Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: 7zr7gHBRXk9/7wN4aIoMDMAyDJKf7JOZu9ZV0f9a9GA=
Subject key identifier: 8C:C0:DE:CB:AC:25:6E:7C:CD:A7:97:F1:C6:08:28:4E:4D:17:E7:6D
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 01A0CF3677A72B93C8CCDFD3359F50BB78D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 0440
Signing time: Wed 23 Sep 2026 17:00:48 +0000
Manifest this update: Wed 23 Sep 2026 17:00:48 +0000
Manifest next update: Thu 24 Sep 2026 17:00:48 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: IJNT4zim+FbxQIYABM/rcu9GLrTzvRRbmpY3lLzDSYc=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:77:a7:2b:93:c8:cc:df:d3:35:9f:50:bb:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Sep 23 17:00:48 2026 GMT
Not After : Sep 24 17:00:48 2026 GMT
Subject: CN=8cc0decbac256e7ccda797f1c608284e4d17e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:d3:44:9a:31:f3:a1:76:5c:03:e1:4e:2a:
7d:91:fd:a1:87:88:9e:52:95:0e:ca:22:f7:a2:d2:
cd:8d:a8:a4:33:9f:47:fe:e8:02:44:df:5e:77:c4:
0c:a6:c2:5b:99:5a:bb:d1:e8:da:5c:27:b3:73:93:
d4:02:0c:ae:70:2f:05:9f:7c:05:66:fc:35:0d:61:
1f:5a:8d:6f:6e:47:96:e2:ae:9c:ad:88:8d:61:e9:
cb:4e:ef:e3:b0:45:c5:ff:72:71:4b:ed:49:04:02:
1d:d8:48:83:3d:b9:7e:3d:36:e0:4a:7a:7e:40:82:
9b:24:b2:5d:eb:93:80:5f:9a:27:77:ab:08:ff:9a:
15:c5:20:72:68:ff:83:ed:c2:d7:3f:a0:ea:28:8a:
44:a9:90:5f:ba:74:f6:c5:52:7e:17:85:db:c2:a6:
ab:35:15:e1:25:42:ba:df:bf:26:be:76:08:f4:36:
0c:ec:94:ca:28:82:6e:b9:7d:c4:ab:21:56:fb:96:
ff:ac:e9:7c:f7:a9:1a:2d:4f:1d:c7:3c:5c:2c:8e:
c1:c6:cc:21:a8:08:e0:d2:6c:bc:6a:f1:2d:26:c5:
22:58:b1:64:a5:bc:20:fa:87:ff:e1:3b:d6:ac:09:
b2:24:32:cc:49:b7:81:6e:44:56:02:ab:85:5f:e3:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:DE:CB:AC:25:6E:7C:CD:A7:97:F1:C6:08:28:4E:4D:17:E7:6D
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:90:64:39:71:cb:dd:86:21:c6:cf:83:9f:d0:7c:17:f1:1f:
de:d9:b1:9e:2a:93:1b:fc:4f:ef:e5:9e:7e:a3:d3:99:61:40:
d1:9f:4b:91:18:7f:b1:ec:a5:3a:df:49:e5:91:2a:4f:67:80:
fa:e9:d3:69:c1:f2:a8:74:71:18:fc:03:b2:06:f5:f9:0c:18:
ae:ce:09:84:a0:b0:94:6b:77:03:8a:e7:d3:1a:9d:30:25:6a:
04:7c:a1:4e:39:21:c2:6d:13:3b:e3:16:dc:54:aa:7b:bd:d2:
80:38:a8:ea:d7:1b:78:b8:a8:08:a9:3b:52:83:dc:ad:bb:84:
ff:0f:9e:e0:99:19:32:84:f6:f2:1e:a4:9b:64:28:8f:f2:7c:
e1:c7:e6:2d:4f:6d:be:46:0a:b2:b4:25:a3:3a:e7:6c:80:a3:
8d:87:92:15:b2:4e:b2:eb:54:73:3d:c8:3d:67:57:88:dd:2f:
3a:9d:26:fa:5f:a3:a7:49:2d:d0:f1:5e:34:e5:61:46:00:1c:
b5:dd:2c:e6:a6:de:56:a1:d4:67:87:5d:7d:8b:7e:03:f0:0c:
83:ca:e4:46:9b:41:34:4d:43:bd:72:a9:4d:52:58:5b:6f:8e:
5e:36:bd:8f:43:21:9d:5c:de:6f:6c:6c:19:e8:9c:bd:32:e4:
70:e8:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:18 2026 by rpki-client