Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: gUjtyRjK+DXYvkC1QsowM6jfn4YNekBc4kJ86lPUYn4=
Subject key identifier: 8D:A5:10:A7:D8:EF:2F:39:53:4A:5E:CC:90:28:5A:1B:84:8D:24:10
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 01A0D6BA44D7848A34D2FF632447AC877C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 04:02:06 +0000
Manifest this update: Fri 25 Sep 2026 04:02:06 +0000
Manifest next update: Sat 26 Sep 2026 04:02:06 +0000
Files and hashes: 1: 8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa (hash: R1f4TY4NVLDBlI4mibWng28Ip80KPchDGU+0MuMj7zs=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: pBR6LKKIqA6iZCLan8CB24wsPOKq1yEvQjV8moOwJW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:44:d7:84:8a:34:d2:ff:63:24:47:ac:87:7c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Sep 25 04:02:06 2026 GMT
Not After : Sep 26 04:02:06 2026 GMT
Subject: CN=8da510a7d8ef2f39534a5ecc90285a1b848d2410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:a7:c6:2c:37:59:da:47:f2:91:09:5d:f8:
c7:24:04:77:b9:62:e7:f0:89:fe:b8:ea:1e:ab:55:
df:38:2c:5b:55:9e:48:17:91:d9:75:58:89:81:4d:
d1:53:87:02:90:85:61:65:50:c6:e4:c6:a9:4d:7d:
ee:de:12:9e:40:79:ff:6f:02:a2:8f:61:30:5f:80:
f5:13:ca:30:e4:92:91:58:8b:98:76:4f:c9:b2:de:
41:cd:d4:eb:a1:84:98:34:7a:fb:5c:99:fc:a7:d8:
59:fb:7f:42:03:cf:8d:52:eb:c3:d2:3c:f6:ab:58:
ad:cd:f2:64:b6:17:ee:64:2b:c8:01:ea:72:ba:62:
54:a1:3d:52:79:a0:b3:c9:f3:ed:b2:33:ca:7d:aa:
53:c4:39:f8:71:1a:bb:81:b4:9a:f9:8c:58:c6:ea:
4a:80:6e:61:49:b0:25:fe:1e:35:61:fe:9a:d9:f2:
a1:09:9c:c7:a5:e5:24:c2:8a:f1:30:8f:63:1f:06:
28:c9:62:50:56:e9:6e:ad:b8:3e:9a:28:26:90:dc:
d9:68:cf:68:3a:c3:bf:26:94:f9:2d:4c:a8:1b:d1:
21:a3:eb:fe:7d:90:c5:dd:03:1c:47:c8:9a:0f:b3:
78:54:b4:68:20:42:88:4f:0e:b3:95:ff:f3:6a:3b:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:10:A7:D8:EF:2F:39:53:4A:5E:CC:90:28:5A:1B:84:8D:24:10
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c5:f3:b3:32:46:28:7b:e9:46:d3:0e:4e:71:9d:cb:4b:fb:
13:fc:c0:4c:31:d1:a9:83:f3:de:7e:50:88:4b:38:1c:21:60:
bf:9b:53:12:bd:78:8f:8b:aa:db:04:53:bd:69:a4:9a:6f:c0:
c7:cb:45:2f:27:03:96:74:aa:e3:b9:03:93:d5:ec:65:d4:c9:
8d:72:cf:45:ff:b3:3e:52:99:cb:cd:ec:7c:0a:c8:42:05:71:
b6:da:48:e4:14:11:5d:59:fe:e3:11:eb:fc:72:76:e9:46:14:
29:f7:7a:c7:46:81:a6:10:89:65:35:70:d5:d0:46:80:d2:e7:
af:36:01:bc:2a:9a:fb:08:c2:13:82:07:15:56:7b:22:b3:79:
44:a8:58:96:1a:d2:ff:9b:56:de:48:fe:55:e7:04:95:40:2a:
56:98:af:03:c5:e6:82:d1:0f:3c:75:86:c6:27:a7:07:54:2c:
ac:88:10:56:43:c3:a3:37:dd:27:34:c7:6e:3e:85:01:96:fa:
fb:2d:5b:0c:e7:47:dd:22:11:65:f1:a9:5d:da:d8:79:a6:60:
5e:57:01:ba:ab:bc:26:81:68:27:a9:a2:b0:c4:b6:22:b5:fe:
dc:53:d0:02:f3:7f:f8:a4:01:70:0d:ca:5d:98:30:2e:65:6d:
df:35:11:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:21:16 2026 by rpki-client