Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: 41okqsPaOpXth7wVK+5tJoz52IBME4z8BX0wK1ef3ac=
Subject key identifier: 31:F7:27:7D:EE:33:6B:C3:B8:32:40:20:5D:FC:42:A5:B7:01:D9:50
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 019D2771ED246D7532087767A58A09D5E675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: 1GrmrNbNGyXyahXMYGt3b4VfY4I.roa (hash: I2AeLswWlG7/hO0PGfHp4xgLUN+8oHGwrspZl3ZzwDg=)
2: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: iV0HA782mCRsru5lNYoORZW60HqVx+E4LlV7zAj+gU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ed:24:6d:75:32:08:77:67:a5:8a:09:d5:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=31f7277dee336bc3b83240205dfc42a5b701d950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:97:24:32:3a:d9:ce:b3:a4:a6:fb:ea:04:
00:26:1d:2d:03:75:b4:e9:fb:35:ff:7f:da:a0:b3:
5c:bd:13:6a:b7:67:24:f8:6a:fc:0d:46:cc:20:2a:
98:e2:f1:30:bb:23:76:0b:03:72:24:dd:29:5f:b9:
e1:7c:87:10:f1:ae:89:4f:bf:d6:47:4a:a5:d1:34:
1c:2d:66:f2:63:c4:f4:73:d4:14:4f:de:d2:70:72:
e3:2e:95:c2:fa:e5:b3:95:2a:86:3b:46:54:ed:34:
26:fa:ac:17:ee:93:94:81:37:b0:f1:8e:6d:96:98:
f3:dd:61:6f:91:b2:0a:ba:e2:04:89:f6:72:30:62:
e7:47:06:e7:65:60:d0:b1:0e:c2:53:c8:c8:bf:ad:
f1:d4:88:f6:06:52:ce:a6:9f:4a:3d:e4:cc:df:f1:
fa:1d:15:2a:8f:4a:ec:3f:b8:c4:a7:2c:50:8c:df:
12:37:a4:da:ca:de:12:ff:5d:90:98:38:f4:1d:2b:
2e:fd:95:f4:05:7f:25:08:a9:48:25:c1:26:90:5f:
7b:62:71:c1:3e:2b:27:62:2f:81:c7:b9:f9:b2:89:
cf:f8:35:ba:87:dc:fa:2a:a2:e4:98:6f:5d:9e:00:
33:03:19:1f:30:a2:48:35:9c:64:fe:97:4b:8e:86:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:27:7D:EE:33:6B:C3:B8:32:40:20:5D:FC:42:A5:B7:01:D9:50
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:15:b2:2e:1b:1a:b5:f5:eb:18:40:96:ba:f2:67:57:a5:82:
b2:a2:a2:a0:6a:e6:9c:f4:de:57:4a:41:d3:9d:3b:30:37:33:
ce:ad:8a:3a:a9:3b:1d:64:a5:7e:f3:67:7f:8f:4c:fe:ff:33:
46:e3:6d:f7:61:a5:e4:0b:1b:1d:bc:ed:48:e3:0f:97:7a:9e:
70:a4:e1:5c:0e:0b:3b:c1:68:b1:13:43:2c:20:3f:a8:f3:c9:
f0:c7:e1:a8:59:22:a1:28:2f:aa:b3:82:fb:21:12:ff:12:72:
a1:4b:5b:16:50:7b:b2:fd:fb:ac:1e:92:40:71:cb:4f:b0:ff:
68:0c:f2:55:aa:d4:39:26:1c:4a:f6:b0:fe:68:64:c5:e3:eb:
b0:e6:af:2c:f8:5c:34:de:d8:df:62:98:21:93:12:9e:ae:3d:
08:dc:7f:88:5d:68:2e:ed:ff:90:28:35:52:25:01:0f:f2:d4:
30:4f:46:65:7f:33:86:1a:9d:4f:e0:32:d5:40:0e:36:29:dd:
a3:95:96:5a:20:29:f6:e3:38:2d:ea:21:f2:7c:38:b1:bb:46:
3a:a9:39:38:9b:2e:fe:1b:77:40:9b:db:39:e1:25:62:d2:98:
f2:45:c7:3c:4d:65:65:07:94:5b:ad:17:b4:11:48:90:95:fe:
ab:ef:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:07 2026 by rpki-client