Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: 9O7eIcQd7xoMSbb2DROmZ9/I1Xpua7hi5bU9ySwNqHo=
Subject key identifier: 2A:34:24:E3:FB:E5:60:3A:3D:04:41:FB:FF:89:E4:30:44:C7:29:88
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 019F8F7DF2693AB065BADF9C993F4C6F28B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 15:00:23 +0000
Manifest this update: Thu 23 Jul 2026 15:00:23 +0000
Manifest next update: Fri 24 Jul 2026 15:00:23 +0000
Files and hashes: 1: 1GrmrNbNGyXyahXMYGt3b4VfY4I.roa (hash: I2AeLswWlG7/hO0PGfHp4xgLUN+8oHGwrspZl3ZzwDg=)
2: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: WvLoMgaFRi3nNDWx3AFwJ61Dofwyp/+esPG2R2x81E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:f2:69:3a:b0:65:ba:df:9c:99:3f:4c:6f:28:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Jul 23 15:00:23 2026 GMT
Not After : Jul 24 15:00:23 2026 GMT
Subject: CN=2a3424e3fbe5603a3d0441fbff89e43044c72988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:75:3d:c8:0d:2e:96:2a:a1:53:c5:9e:91:
2c:bf:77:23:be:9f:f3:8d:93:37:82:b7:0a:d1:af:
c0:cd:4f:ca:93:63:96:f2:8c:26:37:51:2e:62:cd:
52:c5:be:69:96:f7:50:72:b3:f6:da:87:46:7f:89:
c4:00:92:4a:ef:3a:4a:83:08:ec:b5:41:c1:e2:7f:
95:53:a7:7a:53:7c:9b:cf:3e:24:3a:8c:bc:94:6d:
42:d5:a2:74:d9:a3:53:27:25:16:ff:0e:1b:08:d5:
97:2c:fb:66:20:da:56:ba:87:b2:2d:55:d1:dc:0f:
f5:1e:e5:06:e9:b5:65:8f:18:cb:ba:9f:f9:49:b1:
46:22:0e:92:93:14:c4:7e:bc:f6:a7:74:c2:a9:6c:
42:37:2a:e4:30:60:e9:d2:4a:fe:8e:51:80:02:93:
8d:82:70:91:09:b6:13:22:15:89:3c:53:26:d8:0f:
41:73:28:00:30:90:96:5c:c5:e8:9a:ae:25:1c:ab:
4b:e1:ad:79:d5:a3:8f:41:d7:59:0c:f8:df:e5:8e:
6a:78:91:93:51:c1:b4:61:8a:59:64:e9:00:68:a2:
56:2d:79:9f:da:61:2e:f7:c3:dd:37:36:78:ed:3c:
93:af:d5:ea:85:18:89:55:ed:73:b3:a7:f8:56:a4:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:34:24:E3:FB:E5:60:3A:3D:04:41:FB:FF:89:E4:30:44:C7:29:88
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:90:e9:39:81:16:f2:e1:80:b3:26:7d:31:87:7c:ef:05:27:
6a:2d:47:fa:de:de:46:ca:88:d6:2c:65:c7:9e:33:2f:8e:36:
5f:14:01:76:0f:04:6d:e1:99:17:d2:da:ec:19:f6:66:5e:a0:
6f:13:24:18:39:72:d2:be:00:d4:25:22:60:be:60:a4:35:df:
39:4d:fd:30:6f:b1:55:ee:bd:f3:dd:26:eb:62:18:f4:6f:0c:
4f:1e:f9:7e:2f:f0:33:3d:e7:15:3f:74:88:f6:7b:e1:c0:b7:
16:54:5c:76:0e:05:20:76:d2:49:d2:3f:25:2a:d0:cc:a0:d1:
33:21:a1:a3:f2:e6:bb:ba:29:3b:17:70:95:5f:9d:b8:30:3e:
f0:b7:6e:0e:1b:fa:c1:39:1b:c9:f3:5f:60:47:cd:22:3b:0d:
f8:ee:c6:28:fc:92:20:5a:f7:9a:39:df:e3:06:32:52:61:f0:
76:f9:79:0c:6c:13:37:5e:f9:7f:89:15:e5:d5:cf:4c:a4:1c:
14:e4:1d:46:50:2b:f6:0f:66:bf:c5:05:83:64:1a:ba:91:6f:
b2:62:0b:41:56:43:89:e4:38:b9:d2:c2:11:2f:f5:78:15:70:
3d:dc:39:41:20:32:68:fc:48:a5:ef:90:1a:cf:8d:15:d1:a4:
d8:de:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:57 2026 by rpki-client