Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: PAEA4H0VVXMRUK2t0uaVMOl1meglKgb4oDnqNUvG30s=
Subject key identifier: 3A:93:9B:CF:38:B6:8A:15:13:7F:9D:88:3F:EA:8B:CF:5D:56:E9:F0
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 01A064FF56D3596813B87ED800DF8F23FF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 0409
Signing time: Thu 03 Sep 2026 02:00:50 +0000
Manifest this update: Thu 03 Sep 2026 02:00:50 +0000
Manifest next update: Fri 04 Sep 2026 02:00:50 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: uGb8TRzU5v3ZFd53bYEafkdc7xTuc4X9dKBTS2sQI3E=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:ff:56:d3:59:68:13:b8:7e:d8:00:df:8f:23:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Sep 3 02:00:50 2026 GMT
Not After : Sep 4 02:00:50 2026 GMT
Subject: CN=3a939bcf38b68a15137f9d883fea8bcf5d56e9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:c3:89:f5:ec:19:73:a3:c1:44:98:0b:87:
56:14:51:92:ff:2b:6b:88:c9:e2:30:28:f7:96:3f:
c4:8d:67:9e:e6:a4:e7:32:0a:f5:85:ba:cd:dc:20:
9a:48:4c:d5:d4:aa:be:de:12:be:c1:07:72:9a:ea:
f0:4c:99:77:6f:93:84:1b:06:b3:e6:03:b1:1e:81:
6a:46:c1:85:4a:14:98:14:08:d3:33:a9:dc:bd:4d:
1c:55:24:39:16:d7:4f:bf:3f:17:d8:b3:c9:45:51:
b5:6a:41:26:34:65:cd:69:1b:05:9e:3e:c5:4b:03:
8f:ce:22:c5:a4:ca:22:46:ce:35:ed:dc:62:7b:66:
41:ee:7b:ed:31:e0:f2:ad:73:cc:b8:31:a8:ec:65:
aa:44:3a:a4:c6:ef:12:3f:06:ee:e1:f4:fa:18:b0:
ab:df:dd:bd:12:c7:8c:a9:ea:bf:e2:cb:6c:c6:2c:
11:9b:35:9c:b7:ac:5f:c5:5a:c8:78:1a:4c:55:f2:
9c:b0:22:4b:0a:a3:58:c0:0e:fd:49:1c:df:b2:60:
d6:3f:32:44:d7:90:1f:15:4d:5d:c6:4f:00:e4:f6:
b1:1e:05:84:88:a5:1d:37:67:28:83:8d:3e:fe:12:
8c:f4:0f:58:00:82:61:03:75:a4:a1:bf:18:a3:56:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:9B:CF:38:B6:8A:15:13:7F:9D:88:3F:EA:8B:CF:5D:56:E9:F0
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f4:a7:d9:7d:ab:58:b6:84:72:c3:ec:89:2b:0a:c3:dd:80:
69:b9:9a:99:09:2e:f8:08:bf:74:4f:d1:3b:38:8d:25:91:83:
9d:ae:df:a7:b4:19:aa:2d:be:3c:bd:42:43:56:f8:e3:e9:a1:
7d:cc:59:a2:37:46:d7:dc:7d:2d:74:72:30:ed:68:84:f5:81:
d2:80:d4:70:fc:93:2d:9f:4d:a8:69:de:00:38:ee:cc:b3:14:
c6:73:f7:00:31:50:04:42:bc:27:26:52:8b:ba:16:4b:3b:3e:
0a:8e:30:7e:27:e2:a6:3e:4a:e8:36:11:7e:e9:e7:21:a4:e2:
94:05:41:59:83:f4:a4:08:72:d6:d5:4a:ca:6f:53:80:0d:c1:
42:ba:ab:0c:9b:15:bc:09:f3:6d:59:0f:ae:ed:0f:51:54:5b:
30:7e:ed:16:e2:99:78:ee:ec:b7:52:ad:8e:8c:f4:7a:ce:8a:
b0:d9:a1:60:a2:00:e6:54:3b:0b:46:c1:f4:ff:51:30:b2:1f:
da:55:92:7d:d4:8f:94:d7:88:da:f1:8b:d3:8c:17:81:29:98:
ec:ab:f5:42:47:72:a5:81:77:ce:40:33:d9:9f:86:e4:69:00:
42:58:96:7c:b8:2c:4f:57:d2:17:2e:42:e5:e7:77:1a:5b:96:
aa:7e:e1:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBk/1bTWWgTuH7YAN+PI/9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzE4ODE3NzhhMWUxMmY2ZDk3YzUyODhlZmQ0Y2I5NTYz
ZDFkNDkwHhcNMjYwOTAzMDIwMDUwWhcNMjYwOTA0MDIwMDUwWjAzMTEwLwYDVQQD
EygzYTkzOWJjZjM4YjY4YTE1MTM3ZjlkODgzZmVhOGJjZjVkNTZlOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSLDifXsGXOjwUSYC4dWFFGS/ytr
iMniMCj3lj/EjWee5qTnMgr1hbrN3CCaSEzV1Kq+3hK+wQdymurwTJl3b5OEGwaz
5gOxHoFqRsGFShSYFAjTM6ncvU0cVSQ5FtdPvz8X2LPJRVG1akEmNGXNaRsFnj7F
SwOPziLFpMoiRs417dxie2ZB7nvtMeDyrXPMuDGo7GWqRDqkxu8SPwbu4fT6GLCr
3929EseMqeq/4stsxiwRmzWct6xfxVrIeBpMVfKcsCJLCqNYwA79SRzfsmDWPzJE
15AfFU1dxk8A5PaxHgWEiKUdN2cog40+/hKM9A9YAIJhA3Wkob8Yo1YMqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqTm884tooVE3+diD/qi89dVunwMB8GA1UdIwQY
MBaAFARxiBd4oeEvbZfFKI79TLlWPR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgt
NDJlYTQ3YjEyNTM3LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgtNDJlYTQ3YjEyNTM3
LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvSn2X2r
WLaEcsPsiSsKw92AabmamQku+Ai/dE/ROziNJZGDna7fp7QZqi2+PL1CQ1b44+mh
fcxZojdG19x9LXRyMO1ohPWB0oDUcPyTLZ9NqGneADjuzLMUxnP3ADFQBEK8JyZS
i7oWSzs+Co4wfifipj5K6DYRfunnIaTilAVBWYP0pAhy1tVKym9TgA3BQrqrDJsV
vAnzbVkPru0PUVRbMH7tFuKZeO7st1Ktjoz0es6KsNmhYKIA5lQ7C0bB9P9RMLIf
2lWSfdSPlNeI2vGL04wXgSmY7Kv1QkdypYF3zkAz2Z+G5GkAQliWfLgsT1fSFy5C
5ed3GluWqn7htg==
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:38:23 2026 by rpki-client