Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: 3y7dG/dQYY0LCPMo7WGCwOHc1Zpg7ybnN/JAZ9nykHw=
Subject key identifier: 88:9F:15:47:5E:1B:BC:E1:E5:BC:95:CE:F2:B2:34:B6:BA:55:78:D6
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019E31172A033F3E10BC33E3F18FEF357D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 14:01:02 +0000
Manifest this update: Sat 16 May 2026 14:01:02 +0000
Manifest next update: Sun 17 May 2026 14:01:02 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: /e5LOBxw1Znb8lOAgraElH89yMtsmx+SxJWmrSHZU9E=)
2: c57QPKVrulqe_tqOAQiAMnzGNHY.roa (hash: hBy4NZPhmcsKXhRSeI2d9E/JnPVdvroDZRs5OxnQU4k=)
3: enheJsXMtTxgm2wRND7dJgv8cak.roa (hash: C3fYygAIlGdruBbPXDLy8TVW2TRb7yeOUTAGkUC/fmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:2a:03:3f:3e:10:bc:33:e3:f1:8f:ef:35:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: May 16 14:01:02 2026 GMT
Not After : May 17 14:01:02 2026 GMT
Subject: CN=889f15475e1bbce1e5bc95cef2b234b6ba5578d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a7:3e:7b:2f:d9:ea:1d:05:4f:36:e7:89:ed:
73:07:6f:bb:19:92:fa:e6:91:80:8c:a8:3b:6e:d1:
f8:4d:ba:8b:57:fa:51:b7:d1:5d:ee:64:dd:2b:14:
c4:29:62:bf:18:72:37:97:01:ee:ec:d7:f5:d0:00:
c0:d9:a1:d8:c5:9b:c6:fc:1c:4a:a5:54:03:e3:3d:
b1:7c:3d:14:09:70:4c:7c:fe:5b:45:9a:9d:75:87:
bb:d1:b8:bb:c7:6e:f3:00:00:65:86:f9:d2:4b:8e:
c4:c7:97:5b:d0:76:c9:41:5c:c4:11:21:e3:63:b5:
6b:aa:b0:d1:23:47:1c:2c:48:ac:e8:f3:a9:7b:a4:
8a:08:cc:75:3d:dc:24:a7:1d:ff:12:30:52:97:7d:
cd:5f:aa:2d:2f:b8:a9:57:a3:9c:74:a3:1b:76:22:
b4:72:24:a3:bd:1d:fa:d8:55:49:64:fe:8b:15:39:
aa:6a:08:22:71:d3:6a:65:d1:30:87:a2:cd:2e:9a:
4a:85:0d:98:67:92:65:7f:38:50:50:96:ab:d6:46:
08:9f:0e:23:97:06:2f:0d:d9:84:d0:a6:4a:55:f2:
5a:a9:6b:17:be:f3:c6:4e:63:ad:16:a9:65:a8:44:
08:f7:43:21:26:9d:c1:ec:42:20:ec:e1:ca:08:ec:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:15:47:5E:1B:BC:E1:E5:BC:95:CE:F2:B2:34:B6:BA:55:78:D6
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:9c:fe:b6:95:e2:93:68:d2:bd:81:b3:6b:da:b4:c1:e5:
35:22:cd:3c:27:49:11:4d:a6:06:83:67:fb:ba:a4:fe:21:1d:
8a:eb:72:b5:4c:1b:cd:3c:29:d5:92:3c:05:c9:f5:e2:43:9d:
d4:9f:ab:44:31:bb:9e:9f:08:58:5b:72:53:ec:b1:e7:ce:67:
a1:80:24:e9:e7:76:0f:d1:fa:77:76:4e:8c:24:50:9c:b9:e4:
a8:c4:01:94:9d:5d:05:ff:84:ba:b1:67:b5:a6:a0:99:e0:25:
52:eb:7f:29:58:36:c6:9b:c1:2e:23:7c:ec:b7:fe:ce:13:7d:
90:10:e5:ca:c5:59:7c:5d:77:f9:b8:08:c0:3a:27:44:9d:f4:
db:4b:18:6c:ce:79:d4:43:ef:da:0a:f5:c7:8a:3f:80:49:6d:
57:22:7b:c8:b2:23:03:5e:73:4b:52:2f:89:74:a9:1d:53:72:
f4:93:96:68:11:f9:28:8c:52:e6:2d:be:5f:9f:d5:bc:1e:6f:
34:be:f9:ff:6d:0e:b1:6c:ab:a1:0c:3e:75:40:6d:94:be:93:
0f:7b:65:35:09:ec:4f:22:d9:8d:a6:2d:7e:ab:8b:87:0c:dd:
2c:11:14:d6:1a:4c:3e:bf:12:8b:57:a5:d9:eb:a5:82:2f:2e:
a2:9f:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:27 2026 by rpki-client