Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: YUhYocuIX6TcIksyp7Sd/7P6b7dlYiLv3dKbs4uYsWA=
Subject key identifier: 2C:68:1C:B3:83:E2:62:A2:1F:AD:D8:84:BE:68:76:39:96:E1:C8:7A
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019D26962E11B011716E712F5923F064C7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: KnhAtC9IpEoeNrtBqkFwzxECrOR+7+rnd1W3rBcy1cw=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2e:11:b0:11:71:6e:71:2f:59:23:f0:64:c7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=2c681cb383e262a21fadd884be68763996e1c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:b9:b7:e9:6e:48:a7:53:6c:c5:68:1a:50:
fa:96:3d:a0:58:b6:1c:ea:6a:cf:c3:3a:ec:73:fa:
3e:f8:55:76:61:6d:99:78:77:04:ba:ae:1d:c0:8e:
f8:b8:37:07:28:0e:a9:de:e0:76:b1:0d:bb:a2:07:
f6:24:bc:3f:09:61:5b:72:30:6b:41:4f:2b:8f:df:
1f:ce:44:45:59:72:f7:77:9c:36:9e:d8:4c:8b:f8:
77:60:66:32:61:aa:59:66:9d:e5:dc:71:6a:34:0c:
41:68:b3:b8:cc:50:97:f2:17:c1:c2:27:01:6b:39:
6f:c5:fe:3b:59:43:c8:fe:0b:60:ac:22:91:cf:f8:
60:a5:9b:2d:9c:e3:eb:a3:b9:8a:b0:73:b5:8c:8e:
03:fa:9f:67:47:4b:76:11:e7:8e:8a:85:77:b2:87:
57:6e:ef:06:a4:cb:f8:28:33:ce:12:73:21:8c:98:
c0:54:2b:9b:3e:55:13:8d:a6:72:bb:5d:e3:55:f8:
26:7c:7e:7d:4b:14:11:3c:03:30:a5:18:49:9b:fa:
3f:fb:7e:c3:f0:27:87:b2:6d:0f:08:a4:a8:99:b9:
ce:63:ac:46:76:4a:f0:93:00:39:6b:62:d2:dd:54:
01:d9:ed:30:5c:0b:f8:46:58:15:bb:f2:21:1c:f0:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:68:1C:B3:83:E2:62:A2:1F:AD:D8:84:BE:68:76:39:96:E1:C8:7A
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dc:e2:38:b5:e4:92:d0:09:ee:77:79:0f:85:ef:1f:02:27:
0d:73:b9:be:4d:66:00:7b:dd:5c:4b:39:c9:e7:c7:8f:d0:54:
39:98:f1:46:f8:c9:af:df:7e:fb:ab:09:82:cd:3c:6c:a6:90:
84:7d:32:2b:91:01:87:e6:36:09:ab:f2:b0:7f:00:fd:71:4f:
ac:80:f1:2b:88:13:5a:e6:8e:33:9b:cf:3e:92:f5:9d:0f:f5:
6b:ec:05:2e:8e:3e:6b:4c:b7:d3:28:9c:07:e7:ea:63:e4:b2:
e4:52:6a:37:7a:5f:38:1b:2f:f5:71:aa:9d:c5:cc:40:e2:1a:
39:66:76:b8:d7:12:ea:43:5a:38:8c:6b:37:6e:29:65:b6:c6:
f4:9e:58:1b:22:36:fc:8a:26:52:8c:e8:45:11:9f:35:65:2e:
24:c2:80:90:fd:c2:c5:50:63:24:cf:a4:4e:7a:15:97:fd:81:
ca:b1:04:8d:73:f0:c2:c5:78:7b:c9:82:ba:ea:c4:b5:15:68:
6e:af:60:2f:59:d7:4a:74:0e:a9:fb:8e:b7:9a:0f:ab:ee:09:
6f:ca:b8:f1:7c:12:06:2e:0f:d8:11:7c:a8:3f:6b:aa:93:58:
ef:b5:91:eb:d6:69:03:3a:aa:32:a1:2c:c7:10:65:de:b9:cf:
e2:d1:13:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:00 2026 by rpki-client