Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: O9IFswEXy+cNODNzJSUggDVy+zIOD52NfcL+1fVW9Bg=
Subject key identifier: 5B:61:DF:94:18:BA:AA:DB:6A:4E:BD:B2:23:FA:79:39:34:29:07:AE
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 01A0D45D8D0A1624FC8CAAB53253987DD904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 17:01:35 +0000
Manifest this update: Thu 24 Sep 2026 17:01:35 +0000
Manifest next update: Fri 25 Sep 2026 17:01:35 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: pBbzhmeGm0PEuIQVHtIdyblTF/J8iIU8FQqT/jDxTQY=)
2: tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa (hash: cB5CSJkT3O+9UBmuTizqC0w9ZxVIs1IRBERe6k5DKkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:8d:0a:16:24:fc:8c:aa:b5:32:53:98:7d:d9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Sep 24 17:01:35 2026 GMT
Not After : Sep 25 17:01:35 2026 GMT
Subject: CN=5b61df9418baaadb6a4ebdb223fa7939342907ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:81:c3:7c:0c:98:19:37:fc:6e:c0:3f:41:
65:59:5d:a3:da:ee:d7:9c:73:18:50:56:84:fd:1a:
06:26:1d:b6:55:cd:74:a9:71:41:88:72:80:37:0d:
6a:5d:6a:be:28:c0:b2:4d:5a:28:cc:07:74:a4:34:
8e:70:ce:6e:21:d9:19:3f:26:72:9c:60:4e:10:4b:
c1:82:f2:ff:47:6a:fc:7a:fd:2a:a4:73:e7:13:d4:
66:d6:9b:02:e4:6a:39:66:f1:be:88:e8:b3:92:ff:
c8:78:f4:ce:da:d5:8b:a5:86:0a:89:fe:18:68:3d:
78:03:c8:ea:fc:93:c1:04:ff:b9:d5:c8:65:6a:68:
68:76:46:5d:fa:6a:34:de:cf:04:43:71:bf:c1:42:
25:ab:1f:cb:67:3d:02:fe:bd:a5:1c:30:a6:3d:e7:
32:ca:90:72:22:7b:59:7b:68:fa:df:ec:d2:ad:c3:
9e:d2:75:a3:59:cf:9f:0d:e0:72:86:81:87:ce:56:
6a:34:8a:03:75:43:37:cf:b4:b8:80:0d:bb:f2:34:
be:61:5e:16:7a:ab:fb:c0:f9:98:0c:12:d0:94:4e:
40:97:11:2f:b2:ae:c4:d8:97:f0:96:b6:fd:1b:fc:
ab:1f:6d:f5:41:0a:58:5c:9b:d9:f2:a9:c1:0e:bc:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:61:DF:94:18:BA:AA:DB:6A:4E:BD:B2:23:FA:79:39:34:29:07:AE
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:9d:a1:d0:3b:be:36:ad:bd:ef:39:e1:a0:a5:ec:fd:c8:
0b:03:4f:76:8c:ac:45:4e:8a:fc:f2:33:d9:59:d2:8f:9a:a9:
ac:cb:58:2d:4c:05:bb:4a:03:31:0e:7f:9f:4c:7e:27:b9:cf:
0d:6a:fe:33:7c:ec:3a:6e:8f:c4:8b:a8:f7:2e:bb:c4:21:52:
83:bf:d3:69:23:b6:3b:93:c5:b9:58:28:81:5d:fc:31:71:64:
39:50:32:01:89:c7:6b:7d:35:6a:f5:4b:1b:b8:fc:0f:83:63:
1e:49:81:d9:41:b9:a4:2a:28:92:44:26:1b:62:7a:d7:d9:74:
78:bf:f3:c9:37:dd:39:7d:c4:56:75:90:34:69:ac:23:61:e7:
ba:4d:38:64:2c:30:c0:1d:cd:5f:82:db:b5:3e:46:16:a8:bc:
c4:d3:7e:56:dc:95:90:51:8a:82:cb:8f:25:05:5d:7c:cf:a0:
d9:92:3e:fc:8a:d7:ea:9c:34:84:2e:cd:d4:db:47:66:44:f0:
cc:c5:5a:ad:0b:82:04:2f:74:f5:1a:1f:bb:47:5a:39:c5:1c:
19:00:4f:93:ea:4d:b0:ff:5c:89:a6:13:cf:14:10:5a:c9:1b:
41:11:80:61:35:b3:2a:ff:6f:a7:6b:bf:9e:27:f4:1b:b7:ef:
3f:74:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:15:06 2026 by rpki-client