Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: AXen8UhQxbWqRMBAvtedKG7yQ0GoxacZTd+6nP2jHZE=
Subject key identifier: 21:40:BA:72:69:51:5B:7E:5D:23:16:BB:EB:21:11:B8:C9:C5:1E:C5
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019E31174E84B0720AB85E57A61254CCC7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 14:01:11 +0000
Manifest this update: Sat 16 May 2026 14:01:11 +0000
Manifest next update: Sun 17 May 2026 14:01:11 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: AvgNgCsUlwRmGpL2ZFLfTqgeEOb7nMMy2RFH+Zi7o84=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:4e:84:b0:72:0a:b8:5e:57:a6:12:54:cc:c7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: May 16 14:01:11 2026 GMT
Not After : May 17 14:01:11 2026 GMT
Subject: CN=2140ba7269515b7e5d2316bbeb2111b8c9c51ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:de:08:c7:09:d6:95:53:b6:8d:03:8c:92:
4a:1e:fa:ca:14:1f:ff:e9:69:66:6c:e3:48:9b:bb:
c7:02:b2:c1:ac:34:44:eb:16:17:ae:c8:8e:a7:31:
5c:5f:f3:c0:9d:90:58:d2:6d:87:25:66:c2:f4:75:
5f:c3:38:72:d6:58:68:bf:9e:52:9e:c3:c3:43:03:
e8:7b:2f:fb:e0:7e:69:9c:d9:81:57:dd:3a:a4:2a:
78:1a:52:81:c3:2c:d2:8e:4b:00:ea:8d:54:68:e4:
9f:a1:49:cc:cf:16:17:4c:51:21:e7:bd:81:b7:e4:
22:69:ae:90:99:01:6d:7c:e6:0e:41:f7:72:ca:56:
5e:da:aa:c1:39:7b:98:f2:f7:8d:7a:06:a6:1d:9e:
75:2c:ec:8a:5c:80:08:65:c4:ee:9d:6d:2e:db:cd:
9a:39:81:43:d3:3e:6a:8a:b6:25:35:df:18:fc:de:
34:d2:09:cd:66:86:68:cd:65:b8:d3:d5:61:2a:6f:
55:fb:8d:9c:af:a6:8b:8a:c2:9b:6e:66:56:d9:19:
cd:04:19:a7:00:2c:0f:64:ec:93:09:02:af:8c:43:
03:56:a2:20:3f:a6:f8:d1:51:b0:ae:5a:6f:e3:46:
4b:85:35:c6:ba:1b:74:d5:40:45:3f:30:42:18:cc:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:BA:72:69:51:5B:7E:5D:23:16:BB:EB:21:11:B8:C9:C5:1E:C5
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3a:21:a8:cc:f5:b0:62:e9:1e:33:ff:df:56:5e:3b:9b:24:
89:8b:93:3f:36:9b:ef:74:99:e7:0e:dd:78:23:ea:1d:ed:73:
e7:dc:2c:fe:c8:ad:35:08:19:14:8a:8a:2c:01:b8:17:78:b4:
d1:d5:ad:d8:d2:36:ad:cc:cd:86:2a:67:60:be:6b:a6:ba:75:
bf:2d:3e:bb:5d:15:25:bb:d3:65:9b:36:cf:9a:6a:b8:08:0d:
70:0e:41:e4:f1:eb:b6:4c:1c:93:86:c4:7d:9e:17:d9:e5:a2:
70:d2:e8:75:1c:f4:91:a5:54:f4:d2:e9:5d:29:4b:85:13:bf:
30:ce:12:9c:72:cd:8c:3e:98:b1:85:be:a6:a5:8d:85:a3:6d:
d2:67:b4:80:af:59:3c:ee:54:90:f7:a3:25:5f:04:47:8b:1b:
b0:f9:24:b0:1f:b5:02:dc:82:50:b5:f8:ca:6a:74:ca:54:6f:
fa:ff:8c:e1:5a:ea:af:5a:54:21:88:e5:e7:08:86:4e:8e:3b:
d0:c8:3c:e3:85:be:9d:bb:d4:a9:e4:90:6f:c8:cd:55:a8:dc:
a4:0d:d5:38:36:16:d4:c8:fa:d6:d6:ca:20:90:1a:7d:b0:b6:
e8:a5:02:7f:c6:72:fa:55:f8:8a:a9:ce:33:c6:ec:78:23:73:
13:cd:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:27 2026 by rpki-client