Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: f+YFoBkd98RvN2eH3KpKo1063NXoxshrDaVS6jdA0/k=
Subject key identifier: 13:D2:25:96:C6:C2:27:5B:99:F7:3B:92:CB:0B:92:C8:00:33:20:4D
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 019E1EA2EDFC1F992EBD018179D9FEF4AC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 00:00:54 +0000
Manifest this update: Wed 13 May 2026 00:00:54 +0000
Manifest next update: Thu 14 May 2026 00:00:54 +0000
Files and hashes: 1: 1GrmrNbNGyXyahXMYGt3b4VfY4I.roa (hash: I2AeLswWlG7/hO0PGfHp4xgLUN+8oHGwrspZl3ZzwDg=)
2: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: Ok7eJoaZrB8Gsa2pxlUEV1R1Qqyw2AuPeqg1Z3IXljg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ed:fc:1f:99:2e:bd:01:81:79:d9:fe:f4:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: May 13 00:00:54 2026 GMT
Not After : May 14 00:00:54 2026 GMT
Subject: CN=13d22596c6c2275b99f73b92cb0b92c80033204d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:b5:55:63:3d:c9:3d:c6:28:4c:b8:f1:d0:
0b:26:6d:1d:05:7e:b7:83:31:1d:1a:67:a8:f1:89:
09:1e:a1:36:52:cf:e9:c0:2e:72:ce:77:3b:e2:ad:
94:bc:1e:b1:aa:1e:d6:3d:b7:78:30:ca:ef:ed:b0:
48:7a:07:3d:54:9f:3b:6f:51:cb:43:5e:66:2e:51:
d2:de:2b:b4:b9:11:a3:70:3b:55:9c:5b:25:b3:ba:
49:a8:34:fc:7b:a0:77:b1:e5:ba:97:6d:64:7f:c5:
2f:40:bf:1e:c5:0d:fb:81:c7:1c:c0:f4:cc:2f:4d:
39:fb:ce:28:39:4d:a9:90:d1:a1:06:e1:66:62:c6:
3d:9e:3c:81:8f:1f:e2:0f:06:50:7c:fb:27:23:5a:
38:ca:1b:9f:b6:49:d7:7a:00:4b:b3:d1:d4:ab:3f:
7a:59:45:53:5c:f1:ad:a9:69:d3:53:eb:06:68:ee:
08:e4:0d:cf:61:1c:94:fe:ee:4e:17:a3:17:7c:68:
59:30:fd:2b:ed:cc:5f:1b:b3:cc:9e:ea:74:60:f1:
fe:6d:7f:1a:7a:68:05:55:03:59:88:24:0c:43:cf:
77:02:2b:ee:23:43:15:aa:dd:e8:88:53:b6:bd:28:
e4:d1:f3:9e:e0:a4:05:1e:f8:88:65:62:4f:a1:f5:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:25:96:C6:C2:27:5B:99:F7:3B:92:CB:0B:92:C8:00:33:20:4D
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dd:3c:99:9e:ff:b8:28:69:2f:94:03:f8:6d:78:b9:f0:4c:
69:60:1b:7c:c1:e8:24:58:0c:32:77:d5:72:90:f2:7c:d3:05:
b7:52:28:7a:4b:eb:0f:02:4a:6f:44:ca:bd:17:14:7c:97:38:
a1:f7:76:ab:85:7e:cb:26:df:92:54:f0:ee:5d:7c:d3:c3:21:
ac:b4:ed:ac:01:8f:29:57:69:c5:bf:57:48:45:b5:5d:e5:ac:
8a:bf:8b:4c:24:62:ca:59:0d:49:96:a1:16:cc:69:4e:90:f9:
36:d1:9d:d5:21:24:b2:d5:91:87:53:37:4f:28:72:af:cd:6c:
83:fe:30:a0:9f:03:44:24:3e:75:96:b9:4d:6c:9c:79:2c:0c:
21:23:2a:3f:e9:53:42:33:2e:26:46:be:11:5c:57:77:7c:3f:
84:c5:43:2b:ba:82:ef:b9:e2:2d:9d:6a:1e:b0:ef:00:cc:17:
df:d7:6a:3e:43:8c:4a:7f:4b:0c:0e:f7:b0:a9:d4:52:04:0e:
0f:34:d2:ba:2b:14:f5:42:ee:b1:7e:99:74:54:77:60:5e:22:
4c:82:90:ec:0e:07:f8:95:3d:94:62:76:df:4f:5d:29:ec:51:
ec:91:05:2f:a6:b0:f6:6b:0b:2d:ad:93:40:96:cb:7e:2b:1b:
fc:e9:f7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:34 2026 by rpki-client