Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: kLVmgntONo76XS9jZMRPoBJD/eScGoZm27Alt+gIp8s=
Subject key identifier: DA:54:8E:EB:5B:84:BC:2A:0D:5C:74:D3:E0:9B:89:0D:06:10:31:58
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019F17F9BDD26DDCBAEDF79330EE1E5A5FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 18CF
Signing time: Tue 30 Jun 2026 10:01:10 +0000
Manifest this update: Tue 30 Jun 2026 10:01:10 +0000
Manifest next update: Wed 01 Jul 2026 10:01:10 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: DelTCNNH1HStcXW2pzj2rZv0crB9jcwpP+hSlBZL6PU=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:bd:d2:6d:dc:ba:ed:f7:93:30:ee:1e:5a:5f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jun 30 10:01:10 2026 GMT
Not After : Jul 1 10:01:10 2026 GMT
Subject: CN=da548eeb5b84bc2a0d5c74d3e09b890d06103158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:b8:3c:ae:65:39:30:1b:2b:98:76:16:08:
02:33:66:9d:1b:46:44:e3:e3:f0:d0:bb:41:50:d4:
61:5a:ae:de:56:64:2b:fd:14:af:e8:d5:90:6f:6b:
b4:74:93:ce:74:cd:70:a2:5d:44:4b:a7:67:17:54:
70:78:1b:b7:3c:20:cd:53:2e:42:60:95:2f:bf:ee:
3b:97:9d:04:a2:46:ba:a4:cc:d7:b5:a9:24:b9:81:
f2:c0:17:08:71:3b:08:45:0e:4f:26:4f:4a:29:29:
19:8f:67:9b:27:9e:02:cc:29:42:9b:4c:83:9c:4d:
8e:2e:fd:42:fe:59:c6:b3:05:8f:13:73:36:08:2c:
e3:6d:3f:da:93:dc:b6:69:72:17:2f:33:0e:10:52:
61:3f:25:96:99:58:84:19:1a:f8:a3:c6:c1:f6:74:
7e:47:47:2d:d2:70:8a:b0:80:6d:e3:92:1b:fa:c3:
54:90:a4:fd:be:f6:0d:9b:af:89:01:75:f4:0c:b3:
44:bf:74:4c:0f:48:6f:3e:ed:48:c6:b2:4c:32:58:
29:d0:9d:0c:98:5d:95:ff:01:24:39:92:4e:56:78:
7f:84:e2:1b:ed:c3:b0:fb:07:ef:b7:56:23:9f:83:
2f:73:ad:36:8d:c8:e7:4a:99:7c:f1:bd:94:22:02:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:8E:EB:5B:84:BC:2A:0D:5C:74:D3:E0:9B:89:0D:06:10:31:58
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c4:f5:c4:3f:0f:1b:a7:45:d2:59:80:21:1f:6f:a1:1c:ee:
11:5d:68:9f:45:a8:63:36:0a:86:c3:00:7f:a9:48:04:37:ca:
19:f4:32:46:b6:cf:6c:b9:4f:91:08:fe:03:14:ba:b3:5f:b5:
90:08:56:94:e4:90:58:15:37:78:e8:7c:d5:1f:fe:68:7a:c6:
eb:ce:0e:23:48:b6:bf:7f:3c:56:e5:76:7b:40:86:b8:5a:06:
85:5c:56:5e:b8:f9:99:e4:21:fc:13:11:f1:94:51:f4:43:9c:
45:75:b9:74:f1:58:2b:ff:73:10:5c:09:56:53:29:fd:07:dd:
ec:15:20:e5:8e:1d:c3:3d:50:66:c7:cb:f8:f3:3a:70:90:1b:
62:7e:8a:d6:71:d0:74:2b:f7:42:c3:08:96:b7:c5:62:ef:b2:
36:b9:cb:92:58:f5:3c:66:3b:42:11:06:ae:96:54:00:a3:a8:
e8:56:8a:cc:67:6f:f4:c4:77:55:3e:d2:17:a7:13:8a:1f:8b:
5f:36:d0:18:e9:07:fe:5a:c4:27:da:eb:a9:82:f3:7f:91:57:
6c:5b:9d:f7:ee:1d:bd:61:bd:3d:8d:6c:a0:b4:36:61:67:24:
18:1e:1b:e1:c5:98:fa:ba:cc:56:c8:8f:1f:69:59:e9:5e:d4:
e8:26:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:15 2026 by rpki-client