Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: Y1YD0QH0By9bZ1fnD29BdTKO87GQucHEyb/gyNT3400=
Subject key identifier: 46:54:C8:71:42:70:42:63:B8:98:2F:74:95:B7:68:47:B8:94:9E:F3
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 019D2816D86A0F753DD2A0275A214048ADDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 118E
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: L7-WIklCKzAwiReoXEp9xRVENo0.roa (hash: MFsW1dq4HLP+RBbceeVBdgcqk98TN9POqdqj/eyse6g=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: C/gY7I1emDsBDckS5Gbnb2R4L6P+VXQpCgYjYSTUPn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d8:6a:0f:75:3d:d2:a0:27:5a:21:40:48:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=4654c87142704263b8982f7495b76847b8949ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:b5:cb:84:9a:2f:b5:77:7b:70:fa:ea:15:
72:17:2c:a1:ec:0c:c1:19:88:f5:91:d7:21:57:ff:
d5:90:2a:ac:24:e7:59:27:f2:8d:9f:75:70:a2:68:
21:3c:fa:1c:f4:50:01:0f:82:cd:38:ba:b9:e8:f7:
54:e1:25:4a:7e:5a:25:de:25:d4:68:70:e9:b1:cb:
70:1d:45:f6:d0:f9:b2:4f:c6:7c:1d:e5:c7:db:71:
04:d6:a5:6e:f1:48:71:99:e8:68:85:11:e6:d9:94:
72:ec:5c:fb:85:d6:aa:4a:45:58:b4:6e:da:e0:9c:
04:60:28:41:c1:f4:c3:76:94:02:f3:be:9b:92:92:
dd:cc:d5:28:c8:f9:ec:77:1c:c9:1a:6b:81:5a:48:
26:f5:77:be:ea:d8:d9:2a:b1:f0:d1:b6:16:ec:af:
c7:db:1e:ce:fa:cd:a9:ac:f7:dc:0a:a6:fb:d0:74:
ea:9b:54:67:65:d3:c1:d0:2c:e1:08:86:3a:fb:32:
9b:c0:2d:e1:18:26:35:88:e2:3b:a6:c6:a5:77:51:
f5:0c:4c:2a:91:ad:2e:9e:22:d6:a2:13:fa:25:59:
c7:48:fa:90:47:1a:95:c0:6e:58:14:a3:1e:23:c1:
c9:19:44:3b:0e:20:e4:4d:5b:42:1e:8a:72:98:be:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:C8:71:42:70:42:63:B8:98:2F:74:95:B7:68:47:B8:94:9E:F3
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:bf:d4:98:38:7d:e6:39:16:b7:c3:c5:92:e7:02:11:55:
8f:0b:0a:d8:03:5a:4c:e1:eb:7a:2c:67:73:d4:da:4a:bc:0e:
1a:55:19:0d:d8:4d:5d:4c:8b:65:7b:a6:38:80:06:85:ca:e4:
9a:84:25:75:ec:45:f1:02:b1:4f:bf:ca:fb:31:30:1e:77:43:
d5:cd:f0:e1:08:ae:5e:2f:72:93:6c:86:66:32:2b:06:20:7b:
de:e0:df:a6:ce:9a:df:59:d7:94:d7:b2:f4:71:9a:56:7e:1f:
dc:21:83:e8:a1:ec:8f:27:09:59:54:08:ad:7c:5e:56:2b:27:
6b:21:51:50:d3:4b:6e:90:fd:89:b3:f8:07:9e:50:20:32:61:
12:aa:88:6f:01:f9:ff:0f:ec:38:d6:c6:0a:94:29:11:18:19:
4a:2e:37:e1:61:65:f9:83:b6:b3:f9:55:19:1a:c7:16:c7:8a:
26:35:60:cd:61:ca:28:95:36:81:ea:fb:d9:90:be:37:9a:83:
a9:34:f8:cb:28:93:3a:de:6a:1b:36:ee:64:0a:58:69:50:a1:
31:00:48:e6:f5:9b:ee:ee:90:11:31:4b:19:d1:c7:0e:db:7f:
ff:32:15:16:82:b9:b7:ad:0e:c1:4e:62:27:31:30:df:35:af:
f7:91:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:05 2026 by rpki-client