Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: s5lAPsZnbh66Amurk5w323yCO/k5Tbldru1lQ98tTzg=
Subject key identifier: 7B:41:2D:B9:8B:A0:1A:72:41:54:4D:65:8F:E8:F0:14:C5:1D:C2:52
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 01A13D4A8F5E2F8AB730CECFBEB0BE0D1EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 02:00:58 +0000
Manifest this update: Thu 15 Oct 2026 02:00:58 +0000
Manifest next update: Fri 16 Oct 2026 02:00:58 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: hgPEkflI0NHGXJRxVZ2knBRViYrJ/q50En5SCOiqSPQ=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:8f:5e:2f:8a:b7:30:ce:cf:be:b0:be:0d:1e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Oct 15 02:00:58 2026 GMT
Not After : Oct 16 02:00:58 2026 GMT
Subject: CN=7b412db98ba01a7241544d658fe8f014c51dc252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:12:8c:9e:8d:5e:36:a8:27:dd:06:82:4e:
6f:d5:17:0c:19:8f:c5:20:b8:35:36:62:02:a7:85:
6a:04:12:b4:07:83:cb:fe:24:c9:88:38:db:21:b7:
fd:f4:ec:38:3d:c6:96:4a:88:98:ba:1a:bd:56:40:
63:05:27:d0:8f:65:00:b2:8f:3e:c9:18:1c:d9:6d:
1f:13:66:e8:f5:27:75:e3:04:4c:b6:24:3a:ce:93:
f7:02:33:b5:36:35:3e:d6:69:ea:7d:96:eb:bf:66:
0f:d2:8a:5b:0a:1c:69:03:ae:e5:66:06:55:cd:e9:
07:85:ab:f1:ce:79:2f:8e:34:ea:6a:9a:ff:6c:60:
fb:3e:ba:b1:c2:c6:af:f9:22:d5:9c:d9:45:f0:f0:
16:93:4e:b7:1b:6b:f3:26:79:43:c4:e8:3d:26:47:
ec:e7:e4:3d:52:bf:44:58:39:27:2c:df:2d:c0:fe:
4e:d0:b6:61:6c:dc:36:20:47:e6:3c:ea:d4:4a:21:
fb:de:c4:0e:41:fd:02:33:98:0c:eb:c6:91:92:b8:
26:bc:eb:02:51:50:4f:f5:e0:7c:54:11:db:92:7b:
08:73:b9:5a:7c:d9:b1:a6:ec:47:21:4c:21:f1:92:
23:55:fa:80:8c:a1:08:4c:45:a0:46:43:2a:f6:8d:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:41:2D:B9:8B:A0:1A:72:41:54:4D:65:8F:E8:F0:14:C5:1D:C2:52
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:19:a1:eb:67:0f:53:db:be:24:20:32:fc:25:65:bb:20:21:
8a:4d:c3:37:f2:3e:39:6e:e5:20:82:2e:e8:6e:c5:32:f0:ba:
05:78:84:08:7e:c6:3b:07:76:94:22:03:07:9f:fd:8b:91:58:
40:9e:0d:46:f5:1f:aa:80:5e:f1:34:6f:28:59:97:88:c1:cf:
81:27:59:63:0b:52:63:6e:1f:a2:e8:aa:c7:40:5f:7a:62:f6:
0d:d5:f3:b9:d4:db:14:20:e6:5e:13:c8:1f:18:48:57:eb:78:
01:6b:91:26:2f:2b:34:71:31:a4:71:53:5a:e0:6f:f9:6b:df:
cd:3d:9b:c7:44:16:b4:06:80:40:37:8b:8a:b4:7f:55:a6:af:
29:7e:af:12:da:6c:65:27:d2:19:b6:fd:93:12:6e:f0:fb:23:
8c:94:19:5f:dd:7d:47:b1:96:e5:67:50:2a:63:cd:9a:8d:09:
42:3e:f7:49:ca:a4:89:52:ae:93:81:78:69:7b:02:b8:9d:48:
42:48:6d:04:7a:38:9e:ef:6f:09:67:ce:8d:a8:eb:75:28:f6:
59:9f:bd:4e:5d:8e:22:73:4d:79:65:0a:8d:fb:66:99:95:15:
a2:f7:7f:cc:5e:ff:fe:06:f5:98:30:ba:76:3e:1e:a9:7c:67:
37:4f:3e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9So9eL4q3MM7PvrC+DR71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzQ3YjU2NTg0NGUzZTJmYzcxMmZhYjViZTg1OTI0YWFj
NTg2NDMwHhcNMjYxMDE1MDIwMDU4WhcNMjYxMDE2MDIwMDU4WjAzMTEwLwYDVQQD
Eyg3YjQxMmRiOThiYTAxYTcyNDE1NDRkNjU4ZmU4ZjAxNGM1MWRjMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIkSjJ6NXjaoJ90Ggk5v1RcMGY/F
ILg1NmICp4VqBBK0B4PL/iTJiDjbIbf99Ow4PcaWSoiYuhq9VkBjBSfQj2UAso8+
yRgc2W0fE2bo9Sd14wRMtiQ6zpP3AjO1NjU+1mnqfZbrv2YP0opbChxpA67lZgZV
zekHhavxznkvjjTqapr/bGD7Prqxwsav+SLVnNlF8PAWk063G2vzJnlDxOg9Jkfs
5+Q9Ur9EWDknLN8twP5O0LZhbNw2IEfmPOrUSiH73sQOQf0CM5gM68aRkrgmvOsC
UVBP9eB8VBHbknsIc7lafNmxpuxHIUwh8ZIjVfqAjKEITEWgRkMq9o1HxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtBLbmLoBpyQVRNZY/o8BTFHcJSMB8GA1UdIwQY
MBaAFAR0e1ZYROPi/HEvq1voWSSqxYZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQt
OTdiMjE1N2NiYWQxLzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQtOTdiMjE1N2NiYWQx
LzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhmh62cP
U9u+JCAy/CVluyAhik3DN/I+OW7lIIIu6G7FMvC6BXiECH7GOwd2lCIDB5/9i5FY
QJ4NRvUfqoBe8TRvKFmXiMHPgSdZYwtSY24fouiqx0BfemL2DdXzudTbFCDmXhPI
HxhIV+t4AWuRJi8rNHExpHFTWuBv+WvfzT2bx0QWtAaAQDeLirR/VaavKX6vEtps
ZSfSGbb9kxJu8PsjjJQZX919R7GW5WdQKmPNmo0JQj73ScqkiVKuk4F4aXsCuJ1I
QkhtBHo4nu9vCWfOjajrdSj2WZ+9Tl2OInNNeWUKjftmmZUVovd/zF7//gb1mDC6
dj4eqXxnN08+Iw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:08 2026 by rpki-client