Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: Q+CUl5IEps3uIdtYlZBIEUxur/onCGfpzi+FC23/WTc=
Subject key identifier: 2E:DF:B1:49:B0:9E:F9:B7:D7:4F:6C:A4:8D:EC:68:76:E9:70:98:FD
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 01A127306375ACE14A35FDCAA25DF7A785A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 19E0
Signing time: Sat 10 Oct 2026 19:00:44 +0000
Manifest this update: Sat 10 Oct 2026 19:00:44 +0000
Manifest next update: Sun 11 Oct 2026 19:00:44 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: zicmcIw3CsIUYKlzKny2hT8+HQjglyJ7uJDJh+hIqbE=)
2: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (hash: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:30:63:75:ac:e1:4a:35:fd:ca:a2:5d:f7:a7:85:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Oct 10 19:00:44 2026 GMT
Not After : Oct 11 19:00:44 2026 GMT
Subject: CN=2edfb149b09ef9b7d74f6ca48dec6876e97098fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:b3:7c:2c:1a:65:2d:4d:4e:ec:5a:3a:39:
d4:47:35:3c:a0:eb:8a:45:28:f6:e3:70:8f:4f:5a:
04:89:3d:a2:a1:de:cf:06:ef:4a:b5:d2:41:b4:b4:
00:f2:5f:bb:eb:ba:95:cf:f7:13:67:61:79:dd:9d:
b4:37:19:fc:f5:15:a5:eb:89:f8:4b:5b:d1:92:19:
10:f1:0f:e5:2e:5d:da:5c:b6:ad:9e:2d:41:68:7f:
f1:4f:ed:96:1c:0d:b7:d9:6f:f9:19:c9:e4:ee:48:
71:9b:34:41:58:70:64:64:21:1d:fa:fa:e0:20:d0:
cb:cd:4c:de:ad:fa:f2:5f:c8:51:49:57:b1:24:53:
9e:d4:97:41:40:28:34:16:84:f6:01:cc:86:67:e9:
ce:53:63:da:2a:86:23:60:c0:99:ce:46:ee:d9:55:
cd:a8:ed:d0:21:e3:a4:ca:1e:ca:fd:3c:1c:19:90:
e0:04:7d:4b:d3:70:26:3b:a4:d1:74:41:d3:65:76:
ac:ea:d2:25:95:00:7a:f2:a4:29:21:da:3f:4b:b8:
8c:c9:e0:e5:a4:68:62:bc:bf:49:06:12:88:0f:25:
5b:c0:cb:b7:e2:2e:b5:6c:0e:b5:ac:70:ae:85:22:
12:fc:bb:a1:8e:9a:59:3e:87:2c:93:c8:ec:df:48:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DF:B1:49:B0:9E:F9:B7:D7:4F:6C:A4:8D:EC:68:76:E9:70:98:FD
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4f:f2:a6:66:ad:6e:17:ef:d0:e4:f9:79:a9:66:2e:38:d7:
c4:42:dd:41:af:a6:2c:d4:e0:76:fa:ee:4e:e0:e5:79:23:5c:
d0:78:42:ce:cd:a7:88:74:4c:f6:50:73:e3:79:6a:c9:b6:d9:
1a:b5:98:26:bc:33:62:b6:dc:74:65:30:77:76:6e:07:8a:17:
7a:2b:2e:a4:b3:44:f3:a5:08:02:77:e0:26:e6:45:16:59:c9:
50:0e:8f:30:95:ee:20:77:74:c1:b4:7a:ee:50:3d:c4:1f:44:
b1:f4:b2:e4:0f:a0:c6:18:46:43:4d:68:57:5e:4b:9a:7a:73:
7c:69:b6:c9:26:3c:04:1c:5d:6c:fe:cd:e8:eb:95:8e:e1:2b:
c6:d4:bc:fd:22:9a:9e:52:92:15:e3:a7:e2:86:fd:5d:e1:ae:
10:e1:b0:95:a6:6b:bd:04:81:ae:e2:44:cf:3b:04:9b:0c:e5:
6e:a7:1d:43:28:e0:06:d9:04:37:5f:61:54:82:9a:e4:67:49:
7b:19:22:b0:9f:4f:55:75:7b:9c:e2:4b:80:b5:dd:5e:b8:09:
bc:3b:57:f4:93:42:a9:2a:8a:26:2f:e9:f9:99:8d:86:49:90:
ad:ac:ab:7a:a5:5d:63:6e:d6:a6:5b:75:88:05:37:0d:ce:5d:
a0:18:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:18 2026 by rpki-client