Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: wK3sT5BFeoxBz331wTgGF2sdUDihrs2I+essVR6cmSs=
Subject key identifier: FD:FE:50:27:B7:41:83:1E:EB:C4:0D:AA:DC:4F:C7:27:7E:C1:B9:6E
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019D37F6DA9C0E2EBF37A2A460572D3F8A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:17 +0000
Manifest this update: Sun 29 Mar 2026 05:00:17 +0000
Manifest next update: Mon 30 Mar 2026 05:00:17 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: VTgqiz1Ci3mI2OJdHtfxNTtozu25Rjc//ysg7goCWro=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:da:9c:0e:2e:bf:37:a2:a4:60:57:2d:3f:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Mar 29 05:00:17 2026 GMT
Not After : Mar 30 05:00:17 2026 GMT
Subject: CN=fdfe5027b741831eebc40daadc4fc7277ec1b96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:0b:e2:7b:fe:4c:f1:e8:74:00:05:b7:a1:
62:1b:1e:8c:df:44:7b:80:d3:d9:52:e9:8c:2c:b2:
ec:de:a3:dd:c0:93:6a:16:29:9e:00:d1:24:4f:12:
05:02:1c:19:e5:6e:ba:61:81:52:90:99:80:2b:0b:
c9:98:ed:90:ce:dd:a8:60:ba:e7:fc:65:8b:d8:d7:
ff:97:c3:33:15:dc:8e:5c:fc:e1:62:31:28:6b:e8:
c2:2c:8c:30:db:33:59:63:69:1f:c3:21:3f:9e:77:
03:a1:09:9d:db:2e:f3:23:df:ab:f6:47:8b:ab:bd:
16:df:c9:2f:8c:84:9a:0d:44:7c:b1:fc:13:30:7e:
f9:95:6a:b2:ce:bf:b0:55:8a:67:0e:35:4e:9e:1e:
d5:b1:33:d9:d4:52:8e:b9:5e:3d:5b:00:7f:28:5a:
a7:c2:73:02:6c:77:40:23:36:a2:70:e0:9b:77:cf:
ef:a5:2a:1c:cb:9b:e8:a7:98:2e:79:ac:a1:d4:be:
09:ca:9b:59:80:31:be:2e:04:cd:96:4f:bd:58:03:
e1:d2:11:8b:3b:b9:5c:5b:3e:b2:7b:95:7e:1f:ad:
8d:d3:48:bf:07:fa:60:c3:f3:10:63:aa:57:23:12:
5d:a0:a8:93:bf:fe:0e:bc:87:75:ec:21:a1:fd:8c:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:50:27:B7:41:83:1E:EB:C4:0D:AA:DC:4F:C7:27:7E:C1:B9:6E
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4e:5d:15:bc:51:a4:d5:38:6a:59:c6:e1:35:69:00:70:c0:
79:a4:a6:45:4b:aa:cf:cc:8c:bb:ab:9e:ac:f2:b6:e9:6d:cd:
f7:42:d5:cd:33:f7:d4:c4:25:16:d1:b4:7f:3c:29:61:21:64:
05:b0:e3:31:ef:49:6a:5e:96:f5:30:c9:48:4a:da:4e:d7:9d:
66:9f:f3:fa:de:c1:09:04:64:2b:83:83:55:de:c1:4b:dd:93:
10:76:b1:28:e8:28:8d:b3:05:39:25:e5:4d:b6:65:15:f2:be:
33:a3:c9:60:50:59:49:2c:f5:ea:e2:bc:29:7e:2c:e5:57:29:
f7:55:cf:fa:95:b8:f2:fb:4f:9b:d6:31:38:e7:89:7c:48:06:
ac:9f:e1:71:dd:fe:1c:bb:37:fe:5f:f7:91:9f:8c:26:fa:09:
13:c7:e5:c8:64:4a:c4:58:1e:61:71:db:86:4b:2d:4c:eb:38:
e7:15:9f:1b:e2:ff:74:ae:ce:4f:f8:10:5a:1b:5e:f8:73:61:
5f:6f:62:02:77:33:af:97:be:cc:b4:26:c5:a2:69:8b:e9:76:
7c:22:53:fd:00:ae:04:cb:cf:82:86:e9:f4:0b:6a:e9:63:7b:
16:3f:4c:4f:db:f7:d8:d6:ff:b1:13:85:86:8c:d1:70:e7:9e:
a3:22:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:50 2026 by rpki-client