Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: anWzLO/5YoS+NnaIlWEXek96IbfYYOG2Ky6VLxT4gqI=
Subject key identifier: 2B:7D:F5:7E:6C:AD:F5:E9:A8:A9:F8:4E:C4:8D:E8:AE:3E:6D:AB:FF
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019E1D900BD55282615C8044902F1D2F7979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:00:39 +0000
Manifest this update: Tue 12 May 2026 19:00:39 +0000
Manifest next update: Wed 13 May 2026 19:00:39 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: AaOOKvGSGPMV/f91NmeoFgMTtyLqazDFJ0PFEecmNSA=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:0b:d5:52:82:61:5c:80:44:90:2f:1d:2f:79:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: May 12 19:00:39 2026 GMT
Not After : May 13 19:00:39 2026 GMT
Subject: CN=2b7df57e6cadf5e9a8a9f84ec48de8ae3e6dabff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:7d:8c:98:a2:fd:80:28:11:1d:78:bf:4b:
77:7f:32:19:27:a9:3a:7f:92:b0:94:18:ed:0e:7c:
91:3e:9b:0e:23:4f:ac:07:8e:7e:8e:a9:c3:f0:cb:
9e:48:fa:df:79:a9:33:c7:c2:f6:df:83:b3:14:f2:
27:54:77:05:11:5f:04:fe:ee:95:03:7c:9c:b6:68:
9d:6f:2f:78:15:98:ad:d9:61:f6:17:e9:90:ec:ff:
50:36:21:10:d5:0d:5e:fb:92:b1:d0:b7:c6:1c:06:
17:b7:09:20:b9:0d:7f:d6:14:31:bb:69:e3:30:05:
91:89:b5:20:bc:1d:be:a4:4a:52:f5:8a:d9:3e:e3:
62:63:6c:0d:33:b5:de:43:fd:28:e7:eb:0a:75:df:
d6:2a:81:dd:e0:a6:5f:2b:82:a2:61:68:c6:77:3b:
ba:89:ba:d3:7a:52:be:43:92:56:1a:a8:0c:39:be:
0f:40:15:9e:59:f5:e2:4c:8b:50:e1:60:03:00:ea:
57:43:4d:c3:27:22:88:47:94:7b:75:cb:b3:48:85:
1a:7b:4c:c7:62:92:b7:4b:94:c5:75:86:6a:fe:89:
8f:6d:ca:8b:72:f4:fa:46:91:a6:01:3e:fe:3e:75:
94:a7:32:31:78:3f:8d:c2:09:0b:5b:25:f9:af:12:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:F5:7E:6C:AD:F5:E9:A8:A9:F8:4E:C4:8D:E8:AE:3E:6D:AB:FF
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e0:91:61:b5:b1:27:02:50:a6:31:4b:5e:4a:6f:8e:a0:f6:
2f:f7:f7:0e:52:b0:2d:59:9d:c0:2d:7c:62:20:7e:35:56:1e:
61:fc:7e:59:b5:89:ab:3a:36:55:8a:74:3e:3f:80:da:86:bc:
5a:64:db:79:ae:3d:6a:85:f0:d1:f5:33:e2:28:07:57:83:d2:
85:eb:65:e2:a4:0b:30:89:de:b2:90:66:3c:39:f2:d8:b5:42:
78:9d:d4:9a:ba:48:43:41:9a:fc:56:12:8c:9f:1d:1b:72:fc:
24:75:bd:e6:49:69:d2:b4:02:a2:b3:dc:4e:8d:77:20:0e:1f:
64:78:1c:87:e5:83:e9:ed:8e:b6:e7:69:5b:43:d4:f5:24:49:
5e:dd:a3:c2:fe:3f:9a:8e:ec:3c:b2:7a:e0:e0:9e:c3:a2:31:
84:5a:a1:10:87:6e:b8:e8:89:ac:ba:03:5a:89:e1:73:2f:d6:
51:ce:81:ac:ad:68:0b:cd:de:8c:02:79:65:24:b7:ef:ce:91:
81:55:de:15:ba:30:49:57:26:e5:8e:e5:af:29:c8:b9:11:12:
e9:60:c8:30:76:5b:c7:f5:7b:2c:14:91:4d:13:70:0d:2d:a6:
d6:8e:26:44:6f:82:ce:be:2a:31:d1:43:2a:28:c5:eb:24:16:
f3:6f:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:46 2026 by rpki-client