Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: 1VsjlNH+q3SU50RlJwfP82wdFYkGktO9DFCOYeY4yzQ=
Subject key identifier: 60:7F:64:1E:2A:98:27:8D:DA:3F:F5:11:07:5C:FA:FC:4A:62:74:F4
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019D2884AC4966E992706B461D11EA7D35A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: J88ClVkym1m4wU1Q8fXdECYOW9mf0Iggwxw1S8mqb2g=)
2: c57QPKVrulqe_tqOAQiAMnzGNHY.roa (hash: hBy4NZPhmcsKXhRSeI2d9E/JnPVdvroDZRs5OxnQU4k=)
3: enheJsXMtTxgm2wRND7dJgv8cak.roa (hash: C3fYygAIlGdruBbPXDLy8TVW2TRb7yeOUTAGkUC/fmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ac:49:66:e9:92:70:6b:46:1d:11:ea:7d:35:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=607f641e2a98278dda3ff511075cfafc4a6274f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:90:8e:37:66:31:1c:a4:7f:83:49:10:e5:
a0:61:5b:42:0a:77:2d:f7:40:70:14:c9:bc:ad:d7:
0a:84:50:74:84:e8:16:b0:f6:d9:96:d5:a4:5d:30:
d0:cc:02:7e:d8:23:82:26:ad:d5:a7:b1:fc:97:65:
7f:d6:0b:a5:9d:f5:13:91:fa:64:6d:45:b0:a2:ad:
2d:c2:d2:cf:84:b3:d3:11:d7:c6:f1:da:af:fc:f4:
75:36:fb:9e:d1:3f:9c:69:6a:f0:73:e5:e9:16:56:
6b:1a:96:27:51:05:b5:53:d9:68:b3:bb:b3:c8:c4:
25:0e:84:98:3d:be:2a:bf:14:f9:ad:11:49:ba:11:
e6:b6:52:2d:d9:63:93:56:a9:0c:86:25:42:54:bf:
77:58:56:09:e1:7f:5d:18:31:57:66:b5:b3:d2:b6:
6c:29:36:fb:43:d4:98:30:a0:8e:1e:ff:f0:9c:cd:
37:b8:d7:fc:dc:08:ca:ae:70:be:53:32:16:3a:c6:
66:09:65:3d:27:f8:e7:f0:4c:a0:8e:f1:0d:2b:6b:
32:07:26:7e:9e:3e:3f:0d:18:9c:06:9b:40:bc:61:
ca:ea:47:79:2f:4c:43:bb:f5:ab:dc:5f:dd:d3:ed:
88:5f:0b:6d:38:7b:20:f0:58:a0:62:49:bd:35:60:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:64:1E:2A:98:27:8D:DA:3F:F5:11:07:5C:FA:FC:4A:62:74:F4
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:75:e8:b3:fb:dd:d8:a4:e9:99:b3:23:3c:4c:15:8e:38:
fc:0d:04:4c:0b:e9:7b:f1:3f:30:43:63:8e:9a:3f:bf:3a:00:
9e:08:5a:27:c2:92:b9:4e:61:3a:30:c4:53:36:e5:3a:84:ef:
76:bb:36:eb:1e:22:c5:84:d7:67:b1:e1:8f:0b:88:5b:7f:a1:
29:a2:59:75:07:9d:5f:03:df:5b:a0:a0:18:e0:dc:3a:50:2b:
ad:9f:f6:37:f4:2f:5b:da:d3:1a:57:6d:fc:d7:5f:ab:54:b4:
e6:4f:17:51:28:68:4d:1e:f2:1b:94:5f:01:4e:09:4b:dd:a9:
b5:56:ea:56:6f:f6:6b:dc:8e:ed:41:e2:45:34:e2:bf:47:72:
fd:6f:9c:8e:42:58:a3:31:89:30:b5:ca:f9:33:3d:d7:ae:83:
37:84:80:42:1d:ab:9c:23:6e:ae:89:3a:0a:5c:6f:92:e2:fe:
07:ba:02:a9:88:38:04:92:35:1a:3c:78:03:ff:90:24:65:3f:
04:b6:7e:f9:3e:9c:77:93:0e:05:20:d4:ab:3b:e3:4e:6e:a1:
34:3b:7b:98:a8:0e:6b:23:ea:3a:a8:95:6f:ba:6f:0e:6d:39:
df:08:0f:35:1c:b8:7f:7f:4d:02:b1:56:67:d1:dd:f4:3c:7d:
3b:19:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:11 2026 by rpki-client