Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: vvnH3c81All9/KqKuyKz3ciZ1sbRLwfVu9XVxl6dhqM=
Subject key identifier: 12:25:8C:AA:E2:6C:51:31:ED:20:7D:D5:5C:31:44:07:85:8A:54:4F
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 019D288453E75DDFD7CE7A96A33C152AC748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 054A
Signing time: Thu 26 Mar 2026 05:00:53 +0000
Manifest this update: Thu 26 Mar 2026 05:00:53 +0000
Manifest next update: Fri 27 Mar 2026 05:00:53 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: PbBscmtYLkU9RjGVdI9RMFPhqh3hq+IHa3eRCrY2yVk=)
2: EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa (hash: efDuAmcnNpFOvzFx+pZEPqBZJO7OWPwyoMU32+Sy6mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:53:e7:5d:df:d7:ce:7a:96:a3:3c:15:2a:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Mar 26 05:00:53 2026 GMT
Not After : Mar 27 05:00:53 2026 GMT
Subject: CN=12258caae26c5131ed207dd55c314407858a544f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:65:4f:80:6d:b2:90:ee:e9:44:33:84:e0:
20:cb:cb:74:a6:e0:fa:7d:47:e1:b8:03:94:01:8e:
10:b3:34:f5:73:d2:dc:70:ad:9a:80:20:b7:b2:0f:
3f:01:cd:2b:95:7c:c7:4c:b6:1e:d0:ed:68:10:63:
55:b6:19:73:77:27:b5:e3:71:cf:f2:dc:2f:46:fb:
25:74:68:17:ed:f3:4f:7b:5e:b3:5e:9d:56:99:eb:
03:a6:63:cf:28:7c:bd:dd:9c:66:54:7e:a9:31:76:
cc:45:fd:19:b9:36:a5:00:c3:a9:5a:fd:30:4b:58:
97:a7:6f:79:77:1f:12:11:09:e2:14:40:1c:c8:93:
81:df:0e:df:75:ed:90:5c:69:84:90:3c:bc:af:b1:
51:af:5a:3b:eb:31:bc:e9:88:15:0c:ab:d2:fa:30:
26:49:86:2e:75:5b:31:10:9b:cb:88:36:49:61:2e:
5d:25:63:c4:bf:b6:ab:6d:16:b1:b8:32:e6:70:62:
25:2e:6c:c2:92:f9:d1:37:04:0c:28:f8:50:e0:aa:
03:bf:3a:0d:f7:06:1c:71:66:c8:59:04:b3:c1:8a:
2a:25:a8:4d:1e:90:2a:6c:df:0a:6d:2c:50:97:c7:
74:77:b9:c5:40:26:37:29:6d:3d:9d:fb:0c:7a:a4:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:8C:AA:E2:6C:51:31:ED:20:7D:D5:5C:31:44:07:85:8A:54:4F
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:4b:c4:f5:5e:58:7f:09:4f:a5:7b:8d:b3:0e:61:e4:8a:
67:60:ed:29:45:63:04:00:4f:f1:c1:89:a6:03:d7:0e:ae:6d:
ba:97:f0:f2:26:48:19:90:3d:f7:d1:7a:78:cc:3a:e6:c1:44:
c1:56:ea:d1:fe:5f:d4:df:be:9a:7d:34:a8:42:d6:57:89:40:
2d:94:c4:c0:cc:ef:5c:eb:0b:23:ef:12:cc:aa:e6:b6:4a:31:
9a:5d:0e:fc:9e:70:9c:7e:4f:96:44:1e:38:6c:89:8e:d0:6f:
f1:72:bc:ec:cc:02:e6:93:a2:c8:c9:79:72:92:02:65:96:8b:
73:d0:96:37:1d:48:4d:b8:ee:cf:d2:1c:49:13:eb:da:d8:b6:
2f:db:13:63:d2:5c:a5:d8:09:6a:8f:21:a8:74:98:07:46:3d:
11:f3:48:d9:f0:e2:47:ee:d8:bb:78:aa:25:b1:dd:20:86:0c:
dc:f4:bc:2c:7e:0f:2a:a0:b3:6f:79:91:17:19:b4:9c:14:74:
ea:92:a1:8c:a9:10:1d:b1:a0:08:1e:9f:41:9f:10:9b:6c:66:
c3:9a:fe:d2:89:3f:25:06:a5:5b:b9:30:32:44:76:16:ec:a1:
4a:56:fe:23:10:d8:67:1b:38:b5:3c:50:00:e4:f7:e0:32:b6:
aa:f5:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:40 2026 by rpki-client