Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: RB94l/lFxav2na2F2Wqb4EPQmuSDA0nI4cR2lm3GFf0=
Subject key identifier: F8:1F:09:F0:29:26:B7:EA:A9:25:82:7B:A6:F9:F7:EB:CF:7F:17:7D
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 01A0D20029F8B578E4A6A4B701B8EA4DC3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 06:00:21 +0000
Manifest this update: Thu 24 Sep 2026 06:00:21 +0000
Manifest next update: Fri 25 Sep 2026 06:00:21 +0000
Files and hashes: 1: 1GrmrNbNGyXyahXMYGt3b4VfY4I.roa (hash: I2AeLswWlG7/hO0PGfHp4xgLUN+8oHGwrspZl3ZzwDg=)
2: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: Ax8v3Zk6Gao80riwj0+uZ6sJb/YVtdoafOffBYtoTWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:29:f8:b5:78:e4:a6:a4:b7:01:b8:ea:4d:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Sep 24 06:00:21 2026 GMT
Not After : Sep 25 06:00:21 2026 GMT
Subject: CN=f81f09f02926b7eaa925827ba6f9f7ebcf7f177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:d1:09:3d:4b:3f:fd:11:78:be:ce:60:75:
1d:74:ee:24:ef:e1:91:ba:74:d1:40:3b:69:9c:5b:
c6:de:85:fe:f5:bf:8b:df:c2:c1:46:6a:47:fc:4d:
9d:8a:92:8c:af:34:a0:df:6f:ec:0f:63:91:1e:41:
d8:94:8f:e6:25:5c:86:4f:7c:6a:a3:e7:7a:b2:c5:
85:60:a3:70:22:83:52:88:0a:5a:62:09:3b:5d:8b:
6f:e8:40:c8:07:cb:1f:c2:2f:b6:27:ca:2b:40:71:
63:3b:5b:e4:50:42:9e:15:d2:d6:a8:cb:a0:b4:23:
da:9c:60:9e:00:bf:d4:84:6c:b4:86:14:14:0e:5d:
82:ee:57:59:0b:fd:7c:12:e3:b3:cb:1f:7b:46:eb:
fc:38:6d:0e:ae:c4:a3:15:be:c4:9b:e3:86:38:8c:
39:5d:a4:8d:19:99:20:22:ef:1d:0d:8e:73:5d:b5:
06:63:e2:3e:56:7e:7e:35:b5:2a:15:f1:22:80:16:
37:e3:ad:cb:be:39:7d:d9:5d:45:d8:d1:fa:f7:16:
4b:7d:3c:df:b8:9c:31:05:3e:c8:a0:b0:43:ae:b8:
13:b7:f4:d0:c2:12:7a:cc:94:30:5e:cc:42:56:36:
38:fa:07:84:4a:c0:61:53:2a:a8:30:c6:9a:eb:15:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:09:F0:29:26:B7:EA:A9:25:82:7B:A6:F9:F7:EB:CF:7F:17:7D
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:60:21:c9:f2:7d:a8:50:d8:e6:a1:1e:1d:3d:cd:20:80:2c:
86:f7:d5:21:d2:74:61:6f:17:18:fc:c8:45:b9:78:47:b5:d7:
d3:42:28:59:87:e8:60:47:f9:ce:f4:9f:10:9b:71:85:93:09:
01:7d:91:92:51:fd:94:a5:6b:2c:02:8f:9c:27:4c:06:1f:3e:
80:21:b1:71:d5:16:48:18:ec:1e:e1:ee:a3:73:d2:66:01:82:
1c:7a:2e:35:42:05:9c:fc:48:92:cf:01:65:a7:7c:dd:27:f5:
6f:3b:dd:59:94:19:6b:2f:b3:94:87:29:6f:97:9b:09:81:d4:
29:92:6b:bd:51:86:87:c3:eb:04:76:12:4b:7b:0d:3c:f0:65:
a2:d8:f1:e4:d0:90:9a:72:d9:d8:70:96:d0:6b:78:01:e6:7d:
a2:62:91:a6:d4:21:2a:54:65:91:1b:4c:be:4b:45:99:97:b6:
ef:0f:54:d9:ae:b5:7c:16:55:af:b2:43:f8:89:fc:8f:43:c9:
bc:b1:e2:e4:b8:bc:b7:19:2a:5a:2b:e2:dc:55:92:e0:cc:aa:
3c:d5:81:c8:0c:43:61:12:2b:1b:12:67:43:9a:6b:85:8e:25:
9c:41:bd:26:b7:2a:cb:8a:b0:01:2e:14:4e:70:d9:23:e4:1f:
cb:79:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:23:53 2026 by rpki-client