Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: UwEfOo44LuzNrg2r2iH7lAB+hFmE6htvI9QS2aDTQDw=
Subject key identifier: 60:D7:B8:AB:54:AA:0A:A2:41:F6:AC:93:99:B8:A7:55:A0:0D:A8:2F
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 01A0D34B0070CFFE360F805AC10F912C99C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0DEC
Signing time: Thu 24 Sep 2026 12:01:42 +0000
Manifest this update: Thu 24 Sep 2026 12:01:42 +0000
Manifest next update: Fri 25 Sep 2026 12:01:42 +0000
Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: 1lbY93vWwfl2Owo325YVOg4KiUiK9qJT5S1NReCQVzQ=)
3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:00:70:cf:fe:36:0f:80:5a:c1:0f:91:2c:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Sep 24 12:01:42 2026 GMT
Not After : Sep 25 12:01:42 2026 GMT
Subject: CN=60d7b8ab54aa0aa241f6ac9399b8a755a00da82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:12:e3:3c:fc:bd:53:38:9b:2e:92:42:b7:
13:74:a5:06:cb:a9:6b:7b:d6:10:b1:58:87:ca:bf:
85:f6:57:aa:db:fb:b0:68:3a:84:10:29:8d:90:a9:
52:2a:ad:4b:1e:28:9b:0d:1d:cb:c2:04:0e:72:06:
44:6d:f7:af:06:ed:c5:3a:a4:9c:71:86:a3:b2:98:
b9:46:38:e4:53:ed:86:34:5b:95:28:99:8f:3b:a4:
1e:7a:8d:5a:16:7d:07:43:b6:77:b5:c9:4f:15:bf:
c2:e3:6b:82:1e:18:08:62:42:04:62:0c:9d:59:6b:
21:11:89:3d:c3:90:55:a5:d8:8b:d5:93:f7:85:78:
80:e8:a1:24:8b:4f:29:a0:50:8f:86:b9:a1:b2:cb:
39:4e:76:85:1f:66:03:6f:76:5e:5c:6c:8e:36:5e:
92:a2:c5:61:fa:88:73:40:5f:8e:c9:8d:35:1c:6e:
e8:25:18:a9:17:3c:e4:be:33:2c:64:97:4e:10:b3:
17:5a:a3:96:c4:64:66:6b:b8:e9:ce:90:3c:7f:a1:
10:9f:c6:a6:e6:49:93:69:71:cb:af:e8:d4:73:ab:
fc:9c:34:dd:49:2b:f3:8e:83:2b:3c:89:87:a6:19:
bc:29:04:59:7f:34:c8:2b:13:df:68:7e:f0:99:2c:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:B8:AB:54:AA:0A:A2:41:F6:AC:93:99:B8:A7:55:A0:0D:A8:2F
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cf:3c:90:83:a0:30:81:75:26:5d:a4:66:5b:39:b6:87:7a:
fc:b0:65:83:7e:76:ca:3f:64:1f:59:47:86:f4:e7:25:50:30:
71:85:5a:55:d4:f6:aa:46:bc:de:55:9b:05:af:e7:b6:d7:89:
9e:76:8b:08:e4:2f:d1:df:2f:c7:9a:30:d5:8f:67:4f:0a:b1:
ca:a4:c5:b2:f3:49:f0:c2:36:b3:2d:08:29:c2:2f:21:b4:e6:
13:43:5a:b1:7b:81:4d:27:e8:14:f7:55:31:7a:69:93:11:f6:
48:97:58:0b:7d:cc:60:31:f6:87:c5:98:41:3a:d7:34:0e:0a:
2e:6e:74:74:64:ca:39:dd:dd:34:bc:05:25:92:1c:35:1b:f5:
2b:55:de:4d:e8:e0:c1:51:fa:3b:34:03:08:42:db:5e:46:0b:
ac:ee:8a:10:d7:83:7d:4e:ff:7b:db:48:e2:0a:79:18:c3:c7:
5d:4c:c0:b8:1f:57:13:c2:cd:52:0d:27:c0:ff:f6:d0:5a:a8:
c0:4f:84:15:35:2b:bf:8a:6e:63:8a:3a:b8:ba:fc:23:1f:74:
da:28:df:b5:e0:26:09:53:9e:b3:a4:b4:ff:d6:ba:b9:16:43:
dc:53:8e:0f:b5:14:78:04:f7:c5:09:91:39:1a:fa:fc:f1:f8:
6a:25:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:35:32 2026 by rpki-client