30:3b:9d:c2:a4:78:2d:1a:b0:a9:36:ce:06:2b:ce:
2d:c3:92:b3:eb:44:ab:c5:ec:fe:25:07:0c:9b:94:
1e:75:f8:15:f0:e2:d0:82:12:1f:53:4e:ad:59:46:
47:7f:a6:e7:5f:c3:1f:67:78:10:9e:37:2c:ea:3e:
5c:1e:c4:da:85:b3:90:75:65:86:ef:eb:17:bb:4f:
ed:d0:2c:09:45:64:ff:07:a0:85:0f:49:c5:1a:3a:
12:06:7e:70:d2:77:55:c4:38:c0:c4:c7:56:5a:7c:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:23:2A:47:F0:AE:B7:2C:02:87:E8:C5:28:25:59:8C:C6:95:8B:FB
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ff:97:e3:5b:57:02:4c:d6:f3:d6:75:e8:b2:3b:22:0b:c2:
fd:92:e7:8a:39:d5:fd:59:82:61:93:6b:ad:2f:21:4d:ab:5a:
40:69:51:4d:02:7e:b0:ba:7c:bd:ea:62:55:63:40:0b:9f:52:
7c:77:bc:87:d3:7b:9f:84:00:6d:24:27:50:18:1f:d7:b3:28:
51:88:06:fd:72:21:61:a8:1c:68:a4:e7:6e:8a:37:7b:0c:09:
80:9c:4f:b7:cc:53:7b:0c:86:1c:25:5c:fb:82:e6:ce:6b:a9:
f6:7a:63:45:9c:1d:9a:62:10:a3:6f:d0:1e:bb:9e:0a:e9:da:
0d:e3:cf:e3:39:9e:03:02:19:85:96:bc:f0:02:0e:23:6f:82:
b1:6f:38:9e:d2:57:3b:68:7c:36:91:9e:e1:19:d7:6c:80:3f:
b3:97:fa:24:eb:90:91:f9:36:93:3d:3d:51:6d:94:cf:6d:52:
c7:ff:bc:51:0d:3d:7b:4f:c2:81:24:ec:d8:c4:a1:a3:69:e7:
a4:7e:67:74:8c:8f:6e:7f:05:d5:b0:0c:1c:9a:e0:91:db:e5:
4e:0c:c1:63:71:52:a5:84:3a:12:0d:eb:2f:85:dc:26:3c:fa:
9b:c1:0a:db:14:9d:fe:49:cc:98:e0:6d:2c:7c:0c:28:d1:58:
fa:0f:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:38 2026 by rpki-client