Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: OKi1ImQYcasagTJbkSbWNeYDg1P2nYbdU6j6s25Y7/Y=
Subject key identifier: 14:C7:A9:31:DE:11:DD:39:54:41:36:50:4D:14:67:F8:23:CD:53:87
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 019E1C1020E9701BB525F29D3F161ACFC794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0C84
Signing time: Tue 12 May 2026 12:01:19 +0000
Manifest this update: Tue 12 May 2026 12:01:19 +0000
Manifest next update: Wed 13 May 2026 12:01:19 +0000
Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: Z9l+wuNa2VB+MLNHR4PMawaJ093tNnGYThKbRj1BHmo=)
3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:20:e9:70:1b:b5:25:f2:9d:3f:16:1a:cf:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: May 12 12:01:19 2026 GMT
Not After : May 13 12:01:19 2026 GMT
Subject: CN=14c7a931de11dd39544136504d1467f823cd5387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:4f:46:98:6f:46:3f:82:23:8b:97:94:a3:
e4:78:ea:86:b2:05:e4:74:07:e2:97:98:fd:78:1e:
0f:81:da:08:92:03:36:e0:2a:9a:8f:f9:69:2a:81:
89:d2:61:9d:91:7b:32:47:20:61:ae:ed:31:7e:c1:
c3:e1:8b:4c:a3:ae:d8:7e:13:c0:7d:9a:43:cc:f5:
0c:0f:86:6e:25:91:a7:5c:d9:15:1e:e5:60:23:f6:
db:2c:8d:35:7d:cc:fd:aa:dd:34:86:28:cb:e3:43:
d1:a6:a2:23:fb:5e:5f:81:b4:ed:7f:f1:39:26:ba:
ab:24:fa:41:93:da:1c:fa:34:33:ed:16:e8:f2:6e:
11:cf:71:f0:14:c9:38:6f:00:84:ab:ea:38:48:43:
ce:ec:40:93:13:f0:90:6a:e9:d2:92:0f:a1:bd:d7:
6b:50:f4:cb:e0:be:5b:93:a0:47:dc:46:d0:75:88:
8e:d9:c4:63:a3:c7:4f:ce:03:8b:63:79:6c:f3:b3:
dc:63:75:54:e3:35:81:d6:d9:46:69:70:1d:1b:0a:
cd:4a:57:ef:00:ce:af:85:4f:d2:ff:a3:ea:1b:b1:
a5:69:45:4e:9f:68:06:4f:77:59:96:ae:55:d0:d2:
97:01:eb:39:5f:f1:86:a8:73:c2:32:e6:aa:56:d2:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:A9:31:DE:11:DD:39:54:41:36:50:4D:14:67:F8:23:CD:53:87
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5d:b0:ff:02:b1:c9:74:c4:cd:90:67:5f:3a:46:a9:36:45:
59:fd:dd:08:c8:ba:f9:2f:82:40:17:f2:3c:41:bf:96:92:01:
c3:bd:bc:56:db:03:7e:b4:03:80:c8:cf:cc:5a:57:41:cd:50:
49:bf:1e:1f:55:da:8d:12:cf:bc:5e:96:31:fd:a5:4d:f2:1a:
a9:e3:86:6d:d5:a0:52:5e:3e:e3:f2:a9:02:38:27:60:bd:70:
56:24:00:1e:81:b6:ba:27:32:d1:23:d4:1b:f4:28:7d:c5:69:
b3:8f:f8:e0:1a:94:ac:47:3f:1e:6c:6c:61:80:5d:f5:32:ab:
78:fb:46:71:dc:15:7b:a7:4d:45:ad:ec:7f:0b:8a:5d:dd:c5:
c4:bb:77:4b:4d:4f:f0:25:aa:22:cc:19:25:df:4d:3b:4f:01:
d4:20:c9:43:c5:ac:31:05:44:26:8b:04:75:0d:09:40:30:11:
23:29:f3:33:31:22:1c:e4:0b:d8:43:c4:b4:6f:b2:e8:03:60:
bd:cc:0f:99:8a:be:32:63:8d:58:c8:e1:88:b9:d6:e8:b0:27:
e6:e4:47:a4:59:7f:31:3b:8c:cf:53:08:7e:29:bd:7f:aa:47:
8a:2f:7a:54:6e:1d:40:1c:0d:2d:cf:7c:1f:bf:58:9c:cc:dc:
81:1e:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:47 2026 by rpki-client