Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: 9qCiOQkbd2oe4LouOdeS4OmAdRmlhWP77i/Ts+Ww3A4=
Subject key identifier: 75:28:15:1D:49:97:28:D6:0D:B1:2B:95:D0:97:A3:84:52:CB:38:05
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019D2A3BBB0A3AD71399D15BCC2994D76FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 13:00:50 +0000
Manifest this update: Thu 26 Mar 2026 13:00:50 +0000
Manifest next update: Fri 27 Mar 2026 13:00:50 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: JATfERadgfrXaT5KtzFFv9q8Jz+sUrqnCFLqvRaoATQ=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:bb:0a:3a:d7:13:99:d1:5b:cc:29:94:d7:6f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Mar 26 13:00:50 2026 GMT
Not After : Mar 27 13:00:50 2026 GMT
Subject: CN=7528151d499728d60db12b95d097a38452cb3805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:ad:50:c9:c2:b6:da:ca:bc:d4:3a:be:b5:
d6:18:9d:11:0e:37:97:3c:4d:8a:7a:e7:dc:fe:da:
a3:c1:67:a1:1e:30:67:86:d1:e7:ab:95:01:3d:c9:
d5:00:a0:2f:37:34:38:a7:40:ae:65:6d:9b:bf:d8:
51:f6:d1:aa:c2:bf:8b:37:26:ee:26:c5:71:ad:5c:
54:90:25:24:cd:db:b2:00:c6:ba:35:a2:39:1d:cf:
ce:a8:0a:a2:ff:dc:0e:fa:62:a1:7c:5a:a6:2e:39:
7f:96:4f:02:43:cd:41:e9:45:d7:ab:55:de:9c:ac:
c7:28:b8:cd:7d:a8:b2:d5:02:92:d6:dd:0e:f0:b2:
5c:8e:75:42:1f:37:37:19:ac:24:31:ee:04:bc:66:
0f:47:fd:39:85:35:fe:bb:c2:76:43:73:3a:ec:49:
07:23:69:23:8e:77:38:ac:29:bb:13:64:b2:f6:02:
d1:b9:a1:b7:a8:26:48:3e:33:aa:f2:56:55:6a:da:
ce:7a:63:1d:0f:50:a0:54:2f:59:43:70:3e:67:e8:
f2:00:50:94:16:8a:9a:11:c8:70:bd:13:2c:70:6f:
31:96:08:4c:11:4d:0d:fd:a4:cc:43:b7:bd:ce:6a:
c1:af:e7:64:2c:31:e8:e9:d1:31:06:33:25:70:6e:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:15:1D:49:97:28:D6:0D:B1:2B:95:D0:97:A3:84:52:CB:38:05
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:9c:c5:d1:94:9a:49:9d:d7:bd:c5:1d:a0:c1:04:cc:3b:
f6:a6:67:e8:16:6e:70:c4:e2:b5:16:fd:f8:f8:22:3c:31:1a:
05:a0:42:74:7e:aa:70:4a:19:26:51:74:b7:e5:67:91:f0:06:
86:4b:05:b5:bc:a9:ec:41:c8:2d:38:94:70:69:90:01:99:aa:
96:3b:c6:02:52:8f:42:a8:46:6d:5a:37:a7:96:cf:6f:15:64:
a4:4f:85:76:db:5f:03:01:98:ba:4b:fc:9f:21:b3:30:93:06:
05:ea:ec:06:25:ed:76:b1:1f:c6:be:98:11:2d:89:1e:bf:96:
75:81:4a:a4:83:2d:95:10:ae:d3:0d:26:69:8e:a2:88:7a:da:
f8:a8:3a:8f:92:13:f0:d6:ef:a6:a0:ea:18:68:f5:8a:a6:22:
a1:86:e5:1f:91:8c:d3:e8:9b:89:b3:37:a8:95:5e:a9:cc:86:
59:92:23:47:40:f9:36:2c:1a:1c:d5:aa:05:c7:22:2e:7e:6c:
b3:26:84:f4:62:70:05:1c:06:40:fa:27:ad:2e:6b:a0:33:b7:
7c:6d:37:d8:b4:9f:4b:7f:6c:cf:ea:b5:96:3e:45:a5:51:c0:
70:3c:65:ba:4c:76:45:85:4d:7e:60:d2:ca:67:8e:72:5a:c4:
85:73:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:55 2026 by rpki-client