Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
File: bhmZOOWGPvPsehfj6VeCESLKy3I.mft (raw, json)
Hash identifier: 4FX9xPC4Gf3FhjmTjcQtIkr+VBiyZDJD5r9YAyWmLR8=
Subject key identifier: 5B:54:BE:3C:1D:72:1F:4D:28:6E:23:1F:63:79:B2:3B:9F:02:13:61
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Certificate issuer: /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial: 01A0CC350DB98980D2FB7EF469B02C220AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:24 +0000
Manifest this update: Wed 23 Sep 2026 03:00:24 +0000
Manifest next update: Thu 24 Sep 2026 03:00:24 +0000
Files and hashes: 1: C45tLQeLfwaM1RdOqpO-QuLUeQA.asa (hash: 7MH0/rLqYLLQ3/jeeFbZW6qka1ApF6OnChXUKCMlfQ0=)
2: OgAXOTf3IDVfT6V0C3TcApv_UQI.roa (hash: eQxYLK/wPde6Uj0bPjt5BRN1ClEuJ7VpeoOHlBMb9xc=)
3: bhmZOOWGPvPsehfj6VeCESLKy3I.crl (hash: 9lN4zfrsG+yeGuLzMFmmPb5vIWsYOYn0RU1/H+7T8Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:0d:b9:89:80:d2:fb:7e:f4:69:b0:2c:22:0a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Validity
Not Before: Sep 23 03:00:24 2026 GMT
Not After : Sep 24 03:00:24 2026 GMT
Subject: CN=5b54be3c1d721f4d286e231f6379b23b9f021361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:bb:87:c8:7e:d2:6b:4a:c5:85:36:aa:d1:
aa:01:aa:0f:28:7b:2d:62:ad:2f:d8:65:bc:f1:ad:
eb:43:8c:65:1e:38:0f:3e:24:aa:92:e0:6f:9d:9e:
43:65:ea:31:99:c2:86:76:92:e1:78:ed:62:d0:39:
8e:f1:b2:8a:84:17:a8:ee:28:c3:70:70:aa:e3:d2:
85:ea:7a:66:ed:8c:ad:2f:94:e2:39:d6:b8:0d:12:
32:77:f9:1b:85:dd:72:d6:b9:4f:c2:34:ae:7e:37:
a3:ec:88:d9:f7:f0:4f:70:0f:1f:55:f2:f8:f4:63:
9c:a6:1d:dc:bd:e0:cf:bf:ea:86:92:fc:c7:c9:a3:
a1:fb:2f:3a:a4:57:9c:15:3e:19:dd:c8:56:46:7a:
14:a4:6e:f4:57:01:c1:27:7e:ca:f2:86:03:bd:0a:
de:17:6f:99:2a:99:bd:a2:b4:be:5d:16:0f:a2:6c:
05:62:2f:8d:d5:81:73:61:76:47:ad:5b:50:86:10:
79:2c:12:95:ea:da:2b:09:da:27:bc:8a:28:8d:b7:
ef:3f:d4:27:03:8a:53:5a:14:1f:69:41:cf:c6:ce:
30:51:ff:9b:6d:3d:7d:9e:b2:a2:9d:af:3a:70:d1:
ac:3e:7a:4e:ef:c5:09:e9:19:0b:4d:13:4d:7e:31:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:BE:3C:1D:72:1F:4D:28:6E:23:1F:63:79:B2:3B:9F:02:13:61
X509v3 Authority Key Identifier:
keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:aa:ec:b3:af:48:32:d9:94:13:bd:3e:c9:59:6d:ef:9d:
ef:a4:a5:b1:64:ad:11:10:0a:c3:bb:b9:6f:da:ee:2e:04:ee:
e3:2e:b4:cf:b5:0b:f1:5f:8d:85:f5:f6:81:68:7c:6a:5c:63:
b2:0e:6e:9c:58:96:9e:c0:d6:22:31:ae:7f:a2:38:c6:ee:db:
8d:84:f2:e1:c6:5f:8b:49:98:61:40:36:06:ae:3c:f1:af:5e:
e1:75:f9:66:4a:cd:0f:b2:bf:41:28:6d:29:be:39:b5:79:12:
8c:92:5e:b6:6e:c8:4e:0c:10:49:89:3f:4e:92:db:28:02:29:
73:aa:bd:10:cf:46:e1:e9:8b:0c:01:a2:b0:ae:75:a0:52:29:
8d:51:b3:ea:02:af:48:14:d8:91:23:1f:d2:d4:6f:c2:2c:d0:
32:fd:fe:be:8a:a2:bd:f2:31:5d:c1:17:3e:47:10:fd:c0:21:
a9:df:00:fb:78:28:38:c6:37:2b:6c:09:da:2a:f3:79:62:2c:
b7:2d:e4:b7:a2:78:48:e0:69:60:06:d8:51:82:89:bf:0c:78:
63:fc:a0:75:5e:7f:10:51:e8:79:75:c9:02:51:9e:89:00:dc:
fd:c7:11:b7:54:95:88:b7:c6:58:cd:a4:d1:b7:69:52:71:6d:
1b:d8:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:01:23 2026 by rpki-client