Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: rATsMl/nXU/qIdJ2j8Pr1i6X7CfENdY9/yAogmm1o9E=
Subject key identifier: 89:13:26:41:CD:72:2C:B6:EA:CD:6F:26:91:04:B7:39:68:B1:FE:A3
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019F9090F24D977938889CC02B706147BC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 20:00:46 +0000
Manifest this update: Thu 23 Jul 2026 20:00:46 +0000
Manifest next update: Fri 24 Jul 2026 20:00:46 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: FmVR5yJ/GBK7RKJpibJbPJQZANMELWroBHj24H0Ohvs=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f2:4d:97:79:38:88:9c:c0:2b:70:61:47:bc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Jul 23 20:00:46 2026 GMT
Not After : Jul 24 20:00:46 2026 GMT
Subject: CN=89132641cd722cb6eacd6f269104b73968b1fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:42:1a:c9:73:56:45:f5:f7:c1:09:e0:0e:
7a:eb:eb:8d:c1:3f:da:22:c0:dc:99:e1:b8:ff:dc:
a6:23:66:15:ee:d5:ea:82:4e:b5:a9:9f:99:15:83:
a0:70:92:37:9c:62:6e:bf:e4:c2:3f:e4:ec:47:87:
ec:14:61:0b:7d:22:ba:69:64:25:a2:ba:91:65:ab:
d4:c6:c9:af:14:da:da:05:1b:9b:5b:e2:5a:c6:95:
8b:08:ae:c0:62:dd:59:ad:c4:b7:a1:95:f1:dd:2f:
67:1a:6e:55:f3:20:9d:b0:ea:31:2b:dc:4a:a9:72:
62:c1:ef:48:6f:e4:69:67:47:3f:cb:cc:86:61:67:
20:2e:98:87:14:5d:fb:9f:38:c0:1b:5a:46:be:c4:
ed:e0:cb:37:cd:ea:1d:4f:95:58:2b:66:50:fb:4e:
d9:e0:e2:d1:89:d2:9c:f9:35:74:d3:d7:69:78:1a:
87:6c:61:97:3a:bf:73:e6:60:d0:0d:90:a9:60:78:
e1:29:ba:77:98:c5:10:43:af:da:06:c6:70:bb:78:
15:fc:0c:f7:3f:fd:85:54:e7:14:c5:82:bb:68:ce:
2c:13:6f:40:3f:a3:6b:11:13:5c:40:2e:d8:ad:aa:
e0:6b:34:4b:98:84:7a:0d:8c:73:b3:bf:5e:ee:4a:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:26:41:CD:72:2C:B6:EA:CD:6F:26:91:04:B7:39:68:B1:FE:A3
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e7:97:82:8f:b5:ed:a5:61:d2:d4:e1:f6:da:c1:eb:c4:fc:
53:0a:7d:e5:b5:46:1c:b5:52:af:2f:3a:93:72:b0:60:66:e1:
bd:64:50:3c:8d:3a:f0:19:e4:2d:91:64:4f:8f:25:25:00:ed:
29:59:ed:44:df:30:d7:24:91:18:fc:2d:b9:95:65:0e:4c:35:
27:5d:54:80:42:a5:49:2d:44:6b:a5:2c:82:b0:74:a7:72:ec:
51:ea:44:32:95:b6:df:c2:d7:ac:dd:64:6d:a0:ac:29:3b:b4:
12:a3:87:71:b7:d6:d9:7b:29:ee:06:be:b2:0d:9b:be:ad:69:
ff:99:ba:13:98:66:7f:1c:09:e6:ff:fb:ef:d6:09:06:4f:b2:
d4:67:e0:78:e8:68:aa:ab:1e:91:9a:e6:d0:24:cd:ff:93:9f:
db:42:b8:8a:63:5b:06:0f:f2:7d:bb:9e:19:c2:78:1b:17:e0:
49:75:74:9f:f1:c8:37:ed:21:6c:2a:6b:3d:9f:5d:67:bf:8e:
0a:ea:5d:6f:bd:03:4f:5b:f3:b5:2e:ef:96:7a:c3:87:7f:44:
4f:a5:2b:2a:01:4f:5c:7b:83:3d:86:fb:cb:0c:28:d5:8c:14:
06:ba:d2:99:f8:c7:20:39:da:fc:61:5d:4b:1f:f9:d2:54:84:
34:d1:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:26 2026 by rpki-client