Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
File: bhmZOOWGPvPsehfj6VeCESLKy3I.mft (raw, json)
Hash identifier: RiVHcsRnml4XbADVJiCOxnIUsHJKkJIB7AhW8ew0jSk=
Subject key identifier: 75:59:4E:4F:75:9F:E3:86:28:4C:60:EF:BE:27:95:19:B4:26:FE:8A
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Certificate issuer: /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial: 019F8F7F7BE62A879CD0F0B807DEB0D90815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:04 +0000
Manifest this update: Thu 23 Jul 2026 15:02:04 +0000
Manifest next update: Fri 24 Jul 2026 15:02:04 +0000
Files and hashes: 1: C45tLQeLfwaM1RdOqpO-QuLUeQA.asa (hash: 7MH0/rLqYLLQ3/jeeFbZW6qka1ApF6OnChXUKCMlfQ0=)
2: OgAXOTf3IDVfT6V0C3TcApv_UQI.roa (hash: eQxYLK/wPde6Uj0bPjt5BRN1ClEuJ7VpeoOHlBMb9xc=)
3: bhmZOOWGPvPsehfj6VeCESLKy3I.crl (hash: 3Ele0FbGU0n0+2THfuAKAJJLoIFGMfO42rDlDYprZ8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:7b:e6:2a:87:9c:d0:f0:b8:07:de:b0:d9:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Validity
Not Before: Jul 23 15:02:04 2026 GMT
Not After : Jul 24 15:02:04 2026 GMT
Subject: CN=75594e4f759fe386284c60efbe279519b426fe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:c2:d0:61:a1:7d:70:fd:37:ff:7e:78:38:
5b:32:6c:a6:db:40:a6:ab:b1:98:87:68:b1:99:ca:
5e:d9:62:22:4d:d1:29:5c:81:4a:6d:86:fd:ed:ed:
d7:6a:8c:21:4a:30:7a:0c:3d:eb:e6:b0:4d:98:50:
44:57:5c:83:b2:1b:2f:9f:99:11:c0:d6:a3:14:d1:
96:27:e7:c9:a9:bd:e8:31:24:50:ba:43:93:67:0a:
b3:20:09:79:dd:af:4c:87:f3:6f:70:54:3d:92:38:
74:67:61:ba:43:d2:ed:41:e2:1d:4f:58:9e:a6:63:
60:e2:ed:94:4e:f6:e7:98:29:8e:f8:9b:9b:13:97:
ce:bb:bf:a6:87:56:2b:d0:a7:29:5a:24:bc:d7:f9:
54:00:68:0e:54:9f:07:cf:5f:b8:99:27:d7:f5:8b:
f6:2e:52:80:c7:da:e4:dc:a9:08:36:4b:b9:a2:58:
79:ed:05:36:77:44:15:4f:f1:af:93:2b:a5:86:da:
87:f5:8e:44:c6:8c:af:52:83:88:3c:09:d5:3a:ae:
ca:69:47:ff:06:43:d7:34:b4:95:d1:2a:b3:f7:f7:
96:68:62:10:7e:d2:5e:01:46:41:ce:f9:0d:c5:f3:
e8:f6:c5:45:17:cd:ab:9a:d3:71:81:8c:8c:3e:27:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:4E:4F:75:9F:E3:86:28:4C:60:EF:BE:27:95:19:B4:26:FE:8A
X509v3 Authority Key Identifier:
keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:df:2b:98:ee:b2:a7:58:f3:60:e9:c6:9c:b2:de:f5:46:
65:50:eb:93:2e:68:c2:0e:31:69:cf:34:20:b8:ad:97:b6:52:
da:59:d6:e3:34:43:7f:9f:c0:11:7b:cc:46:c6:1e:3d:e2:e1:
6a:7a:cd:0f:af:d2:7b:0e:d4:8f:19:a3:8b:f3:8c:7e:0d:f3:
48:33:6c:d6:92:ef:14:b6:fe:02:96:17:1b:58:a8:23:17:29:
2d:1a:28:fd:f7:e7:fa:90:38:d9:da:1d:4a:c2:bb:3a:c7:6e:
ab:31:ee:31:16:86:25:14:ff:b0:6e:fd:76:6b:4b:e1:2c:b5:
7f:94:63:88:24:63:aa:08:4a:25:e2:60:bc:38:53:0a:ab:f8:
cf:a8:a0:2a:2d:97:0e:7d:09:60:59:fe:c2:2f:d8:28:68:3e:
ae:60:f1:89:5d:10:5e:ac:1e:41:01:ac:fd:f9:68:95:fd:32:
79:cd:f1:36:93:b1:c4:ee:bb:fe:61:0e:0c:b2:82:11:c7:77:
b2:48:e9:dd:6e:fb:16:c9:90:6c:59:25:0b:28:ee:cb:d8:43:
63:6c:32:54:4d:da:45:f1:9f:6e:20:a6:4c:68:c1:0e:56:97:
24:1b:f5:ef:8d:3a:a2:ee:ff:c8:a9:67:e1:1f:27:05:63:7a:
5a:99:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:34 2026 by rpki-client