Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.mft
File: BHi2EPnjpf-HqRAROXhup8RRtds.mft (raw, json)
Hash identifier: 98rqrVR2odRNPbBDDE4TxEJQIXk7BKjbB5imsvX+v5g=
Subject key identifier: 8F:2E:1A:54:36:AE:9E:CE:20:8D:43:2D:E5:3E:03:97:B1:27:97:19
Authority key identifier: 04:78:B6:10:F9:E3:A5:FF:87:A9:10:11:39:78:6E:A7:C4:51:B5:DB
Certificate issuer: /CN=0478b610f9e3a5ff87a9101139786ea7c451b5db
Certificate serial: 01A1DE712884E9B646D38E4DDB0FE7C6EF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHi2EPnjpf-HqRAROXhup8RRtds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.mft
Manifest number: 62
Signing time: Sun 15 Nov 2026 09:02:00 +0000
Manifest this update: Sun 15 Nov 2026 09:02:00 +0000
Manifest next update: Mon 16 Nov 2026 09:02:00 +0000
Files and hashes: 1: BHi2EPnjpf-HqRAROXhup8RRtds.crl (hash: w240BDaHPA4WdQDFJeDQH5x8VfLKTRJhcb38gTqM8H8=)
2: BvupPkY9aMdrCuQ-DHXkIgunbwU.asa (hash: hJ4pRIcjUKbdB2J43oy+Ga7ZNfGGaCp2j5tIEMB4TMg=)
3: kMMvUU1KhwMWB1eN5jr7z3rC2M4.roa (hash: Wbjx72BQ7KAi4cQ5JyauYKfTDyHzuBfzhbJhEOb9IHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHi2EPnjpf-HqRAROXhup8RRtds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:28:84:e9:b6:46:d3:8e:4d:db:0f:e7:c6:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0478b610f9e3a5ff87a9101139786ea7c451b5db
Validity
Not Before: Nov 15 09:02:00 2026 GMT
Not After : Nov 16 09:02:00 2026 GMT
Subject: CN=8f2e1a5436ae9ece208d432de53e0397b1279719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:e9:4c:f5:78:67:89:3d:59:d3:85:c8:51:
22:9d:04:a0:65:af:80:50:1b:ac:42:92:7c:5a:ca:
e4:79:3c:41:ed:3b:ae:e5:03:6b:d3:04:eb:ce:dc:
89:45:6a:e3:3f:7a:36:db:66:fc:09:6f:2c:1a:c2:
0d:e8:b3:e5:2d:d6:bd:3d:2a:68:b0:21:e2:ba:bb:
08:59:b8:a3:d3:34:39:55:c8:2b:16:22:1f:4a:4c:
e8:ac:3d:f8:d0:48:08:8c:72:f3:8f:82:09:77:a6:
75:c2:b5:ac:ca:6d:ce:97:dc:3c:a5:b5:ef:89:74:
b5:e1:53:9d:20:2a:85:16:68:6a:3e:ee:6a:01:6e:
1d:ad:50:87:14:c9:4b:55:b8:5e:93:d9:96:6a:70:
34:0d:bc:98:98:e6:ae:b4:49:35:24:08:8e:63:0d:
a4:2a:5c:03:65:eb:74:72:f7:7f:bb:32:88:5e:ae:
10:ed:62:5a:e9:1b:6e:e8:13:5c:85:a1:5c:34:c0:
8a:d8:36:18:ea:79:86:77:e7:d9:9b:b3:de:3b:7f:
56:b5:92:a8:d4:90:3c:21:a7:13:a0:9c:af:89:01:
9b:b4:09:69:bd:36:d1:a1:f5:0e:9b:c6:d4:6f:f2:
84:97:8f:f6:40:f4:d2:de:d1:af:79:5e:c3:94:fa:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:1A:54:36:AE:9E:CE:20:8D:43:2D:E5:3E:03:97:B1:27:97:19
X509v3 Authority Key Identifier:
keyid:04:78:B6:10:F9:E3:A5:FF:87:A9:10:11:39:78:6E:A7:C4:51:B5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHi2EPnjpf-HqRAROXhup8RRtds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:20:32:cd:bf:e1:96:7f:23:de:56:66:d4:f8:8d:94:06:
66:b8:0d:bf:71:ac:f8:6e:f5:32:31:b8:ca:69:ac:6f:6d:fd:
be:e4:68:75:dc:12:82:a7:07:2a:e3:de:71:56:cd:bf:fd:40:
f6:25:2f:46:8f:73:db:62:79:ee:36:d0:b5:c8:b2:ff:d2:ed:
d6:46:58:46:b6:8e:17:77:03:50:e8:a7:ec:d9:06:ea:b5:6e:
c3:dc:da:8c:52:e6:15:92:6e:0c:74:2e:e7:8a:78:b9:2f:bc:
64:b6:0b:c7:c4:68:ff:b7:b5:79:2a:87:8f:18:c9:ff:fd:e8:
81:45:6e:82:9d:7a:31:51:cb:d1:b3:cc:2e:e1:fa:a4:73:e7:
23:2f:1d:4d:0f:f9:69:6c:10:b9:9a:c4:63:b7:2f:a2:0c:d9:
83:94:e4:99:d8:a3:d3:ee:b5:17:dc:29:3c:70:ba:2e:51:4b:
1b:75:a7:6d:ed:dd:6e:92:c4:9e:3a:fc:8b:f3:dc:06:2c:3a:
06:4c:8d:b1:25:c9:60:db:18:da:1a:60:3e:c5:53:e8:47:36:
0b:e5:32:b7:bf:94:da:8a:3b:57:8d:95:f1:d7:49:e2:e5:4e:
00:c0:3c:7b:70:c1:ce:f6:44:73:a8:a3:5f:28:58:08:3c:93:
b9:c5:e1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:20:55 2026 by rpki-client