Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: Sd4UfsyM+hx2gnIMhTAUn6NnsQvOXY/YfRra9i08OIM=
Subject key identifier: 2A:C9:7A:17:64:DF:32:50:EF:D3:E9:55:11:7B:CA:CB:23:D1:B0:BD
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 019D26CD4D534759168CD484E79F049FDBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0C05
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: //BwNTSSQooO9V80QFWsfhywOqWZc6p8WrczsQKtwFo=)
3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4d:53:47:59:16:8c:d4:84:e7:9f:04:9f:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=2ac97a1764df3250efd3e955117bcacb23d1b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:8c:2e:b6:98:54:cf:d0:d3:df:88:8d:b4:
96:b3:0a:fa:8e:2f:7d:dc:9f:94:3d:9e:6b:7d:69:
69:3f:89:69:9b:b0:71:31:c1:5b:64:03:5b:5e:48:
57:bd:13:44:c9:18:92:6a:ac:18:d5:d4:bc:61:79:
60:d7:b1:6b:a2:72:f6:58:85:9b:8d:43:f2:06:0a:
d9:7b:7b:86:e2:40:a1:34:da:50:59:f4:77:51:70:
5d:25:bc:d6:52:c0:c0:4f:7b:77:97:7d:42:a8:cf:
ca:af:62:ca:76:be:89:ee:34:d6:3f:93:d1:cb:c3:
3f:4a:b2:97:bb:7c:48:67:00:9d:ec:fd:3b:31:c7:
c9:a4:d4:5c:aa:b6:f1:bb:27:df:ea:1d:b2:d8:85:
7f:8a:b2:7a:9c:13:3c:92:73:cf:1e:dd:10:a6:f8:
9c:1d:de:3d:e3:ef:e5:93:c1:24:5e:a5:cd:b3:fb:
0c:92:88:6a:21:3a:ca:73:eb:6d:ec:da:75:88:4f:
98:b2:c4:63:eb:13:d7:f0:36:73:cf:15:c5:bf:bd:
c6:70:59:d7:52:8d:b2:3a:86:d0:f7:4a:8d:3f:65:
2e:36:21:bf:85:e4:0a:22:df:c3:a7:cf:d5:a0:d5:
ef:c6:50:f1:93:d1:33:87:c6:d8:fe:06:1d:bd:0a:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:7A:17:64:DF:32:50:EF:D3:E9:55:11:7B:CA:CB:23:D1:B0:BD
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:61:91:50:a1:93:c7:7b:9d:63:f1:aa:a4:d8:a8:9c:4c:56:
9a:fc:8e:87:3b:26:f7:2f:a0:c3:e1:c8:23:36:79:70:10:08:
14:2e:3e:95:d0:d1:14:5c:b5:30:31:f8:5f:a9:3e:44:c3:dd:
6d:6b:3c:7e:d1:8d:8b:b8:fa:a5:89:72:84:87:5e:5f:14:20:
b2:18:89:bd:07:57:e4:21:31:dc:89:1c:48:23:20:f1:b5:52:
0f:6f:4d:03:98:3d:66:06:5c:b6:26:51:72:e2:3c:fa:1e:d6:
cd:27:3b:f2:63:69:6d:cc:08:7b:9a:e2:21:c5:84:86:5a:d8:
cd:64:60:e1:1f:c6:49:6c:84:d3:5c:72:cd:d9:8a:6c:63:83:
42:f2:a0:cf:ad:2c:b8:65:b5:99:20:15:f4:2f:be:7f:38:a7:
62:55:44:ca:86:bf:2c:a1:5f:36:28:d3:13:91:8f:cf:51:af:
91:b1:de:1d:ac:24:c1:a8:45:1a:1a:d7:a6:15:f2:d3:81:c9:
ad:47:b2:d5:df:9d:c5:d0:64:0e:1c:2d:7c:cc:15:b2:34:c7:
81:39:25:76:38:65:da:2e:4e:6b:74:2e:94:9a:f2:e1:00:04:
e8:47:11:d2:fe:3f:d9:50:28:d3:62:3e:66:78:3f:dd:9d:b6:
83:05:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:32 2026 by rpki-client