Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: BJF9q/tBmXkf/vJWY0SEbe4BNABotNXRs6nrPJiUte4=
Subject key identifier: CF:82:3E:A5:76:BF:19:3C:BF:AB:D2:90:7E:3D:64:10:1C:7C:8E:15
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 019F927EFE4DBC8A698D2562F5D6E8506478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 039C
Signing time: Fri 24 Jul 2026 05:00:23 +0000
Manifest this update: Fri 24 Jul 2026 05:00:23 +0000
Manifest next update: Sat 25 Jul 2026 05:00:23 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: HxrX/aHo1pLXUmYp0tG/GIkDG4cHCM/5GUloPUXsOnc=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:fe:4d:bc:8a:69:8d:25:62:f5:d6:e8:50:64:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Jul 24 05:00:23 2026 GMT
Not After : Jul 25 05:00:23 2026 GMT
Subject: CN=cf823ea576bf193cbfabd2907e3d64101c7c8e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:99:40:52:27:ee:49:cf:a0:ec:74:d8:b5:
68:10:c0:92:09:52:a7:a7:2f:ed:04:58:b2:35:ff:
51:4c:9b:89:73:55:1b:4a:92:f8:eb:2f:4d:42:65:
e7:cb:36:20:5f:f9:3e:24:ec:ff:2d:d7:c5:07:13:
2b:50:33:f4:44:bd:3f:4b:e8:d0:a6:23:c4:0f:d5:
3c:45:f2:f6:c3:f5:73:ea:e3:71:b1:c2:ec:33:aa:
53:b7:33:fc:a7:fd:8f:2c:fe:01:e7:5e:3e:6e:cf:
f9:43:1d:3f:68:1a:ed:35:5c:e1:bd:2d:6a:7c:66:
83:fa:3f:b3:34:00:29:59:9a:d9:34:58:91:46:4c:
c5:3e:2f:b0:73:f1:55:7b:bc:3b:9a:39:3a:54:e2:
32:49:86:3a:b4:73:c7:48:78:75:f7:1d:5b:6b:5d:
47:bc:d5:6a:81:ed:d6:4d:68:0b:03:57:72:64:43:
ab:6b:05:cf:ff:bf:98:c5:04:d2:75:18:7b:bb:f9:
88:38:14:47:1f:48:7f:73:4f:14:bc:25:90:42:e5:
ed:5e:23:65:5d:47:e5:32:48:d7:5f:ee:6f:59:5d:
fa:e6:88:3f:91:f3:e4:c3:49:75:9d:11:c1:c1:3a:
9a:58:6a:0a:4c:df:7f:74:6c:ff:6c:49:8c:7c:bc:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:3E:A5:76:BF:19:3C:BF:AB:D2:90:7E:3D:64:10:1C:7C:8E:15
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:54:92:8e:86:37:83:59:5a:9e:a8:6a:2e:dd:3e:81:22:
0e:80:32:35:e1:e3:3e:3c:28:a8:e1:06:0b:ea:a0:1c:0d:6a:
2e:5a:b4:fe:ef:a2:30:1d:20:2e:36:56:c2:fc:29:58:3f:d2:
a4:aa:c6:e2:96:71:e6:51:02:30:38:d1:3a:4a:1b:5f:1c:a0:
57:a0:fd:0d:aa:af:b0:3d:82:b6:da:55:0b:f2:99:41:f8:04:
b9:07:ff:38:27:53:d8:8f:32:7a:6a:cb:be:78:ea:ea:3e:18:
e7:a8:e9:b6:e0:b6:93:71:4d:f1:b9:65:fe:f7:65:9d:7e:de:
b0:8b:42:fa:49:4f:aa:0a:22:af:be:6f:82:70:24:2b:ce:5b:
42:95:e2:17:27:b6:37:f0:b7:c8:54:d2:25:6b:75:a8:5e:b9:
1f:b1:d4:2c:1b:8c:d2:5f:cf:69:0b:ae:72:0d:9d:a1:59:d4:
75:94:23:f9:d5:c2:1a:7b:26:5b:23:de:53:8f:df:9c:37:b5:
31:43:98:b2:99:f2:92:6a:7a:53:c2:43:e8:ac:8a:e2:ba:30:
6b:1c:15:5f:88:4c:46:c2:b6:07:98:73:e8:61:a9:f9:5f:e8:
0b:f1:e1:67:9d:2f:bf:2e:b9:dc:c6:f3:76:34:d9:fe:50:0f:
7a:ea:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:33 2026 by rpki-client