Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: WnF8FJWBGV/Zp3qL6BhMt1TaAh3rmIPw51PDmxSa2To=
Subject key identifier: 27:86:B1:95:B3:B5:28:00:FA:4E:D1:DE:CB:BC:E1:B2:83:B8:65:B9
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 01A13D13756E0E880BFE174AEF8919F728C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 01:00:47 +0000
Manifest this update: Thu 15 Oct 2026 01:00:47 +0000
Manifest next update: Fri 16 Oct 2026 01:00:47 +0000
Files and hashes: 1: 8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa (hash: R1f4TY4NVLDBlI4mibWng28Ip80KPchDGU+0MuMj7zs=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: +e6Mziqf28KPTuf8iEayRNRQDqSTDHylgj907xn/bHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:75:6e:0e:88:0b:fe:17:4a:ef:89:19:f7:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Oct 15 01:00:47 2026 GMT
Not After : Oct 16 01:00:47 2026 GMT
Subject: CN=2786b195b3b52800fa4ed1decbbce1b283b865b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:25:06:fa:fd:c4:af:eb:8a:91:e9:57:32:
b9:f7:96:3a:b7:1f:3d:99:97:80:88:db:29:5b:3d:
ca:2c:27:0e:cc:32:4f:df:b0:99:d4:6b:48:4c:72:
de:81:92:49:27:7e:63:39:12:e7:80:c1:87:e3:d6:
08:4a:e6:0d:aa:fb:d4:c7:ac:da:c7:ec:55:d8:00:
bd:3e:4d:ad:4e:90:67:99:59:48:41:38:e2:d8:fb:
24:ad:12:c4:f1:c1:0b:3e:4d:a0:52:75:02:56:bc:
1e:34:fb:7d:cd:04:ac:1f:63:1a:b7:92:cb:09:f0:
4f:3b:09:be:7f:c8:80:66:37:bc:db:70:b6:25:34:
7b:9d:cc:8f:22:02:1c:80:2d:81:22:89:e4:7e:63:
97:21:a8:30:ab:28:5d:91:05:35:3d:fd:dd:df:57:
4a:8b:a8:d4:ec:06:9e:a7:18:10:16:65:a2:70:01:
1a:c1:1d:41:d8:69:8e:ce:e2:bd:59:71:88:c8:91:
50:e5:c8:d1:d2:50:20:3f:0b:ad:f6:76:d8:87:e3:
e7:dc:e8:d2:50:8d:19:53:f4:1c:d1:8f:01:f7:4d:
be:fa:01:19:79:b1:e9:62:f3:3c:e5:df:45:6d:53:
ae:5b:5d:8d:f7:99:08:0f:94:88:85:f7:63:26:dd:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:B1:95:B3:B5:28:00:FA:4E:D1:DE:CB:BC:E1:B2:83:B8:65:B9
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:65:ae:2e:90:34:3f:af:50:30:b9:0f:8e:4e:00:e8:a2:f7:
07:f3:53:4b:ad:ec:d0:a3:40:42:74:84:a0:f9:e9:3a:f3:f2:
45:7d:50:d0:50:ae:ba:32:70:27:3b:cd:c4:5d:4f:3b:f7:e5:
74:81:a2:cf:b0:9f:b6:59:1c:1d:91:b0:39:82:eb:3e:6c:3f:
8a:31:ea:e6:f7:e2:d2:2b:d7:9d:8e:eb:6b:56:7e:76:7d:03:
6a:fd:8f:05:0d:e5:98:41:d7:68:90:e0:7e:43:0f:6c:8b:28:
56:fe:2b:af:ba:3f:a4:cb:ea:1c:56:43:89:b4:b5:43:b5:a8:
87:e2:dc:bb:0c:50:fe:a1:f1:59:9c:ce:89:e2:cf:96:7e:03:
20:50:ca:df:22:08:8d:a6:ce:08:b2:a2:ff:89:a7:4f:db:16:
22:e1:30:65:84:66:dd:35:8b:96:db:c3:c1:2d:04:e6:5b:e2:
e4:a9:1b:12:07:7e:50:b2:e7:f0:99:09:69:05:19:68:d9:3b:
16:92:9e:e0:b1:67:73:cb:af:bc:df:b2:a0:61:66:9e:39:44:
6a:b0:e9:fd:0a:ec:f3:df:89:35:e7:0c:83:fc:4d:9f:94:50:
3b:64:a8:db:b4:0c:e9:55:6e:94:3d:85:77:bb:5e:d7:32:16:
41:58:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:05 2026 by rpki-client