Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: CYwaoMrwFEz0jNE9BN+dqhltSfZrrJsoEunqC6Of1lQ=
Subject key identifier: 7A:C0:08:C5:CE:67:16:19:B6:6A:2D:E4:07:1D:79:C1:F5:5D:84:DA
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 019F9022EF41454F69C7C40F4C8241AF1DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 1964
Signing time: Thu 23 Jul 2026 18:00:36 +0000
Manifest this update: Thu 23 Jul 2026 18:00:36 +0000
Manifest next update: Fri 24 Jul 2026 18:00:36 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: 2buZv5aKgDWWtviQes0/vvqd2LXIw0qbTbHiELUIwVY=)
2: inWJjPlJFW21pp4od2z3iY_uZEk.roa (hash: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ef:41:45:4f:69:c7:c4:0f:4c:82:41:af:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Jul 23 18:00:36 2026 GMT
Not After : Jul 24 18:00:36 2026 GMT
Subject: CN=7ac008c5ce671619b66a2de4071d79c1f55d84da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:36:e7:f8:5c:14:3d:61:38:18:15:b5:67:
0b:97:aa:45:c6:4b:ea:00:fe:77:c0:fd:20:de:4d:
6e:7d:f8:1a:1d:f9:6c:81:13:a8:e4:fe:e6:27:53:
a4:f0:19:ff:19:60:8b:34:72:fb:b2:36:30:96:7b:
8a:7b:90:fe:c2:c5:7b:42:4d:76:0a:77:68:0f:ce:
47:a6:21:d5:5f:7f:3a:16:41:1f:08:16:84:05:26:
24:fd:70:50:83:25:6e:a2:a0:61:3c:aa:a5:6a:29:
db:77:6c:91:60:44:19:1a:c0:93:c9:e7:fb:58:cb:
6b:20:eb:fb:c2:82:78:eb:80:65:a6:6b:0a:35:0c:
64:fd:8c:f2:9c:75:09:72:64:fa:ba:9e:60:27:f7:
34:4d:98:e2:34:6d:ba:aa:9d:80:32:b0:11:45:ba:
77:c7:a7:b7:cd:a9:11:bc:98:97:65:04:fa:0a:d4:
51:e1:b3:67:98:39:cd:1f:59:c1:bf:2a:88:94:9e:
d8:fb:54:0f:70:99:5a:7e:dc:9f:ad:7e:4f:59:6f:
b5:e3:b5:73:d3:cf:24:ac:80:78:9d:7c:17:68:52:
83:f9:56:72:60:f6:38:b8:9a:ac:f1:5f:1f:e7:d5:
3b:58:2e:6f:bc:02:35:bd:a4:47:0b:ae:ed:9f:cd:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C0:08:C5:CE:67:16:19:B6:6A:2D:E4:07:1D:79:C1:F5:5D:84:DA
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:40:5e:b8:fc:5f:2c:97:09:3e:58:b5:1c:2f:93:a8:6d:
ac:71:c3:46:dc:31:f0:69:2d:b2:7c:15:ed:30:6c:b9:03:51:
79:68:bc:42:8d:3e:85:e6:56:e3:ae:4a:be:11:c6:af:5c:56:
5b:bd:78:26:b2:d5:97:68:88:7e:54:ec:03:a1:e5:7f:58:cd:
c3:ee:48:27:32:50:bd:1d:86:34:44:04:06:b8:a5:e4:9c:c1:
6a:57:96:62:bf:a2:6a:40:9a:f0:88:a8:84:47:40:92:fc:69:
e0:d2:ae:65:1d:48:71:fc:cb:53:c8:fa:cf:7c:f8:0a:95:0c:
67:0d:a6:c9:d3:24:0a:b5:d7:e4:95:ff:83:b6:73:25:7c:50:
06:61:06:97:ec:29:a6:d1:39:96:29:22:50:1f:66:fd:97:8b:
89:cd:d3:85:9b:96:90:8c:81:7b:02:8e:25:91:6a:44:73:13:
41:4c:82:e5:04:a3:b8:6a:d7:43:0e:3e:10:23:f9:18:b5:cd:
9d:06:e3:6a:07:97:ae:52:e5:6f:4d:4b:bf:22:98:3a:4a:7c:
12:ed:da:f8:1b:66:bb:15:97:2c:99:e5:0a:cf:8f:e6:4a:ed:
99:bc:dc:10:53:cc:0a:bb:78:f0:df:8a:1e:b8:23:21:94:49:
1d:5e:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:52 2026 by rpki-client