Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: 55gmJr8+sOCnl9UCBzvmZCCqTxdhjtYMxZHuhD22tgs=
Subject key identifier: 36:3F:96:AE:DF:A3:43:8C:82:E4:31:9C:F0:B7:3F:CE:4E:04:69:A8
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019F905A4ADE97614A835630B63EF92F5C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 19:01:04 +0000
Manifest this update: Thu 23 Jul 2026 19:01:04 +0000
Manifest next update: Fri 24 Jul 2026 19:01:04 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: JMb+DGTcDUBHpmRXTIOqarpY+jbcHtU+a3y0hKUmnAo=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:4a:de:97:61:4a:83:56:30:b6:3e:f9:2f:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jul 23 19:01:04 2026 GMT
Not After : Jul 24 19:01:04 2026 GMT
Subject: CN=363f96aedfa3438c82e4319cf0b73fce4e0469a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:e7:91:2d:a8:4b:f4:59:f8:d2:27:9b:42:
f2:1f:71:58:6c:0e:b6:26:4a:ad:f1:aa:3f:5c:77:
55:58:7a:d9:c5:2f:a7:bd:16:41:bf:d1:40:3f:60:
a0:81:eb:86:dd:99:c9:62:a8:58:13:29:b3:ac:1a:
60:78:ca:57:9f:18:0d:e7:10:60:7d:a7:56:08:17:
50:9c:9e:07:3a:30:e2:ed:d0:58:98:21:a0:79:bf:
44:2a:b8:be:97:dd:7b:20:38:52:bc:6b:6d:5b:26:
95:aa:2b:74:08:b1:b6:da:be:35:bd:bb:90:77:1f:
dc:6e:5c:14:2c:98:ca:ba:ff:59:d3:04:3f:c6:08:
1b:9d:b3:bd:34:03:5c:97:d7:b1:34:da:ac:6d:4b:
8a:43:99:92:bf:d8:83:66:be:94:0f:43:b4:f4:c2:
96:1d:d4:0b:7e:0d:9b:41:da:4d:61:f4:b4:11:4b:
8a:98:9e:49:56:90:93:e3:ff:ab:bb:2f:74:b1:ee:
d0:26:70:0f:cd:1f:61:3f:47:27:f6:93:9c:e1:c2:
80:0e:4e:a0:a4:b9:c4:1b:6d:a7:a9:51:04:7c:e5:
d5:7e:80:93:2c:54:a1:c5:cb:e6:1d:ea:3b:f2:bd:
5e:c9:45:29:5c:fb:97:ba:88:8a:fe:89:56:63:4a:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3F:96:AE:DF:A3:43:8C:82:E4:31:9C:F0:B7:3F:CE:4E:04:69:A8
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:cf:ad:20:88:db:6e:ab:d3:25:1a:65:c0:55:ae:f9:ba:ad:
eb:94:af:e6:3a:c8:57:5c:dc:e6:4e:4e:85:e0:3e:e2:ba:0c:
66:06:34:89:96:e3:69:37:4f:ea:3c:f0:5d:3d:25:24:12:7a:
f9:8c:26:ad:b7:c8:24:9a:8c:4f:06:0e:85:61:31:13:c6:f5:
d2:c3:18:25:84:34:2a:49:9c:4b:8d:d0:c6:22:94:b2:ae:df:
0e:86:44:d0:44:fe:3a:6b:ac:e0:3b:63:9a:50:51:74:f7:13:
c5:31:a0:c3:07:53:98:ae:4f:f3:62:58:5c:6a:17:85:19:7c:
35:1f:d3:46:91:ea:2f:3c:59:9a:31:9d:fe:aa:e5:c4:1a:b9:
2c:83:8f:51:2e:3b:08:9c:9d:79:47:dc:66:e5:08:7b:f6:f1:
8e:ab:87:ca:29:91:b8:63:f4:60:06:59:d6:78:08:c8:fb:c9:
56:74:38:67:87:01:7b:e3:fb:eb:11:ac:2e:bb:e2:53:7f:d8:
e8:17:af:7b:be:2a:d3:b2:49:8b:d8:5e:3f:10:4b:aa:14:fc:
e5:36:d8:51:fa:f5:29:03:a9:3f:dc:76:45:38:38:aa:ac:a7:
54:9e:4c:66:bc:71:83:ac:75:55:f4:5c:82:70:f1:29:d3:77:
9a:06:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:33 2026 by rpki-client