Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: VyGPNGtQVMs+QyuLnVQq53e3Lqd8BfQDqYsqcxeqvIc=
Subject key identifier: 4F:98:4D:A3:6D:A8:2F:C8:6C:64:B0:12:C8:02:20:3E:D9:C5:51:EB
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019F905A2B7C91AADF27B71BB7235EBC9022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 19:00:56 +0000
Manifest this update: Thu 23 Jul 2026 19:00:56 +0000
Manifest next update: Fri 24 Jul 2026 19:00:56 +0000
Files and hashes: 1: 8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa (hash: R1f4TY4NVLDBlI4mibWng28Ip80KPchDGU+0MuMj7zs=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: 5vt7cFZKkhHUxHyNnkGzfpZldnWlyG0s8G6Inve1Suk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:2b:7c:91:aa:df:27:b7:1b:b7:23:5e:bc:90:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jul 23 19:00:56 2026 GMT
Not After : Jul 24 19:00:56 2026 GMT
Subject: CN=4f984da36da82fc86c64b012c802203ed9c551eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:7f:06:a9:7e:c1:16:ae:ef:0a:78:ee:fb:
87:40:56:73:4e:b7:7d:af:8c:59:67:33:7f:a2:27:
61:19:1b:ea:c9:04:59:ed:8c:11:04:4d:e5:46:d1:
5b:09:a8:e8:5f:9d:84:52:32:ec:97:1c:35:77:c8:
79:19:96:45:85:2a:f3:12:74:3f:3c:9a:95:31:0b:
c2:f3:63:62:32:07:fa:3b:9d:ff:84:f9:eb:c8:02:
86:88:ae:7c:f5:59:54:ef:ed:c6:86:57:4e:a3:f2:
65:b0:1d:1f:02:99:e7:b9:8c:e1:9a:d7:ae:a2:78:
77:e4:16:93:2a:e3:9d:86:28:2a:b0:84:c5:aa:63:
66:97:7c:15:21:c8:6c:0b:65:87:7d:1f:03:16:80:
dd:4c:13:0e:df:09:60:72:09:ae:48:c1:87:cf:80:
24:c1:87:23:29:f8:5e:a5:1e:98:fd:3f:a6:b3:ef:
88:f3:fa:75:26:3d:73:3b:cf:4c:2d:9a:3a:d1:20:
95:ff:3b:8b:7c:34:b9:c7:3a:a9:9f:69:fc:5e:2e:
ab:14:c5:28:4e:d3:7f:85:aa:c4:71:71:64:fe:fa:
60:d7:0f:7d:55:1b:7b:73:33:20:84:f4:e3:84:70:
75:f2:16:b5:8a:0e:68:dc:da:7a:d7:12:b6:c9:58:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:4D:A3:6D:A8:2F:C8:6C:64:B0:12:C8:02:20:3E:D9:C5:51:EB
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:46:bd:4a:03:39:22:54:36:f1:6c:ec:c9:7e:b6:88:ea:f0:
d8:8d:25:34:98:32:46:63:e7:a2:0c:fc:8e:26:9c:76:00:fc:
6e:2c:d3:23:5c:26:9a:99:65:e6:2b:7e:60:37:22:99:45:41:
c9:4d:11:ee:34:ff:fc:1d:7c:c8:29:66:59:93:25:fc:16:4e:
8d:07:3f:72:78:5b:8e:20:34:d9:1d:6b:1d:ff:f9:2b:1a:c3:
36:82:9c:30:dd:01:7a:e4:18:5c:56:ff:e8:f2:2c:4d:f3:85:
05:30:9f:97:37:31:1c:24:46:92:aa:43:02:8e:5d:c6:31:66:
38:38:e6:b5:fb:a7:1c:af:ab:3a:c3:71:ba:3a:c4:19:0a:aa:
b6:e7:d8:98:94:e4:7f:a9:45:31:2b:03:84:24:d3:9d:70:f1:
3d:2f:4d:a8:2d:d5:62:9c:15:5c:2e:4e:31:c0:82:c0:c1:5f:
cd:a1:fc:41:f5:33:45:4c:1e:20:35:7c:ea:81:83:a1:64:ca:
01:09:78:2e:a5:7c:74:7c:15:a1:de:5d:6a:96:9d:a7:1f:5a:
79:d1:45:a7:24:bb:67:05:6a:4b:23:1a:f6:79:a0:47:6f:88:
d6:e4:ce:65:43:ce:be:74:c9:8a:cc:f5:a3:54:7f:4c:e8:e5:
6f:19:90:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:00 2026 by rpki-client