Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: uar2i2Dhz6kis6h9FbAOR51GHC+1dbYOLVFfNYOwUxI=
Subject key identifier: C8:AA:02:90:12:7B:BB:E5:AB:6D:1A:15:37:6A:52:1A:D9:D8:AF:2C
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019F7106749F1244A1F383FE702E804B0CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0B64
Signing time: Fri 17 Jul 2026 17:01:16 +0000
Manifest this update: Fri 17 Jul 2026 17:01:16 +0000
Manifest next update: Sat 18 Jul 2026 17:01:16 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: qNvVnyMHGTBw0F/4wmeBw9fFkRSLeoM+EDuqxYOPOyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:06:74:9f:12:44:a1:f3:83:fe:70:2e:80:4b:0c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Jul 17 17:01:16 2026 GMT
Not After : Jul 18 17:01:16 2026 GMT
Subject: CN=c8aa0290127bbbe5ab6d1a15376a521ad9d8af2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:e5:32:86:f3:ba:fc:a8:78:e2:7f:30:2d:
a0:bc:c9:f2:b0:47:46:8b:83:f1:9c:77:10:d3:fa:
0c:8a:8b:cd:4a:9b:93:80:6d:39:98:d0:cc:f5:26:
d9:77:85:f0:71:18:5d:a5:f4:03:c5:71:42:7a:ef:
bf:fb:4f:06:5a:c2:b9:43:32:8a:6c:48:f2:e9:ab:
19:2f:37:11:aa:58:fc:c4:cb:5b:75:ab:4e:b0:85:
9a:62:07:00:2c:54:ad:f2:65:97:75:4a:ae:93:5d:
65:53:ed:b4:ac:da:c5:5b:7f:4c:0a:b2:02:24:8f:
8a:b7:4d:c2:e9:fc:7c:14:90:41:93:c7:71:26:03:
23:92:58:fc:55:6d:4b:88:34:31:d7:a2:cc:8f:b0:
da:c0:c6:d5:fd:16:91:45:cd:6d:6c:3d:3c:09:67:
2c:fa:6b:dc:da:8e:21:d9:c3:61:7d:e4:ab:15:3b:
af:92:37:b1:ac:38:d1:ea:1e:0d:bd:ca:2d:f6:79:
da:87:16:14:06:63:54:ea:89:66:80:bb:6d:ad:c5:
12:cb:bf:9b:9c:dd:a6:4d:ba:46:1e:df:79:cc:47:
f6:21:29:58:c7:34:f0:f3:b2:f8:d0:17:72:41:32:
6c:1d:1f:fe:0d:40:ea:b2:7e:c6:f8:ac:20:29:ac:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:02:90:12:7B:BB:E5:AB:6D:1A:15:37:6A:52:1A:D9:D8:AF:2C
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:fb:01:ef:86:02:4b:55:4b:33:d6:fd:19:81:07:2e:e1:ce:
45:45:b6:df:bd:95:c9:5b:42:cc:90:55:5b:e5:44:68:d6:ed:
8a:e2:96:da:8c:2e:3f:e1:1f:6c:04:b0:d4:0d:82:73:d9:b3:
83:fd:43:f9:6d:4f:e8:de:1c:86:a3:dd:34:45:d0:65:0f:ce:
7b:7a:4b:0f:13:cc:1a:20:f2:32:8d:76:6b:50:df:af:0e:b7:
93:c6:20:f2:83:17:d1:13:f7:4a:96:cf:dc:c6:ec:9f:c5:c0:
3a:a5:f4:c4:df:33:23:80:04:c9:77:25:09:f2:2f:26:f3:cf:
cf:02:80:a3:c6:8f:4b:79:71:06:43:9a:6f:3e:dd:30:72:ab:
f5:e9:cb:5d:75:0b:c7:46:32:51:de:83:8e:59:b2:2b:7b:44:
33:e0:3a:f2:98:7a:f5:3d:bb:8b:b3:6a:8a:e5:4d:8f:53:9f:
e7:e4:8b:3b:20:40:71:75:cc:7e:66:7a:2f:da:eb:54:cd:f6:
cd:c7:c1:36:c1:b9:81:db:e8:47:0a:58:c4:ad:63:57:90:79:
14:ca:3f:80:1f:dc:90:25:4f:e5:54:a1:66:a2:b5:d1:5a:43:
4a:b6:ca:d9:d5:34:4b:e8:97:9a:ac:1b:a8:fa:ba:bb:cb:c8:
49:c8:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:42 2026 by rpki-client