Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: 8egOvcLFnZAx45Qpzysgm/xEjHfpVQhnsHUjqA80TD0=
Subject key identifier: 3C:AF:94:E8:06:A7:DA:32:3A:04:C1:D8:D8:F1:CE:A9:D9:B3:D1:82
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 019F9090A14097EE8CBAF40BBD1BE6A5E0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 039B
Signing time: Thu 23 Jul 2026 20:00:25 +0000
Manifest this update: Thu 23 Jul 2026 20:00:25 +0000
Manifest next update: Fri 24 Jul 2026 20:00:25 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: 5SFhMqGyIm2LYtSTtuQXBNf8F9/tAwEzIXrMQwJkm2w=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:a1:40:97:ee:8c:ba:f4:0b:bd:1b:e6:a5:e0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Jul 23 20:00:25 2026 GMT
Not After : Jul 24 20:00:25 2026 GMT
Subject: CN=3caf94e806a7da323a04c1d8d8f1cea9d9b3d182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:7e:2c:e2:4c:2e:85:71:a8:61:85:90:ad:
ea:d7:71:01:1a:f9:bc:6b:0b:0e:11:48:ac:3d:26:
b2:81:ee:64:04:f8:5f:a5:16:8a:77:2e:81:4a:eb:
52:86:68:c7:6d:12:2f:ee:df:4c:5d:d9:4b:62:f6:
90:8b:40:83:d5:02:74:c1:ab:ab:a0:3f:88:3e:37:
38:c2:fb:92:e8:64:2f:45:d5:5e:81:bd:2c:a2:67:
3f:71:86:43:b9:9a:5f:4d:61:2c:29:16:a3:d9:17:
69:8a:a2:a5:e9:6b:7a:64:05:b3:5c:aa:65:2d:f6:
0f:f8:b5:e4:d9:ce:60:1c:ed:06:0a:a2:b2:95:e1:
75:49:d1:8f:bd:a0:2e:ac:da:ed:41:ed:a7:86:50:
35:76:bc:ac:92:0b:03:f6:b6:7c:75:e7:15:56:b0:
71:b8:c3:9f:0a:86:2f:e5:32:6f:9a:67:ce:ad:68:
0a:3d:c0:c8:be:a3:b0:9b:c6:87:bf:f3:bb:52:c5:
0c:7d:2d:c7:b1:f8:48:1e:40:37:b0:64:bd:e8:a5:
28:ae:c0:31:c5:bb:90:bc:6f:c0:f9:e6:23:18:af:
fc:41:46:b2:b2:b0:54:a1:3d:0f:fd:b2:0b:5d:3f:
3c:75:4b:a2:74:a7:ff:b0:2a:1f:21:10:49:62:44:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:94:E8:06:A7:DA:32:3A:04:C1:D8:D8:F1:CE:A9:D9:B3:D1:82
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:34:69:e3:22:c8:f1:4d:64:66:9e:06:72:76:22:08:a5:63:
0b:94:ee:81:61:e9:27:4a:ef:f4:8d:1d:b3:96:b6:af:08:97:
b1:6c:15:01:f3:b1:51:34:23:cb:e9:97:86:7b:10:0a:89:69:
e5:30:6e:6b:a5:6c:e3:1c:e3:9d:43:fb:32:97:64:d0:93:f9:
f3:54:83:9b:4c:a8:fa:e9:bf:c9:2e:34:e3:61:26:6a:9c:63:
73:e2:4c:55:41:05:a9:a8:f1:08:1e:b1:bc:61:bd:83:d5:92:
84:34:4a:77:f6:75:e1:1d:c3:e2:fb:f0:80:62:05:39:61:5f:
89:b6:3d:6c:59:ba:5c:49:fa:05:0a:f0:1f:6c:0b:87:70:4b:
87:cd:90:3f:85:d5:32:09:5a:cf:90:ee:9e:56:e0:ce:41:2c:
7d:ed:b6:f5:26:fd:3d:ce:57:22:cb:d0:b7:5d:b3:cd:91:ab:
a7:55:f5:01:18:82:dd:18:a5:23:f6:74:46:0f:df:88:27:49:
3c:0f:72:30:f0:7f:c3:99:30:dc:3f:e7:87:99:d7:30:a2:3a:
a8:6f:29:36:0c:fd:fc:c6:c3:f6:e0:49:2f:e8:58:9c:46:23:
0c:a1:1a:be:42:aa:c3:91:d0:70:2b:32:28:e2:3f:55:31:36:
01:0d:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:09 2026 by rpki-client