Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: Sn0J82eUjqbAvOVJUmUCmJoAi2IxgqUA6kWHrZf/p74=
Subject key identifier: C1:25:57:7A:FE:F5:E8:D2:10:D9:4D:26:99:D2:40:5B:2A:0B:73:82
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 01A001A63CCDDF2D9A1BEC369D28C9163EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 1948
Signing time: Fri 14 Aug 2026 19:01:06 +0000
Manifest this update: Fri 14 Aug 2026 19:01:06 +0000
Manifest next update: Sat 15 Aug 2026 19:01:06 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: hcSi5Q03Rv8QfXbZ5muoumjBNGUYK31mOPbz9Nthfak=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:3c:cd:df:2d:9a:1b:ec:36:9d:28:c9:16:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Aug 14 19:01:06 2026 GMT
Not After : Aug 15 19:01:06 2026 GMT
Subject: CN=c125577afef5e8d210d94d2699d2405b2a0b7382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:08:23:15:fc:ec:2d:c9:a0:19:1b:90:61:
59:b7:78:9d:74:74:94:8b:2e:53:b7:4f:5b:13:81:
a1:ae:e0:6f:3d:eb:1e:54:7a:44:45:6e:39:70:32:
41:56:52:6f:6d:8d:2f:1b:36:87:58:f5:5a:d6:04:
96:a6:c2:03:46:3f:df:d5:98:2b:cf:73:dc:80:83:
58:35:9e:e6:01:c1:a2:d9:f7:5d:04:c1:e6:5e:15:
29:14:3d:51:b6:85:6f:42:d7:93:ee:77:50:70:84:
2a:7f:38:63:ed:55:20:c6:ce:41:13:d6:6b:f5:b7:
00:d8:d2:ab:ed:05:cd:2f:1a:fe:b4:5a:61:5f:68:
e8:15:e5:92:50:c6:90:62:b2:11:16:d3:a0:90:10:
e6:04:6d:d1:e1:99:d1:08:6a:32:8a:81:95:84:1b:
7d:ea:01:cb:29:15:bd:7a:89:12:bd:2e:fe:9b:c4:
18:39:86:03:bf:05:b2:e2:bb:80:c8:23:68:f1:e4:
41:c1:bf:94:ca:30:e0:fc:0f:79:69:00:fb:b8:bf:
7f:2c:e7:b3:0b:31:e3:b9:19:cf:fa:95:04:1a:04:
ba:bc:46:72:90:39:9f:da:e0:1e:00:d7:02:92:ec:
85:41:9d:40:77:5c:d3:a5:bf:15:c2:e4:4c:1e:0d:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:57:7A:FE:F5:E8:D2:10:D9:4D:26:99:D2:40:5B:2A:0B:73:82
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1d:db:fb:72:7e:86:ae:8c:5a:23:e8:51:4f:e8:52:1b:80:
cb:68:24:2d:99:f0:85:21:93:80:f9:8d:d1:38:ff:fa:53:55:
ed:fe:a7:ab:52:76:8c:05:fd:7e:65:11:52:e0:fe:b6:6b:d4:
45:e7:db:d6:6e:ce:a8:03:a8:d5:4b:83:40:a9:92:69:7a:0a:
eb:ce:67:fe:82:bf:b5:26:9a:1b:88:66:66:de:3b:a3:73:d6:
0b:98:5f:04:3a:b3:98:9b:22:01:34:2a:5b:a4:5c:42:20:58:
48:5a:53:58:19:54:88:1f:1c:c8:f9:f0:75:a7:f3:6a:97:ce:
10:cc:02:d8:81:da:5c:5d:45:17:45:ea:9c:f2:fe:d8:5f:c3:
19:dc:ee:ee:71:29:7f:bb:e6:85:60:e9:8f:f9:b6:61:de:0f:
fe:41:01:8b:bb:6f:42:c8:d2:aa:16:05:a4:d4:67:2a:cf:28:
7e:bb:b5:90:77:9a:02:a0:89:8e:e7:d6:bd:3b:2c:38:dc:2b:
4a:1c:21:2d:ea:2b:04:5b:c9:22:6d:de:88:ca:10:be:06:94:
f4:83:16:fa:ac:da:92:7f:c4:88:0e:6e:9a:50:37:25:e4:b2:
64:2c:ac:8f:b7:f4:7f:6b:0f:6f:0b:a4:56:a5:55:5e:37:0f:
af:aa:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:24 2026 by rpki-client