Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: o9jWVDNuznVPXIohATNaMlmDdgXElSTtnc+3yhxb6g4=
Subject key identifier: 37:D1:D9:35:66:89:55:47:62:D8:44:F6:6D:06:FD:BE:3D:A6:08:7D
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019E1DC760330993A701027DD89B206FFDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 20:01:05 +0000
Manifest this update: Tue 12 May 2026 20:01:05 +0000
Manifest next update: Wed 13 May 2026 20:01:05 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: RJmqMfyZ9qgbqMRSYAZs8sVGloshZvobJymB4rWbAs8=)
2: c57QPKVrulqe_tqOAQiAMnzGNHY.roa (hash: hBy4NZPhmcsKXhRSeI2d9E/JnPVdvroDZRs5OxnQU4k=)
3: enheJsXMtTxgm2wRND7dJgv8cak.roa (hash: C3fYygAIlGdruBbPXDLy8TVW2TRb7yeOUTAGkUC/fmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:60:33:09:93:a7:01:02:7d:d8:9b:20:6f:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: May 12 20:01:05 2026 GMT
Not After : May 13 20:01:05 2026 GMT
Subject: CN=37d1d9356689554762d844f66d06fdbe3da6087d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:2b:d4:6d:5e:43:16:ca:62:d9:3f:38:60:
31:bd:72:60:95:65:9e:76:ff:e2:fd:e1:7d:df:cc:
3d:68:be:f6:f4:01:61:c4:f8:b1:7f:32:cd:2b:dd:
6c:a8:53:2d:58:bb:b3:da:f3:42:4a:8a:90:ac:19:
9b:2a:55:ac:c4:cf:d4:c0:20:1b:53:bd:f7:3a:de:
e6:b2:e7:c6:e7:4c:68:56:74:0f:cd:95:91:a0:1c:
20:d1:40:8c:6c:41:fd:72:20:e6:fd:c3:a3:ec:73:
b8:a3:94:20:ef:dc:fe:46:86:31:bc:80:fc:db:00:
8f:b5:5c:1e:28:f9:a2:7d:5d:68:7d:a4:bd:42:f9:
70:e4:97:73:74:56:e9:c9:14:1f:89:78:aa:bd:24:
5b:db:76:c1:47:8b:18:4f:94:33:33:1d:68:ce:93:
21:19:5d:14:d9:c7:28:44:f5:a6:90:01:da:ea:7c:
09:ad:d1:47:06:e7:fd:66:7f:91:f9:26:2f:29:55:
39:69:be:0d:ec:92:1a:88:e3:20:f7:82:3b:66:9c:
26:65:44:e1:8c:95:83:c7:52:ae:cf:27:bc:19:a4:
90:a0:94:01:8c:f1:ed:4b:4b:6b:36:01:bb:5c:b2:
ab:87:c3:27:2c:06:e2:bf:50:71:f3:4c:e2:c5:35:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:D9:35:66:89:55:47:62:D8:44:F6:6D:06:FD:BE:3D:A6:08:7D
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d9:a5:66:f6:57:6f:aa:b6:91:1a:92:29:5c:bf:0f:52:e0:
c2:21:ca:6c:28:d4:12:da:64:76:26:68:a7:ab:2d:fd:db:73:
88:09:19:be:cb:84:0b:b5:42:98:cf:9d:6e:6d:73:72:85:d1:
2e:48:42:d2:0b:50:20:68:fe:89:fe:1e:8b:26:d9:27:c4:52:
12:8f:c4:02:9c:d3:88:8f:c4:b5:2b:44:db:ae:4d:71:30:62:
ee:03:5a:44:e7:2b:2e:48:3a:10:7f:db:c8:e5:49:73:86:8e:
2b:67:c4:c1:3e:3f:af:d4:39:e4:c5:a4:bb:79:8f:6f:80:7f:
77:51:30:c5:da:3e:8c:25:dc:d0:b0:e1:f5:5a:98:8d:cd:27:
8d:a9:97:9c:20:6e:19:2c:09:73:1a:59:99:c2:2c:bf:cc:19:
57:68:d7:6b:d1:5c:c1:16:2f:9f:57:5e:84:e5:f9:e3:9a:14:
04:69:f0:1b:69:69:3c:40:48:1f:45:df:80:59:74:01:29:06:
b6:ce:11:fe:a1:77:38:ab:e1:88:5f:53:c0:ff:15:47:26:cb:
64:e4:5d:0f:51:d1:9d:04:26:5a:26:c1:56:15:42:c0:d5:31:
05:49:09:7a:0a:c4:71:7f:d2:04:9c:ce:e5:3a:2f:28:f9:42:
7e:55:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:07 2026 by rpki-client