Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: 6QIAbmljsVSPJAU587KKs62yltcahnifZ9XtXndRHwM=
Subject key identifier: A7:D0:3F:5B:5A:3E:77:56:0C:F3:FB:5E:D5:A5:D4:1B:FF:6D:9B:31
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 019F916D6CDC89047AD1A449AE61F2B0A493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 00:01:35 +0000
Manifest this update: Fri 24 Jul 2026 00:01:35 +0000
Manifest next update: Sat 25 Jul 2026 00:01:35 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: jRw24LczDyRpKW5msPTNBbleiQw/Jqc724hLzrriEQ4=)
2: IuvYb1hnFC_R3vbmr804zDcQ564.roa (hash: NxUdZjpgsvcOhxi2GuJmepTyufWX4gZ8PVnHKb+FC34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:6c:dc:89:04:7a:d1:a4:49:ae:61:f2:b0:a4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Jul 24 00:01:35 2026 GMT
Not After : Jul 25 00:01:35 2026 GMT
Subject: CN=a7d03f5b5a3e77560cf3fb5ed5a5d41bff6d9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:fb:f3:ae:46:e8:42:c0:2b:16:e6:4a:86:
dd:b2:57:be:42:49:a1:25:7d:6f:ba:c8:0e:1b:af:
43:64:cb:fd:52:2c:a5:9a:ad:50:ba:2e:0f:b0:4a:
35:57:ab:3e:89:3e:5f:1a:ce:ae:5e:66:c6:d4:3a:
73:5f:53:38:2b:fe:dd:96:89:01:19:30:62:d0:16:
13:1e:68:b4:f8:de:a5:33:fe:11:98:69:26:16:11:
70:1f:c2:71:88:14:9e:b2:a1:71:3a:ce:17:63:68:
04:61:4d:f9:75:a6:bc:51:69:57:f9:5d:15:91:f6:
c5:f5:3c:22:a3:95:57:d5:78:a3:ab:54:bb:91:c1:
9b:ac:02:f2:51:a8:c7:4a:2a:36:af:ba:82:2e:8d:
fa:a0:6b:1b:88:95:df:59:e6:e9:61:25:a2:d9:f0:
b1:60:b1:33:e9:db:c5:64:34:d4:4c:ed:d0:e4:df:
5e:bb:7e:24:9b:8d:9e:5b:9b:fd:9d:90:2b:6a:17:
bb:c9:95:e1:3e:6a:8a:04:6c:e5:be:91:6d:ee:2d:
ac:58:20:eb:32:94:e3:8c:28:b5:e0:5c:ac:6b:c7:
0c:e6:f1:da:7a:9a:0a:36:7f:e1:7c:1b:08:e4:2a:
a9:f4:9a:c1:19:be:97:66:86:fe:7d:f6:14:40:f0:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:3F:5B:5A:3E:77:56:0C:F3:FB:5E:D5:A5:D4:1B:FF:6D:9B:31
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6a:59:06:0f:9d:04:b6:bd:79:55:10:ef:bd:8e:8d:d6:4e:
af:79:38:ac:41:98:36:f3:69:8a:f2:f5:4c:19:c2:57:b0:cd:
7e:29:7e:41:2c:bc:90:79:a7:04:60:18:f6:72:a3:32:fb:86:
ff:ff:8f:91:de:67:33:b8:97:b6:c0:0b:8c:01:d0:cc:ca:7c:
f5:56:17:43:6a:26:a1:11:cc:96:00:33:43:88:cc:21:b3:f5:
10:58:55:08:e2:9b:0c:22:c3:a0:0a:aa:6b:5b:cb:aa:67:09:
3d:ec:3e:ef:38:8d:60:14:00:b6:ce:69:62:c3:5b:da:ff:50:
c9:d7:54:ab:14:f5:7a:d3:8b:c9:b3:05:85:67:dd:62:50:a6:
6c:ec:f7:b3:3a:23:b6:94:34:1b:08:22:ca:92:a4:7c:73:49:
9f:62:e3:11:31:ae:89:79:78:a7:bb:19:6f:60:ce:75:1e:2f:
82:b1:1f:71:28:7f:b4:e0:e0:f4:ae:eb:ca:24:a4:e8:ad:b0:
1d:2c:0e:8d:52:51:bb:73:90:e3:f8:c4:0a:4e:ee:05:3e:18:
b1:10:a0:0a:85:b0:84:8f:20:13:ec:21:da:42:f6:d4:d4:d8:
b8:4a:b8:f6:ab:9d:2b:e5:1d:d8:9b:76:98:b0:c7:9f:5e:76:
d9:5a:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:59 2026 by rpki-client