Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: Sj69eZV6Z97QsKnzsb2Dg132wK5DK8m+CEwn5MNM24c=
Subject key identifier: 04:81:3E:16:31:50:79:81:56:88:10:8B:29:A2:9A:19:B9:11:D4:DB
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019F189E8C3E18F258962C34A65311974188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 198E
Signing time: Tue 30 Jun 2026 13:01:11 +0000
Manifest this update: Tue 30 Jun 2026 13:01:11 +0000
Manifest next update: Wed 01 Jul 2026 13:01:11 +0000
Files and hashes: 1: 8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa (hash: R1f4TY4NVLDBlI4mibWng28Ip80KPchDGU+0MuMj7zs=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: PUNQCMQKjwGPeWKo7vZtSnA0hjh/Q/olqHNm4u+nrLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:8c:3e:18:f2:58:96:2c:34:a6:53:11:97:41:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jun 30 13:01:11 2026 GMT
Not After : Jul 1 13:01:11 2026 GMT
Subject: CN=04813e16315079815688108b29a29a19b911d4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:49:c8:62:97:1f:60:3d:f3:7d:d2:f8:06:
a1:c3:ab:a7:df:d5:37:65:76:0a:30:d7:d1:c7:c0:
2d:f5:47:94:f8:59:b1:59:0b:35:9b:65:a6:85:17:
d4:8c:74:cc:1c:60:e8:02:0f:2a:bd:05:29:ef:c1:
1e:9b:99:2a:6f:a1:56:82:d8:97:8e:93:e6:16:80:
c2:2d:19:96:c8:fe:01:54:8d:3a:ef:f0:a7:f6:ab:
ba:ed:5c:1a:ec:83:28:23:ce:b6:b1:92:b5:88:6f:
99:17:d7:fa:ad:cb:5c:c3:ad:6b:15:71:b0:0d:21:
a1:c1:51:ac:e9:1c:a6:d5:e9:a7:b0:3f:b3:b6:09:
c2:3e:12:f4:f8:45:eb:81:c2:e2:97:b1:14:61:7e:
72:c1:eb:5e:e4:73:7c:55:c6:9c:fb:00:c3:e1:8b:
c1:6e:c9:c8:6a:fa:87:88:bc:d0:68:83:5a:0c:58:
5f:d1:cb:58:1c:9e:61:65:16:dd:3d:65:9b:05:e0:
ce:5a:d0:12:a2:07:5b:41:58:b3:19:6c:85:bd:fb:
60:a7:da:86:53:56:83:b8:cb:b0:07:ce:1e:d2:61:
9b:9c:4a:2e:dd:30:09:9a:ce:96:22:55:a4:67:1f:
0e:7c:6b:f6:15:54:ff:14:48:73:b4:cf:59:a3:81:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:3E:16:31:50:79:81:56:88:10:8B:29:A2:9A:19:B9:11:D4:DB
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c7:e7:d7:f5:26:0e:09:22:e0:8b:d5:b3:3d:d0:a2:47:12:
fb:b5:e2:da:55:8f:9d:af:6a:55:b3:04:a7:bb:ce:6b:47:75:
73:ee:a4:77:83:71:c9:aa:6c:b0:53:1e:39:25:fb:b2:e7:05:
6d:e6:d6:9a:43:17:70:47:95:7b:85:07:41:c3:d9:14:2c:62:
21:c9:b2:0e:1a:10:33:5a:ec:3f:36:f6:d0:37:da:a0:14:80:
ab:84:78:cd:d0:83:1a:2c:d6:0f:6c:5a:46:59:70:fb:1b:07:
42:cf:21:64:e4:d9:61:24:d4:81:a7:4f:28:35:7e:38:27:68:
75:d0:31:52:8b:18:fe:ae:b1:74:68:d7:c2:31:e7:65:ab:f3:
f1:c7:02:59:ba:a4:47:c0:c9:da:36:63:b6:07:5f:8c:0c:04:
53:34:80:07:43:a8:75:be:88:09:a0:d4:9f:a6:88:fb:38:5f:
b7:41:ad:c2:ca:25:b7:11:c2:ef:4f:f1:6c:d4:f5:5b:a5:dd:
0e:c4:78:a3:9a:57:c4:87:34:6f:3d:06:6f:be:52:2f:f4:b8:
72:d4:a9:92:28:f4:05:25:58:1e:48:dd:fd:76:4f:8a:a3:52:
8d:f3:08:19:a2:96:a5:67:a4:21:d0:95:ba:25:42:3e:c1:af:
ef:9c:01:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynow+GPJYliw0plMRl0GIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky
NTdkZjIwHhcNMjYwNjMwMTMwMTExWhcNMjYwNzAxMTMwMTExWjAzMTEwLwYDVQQD
EygwNDgxM2UxNjMxNTA3OTgxNTY4ODEwOGIyOWEyOWExOWI5MTFkNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjFJyGKXH2A9833S+Aahw6un39U3
ZXYKMNfRx8At9UeU+FmxWQs1m2WmhRfUjHTMHGDoAg8qvQUp78Eem5kqb6FWgtiX
jpPmFoDCLRmWyP4BVI067/Cn9qu67Vwa7IMoI862sZK1iG+ZF9f6rctcw61rFXGw
DSGhwVGs6Rym1emnsD+ztgnCPhL0+EXrgcLil7EUYX5ywete5HN8Vcac+wDD4YvB
bsnIavqHiLzQaINaDFhf0ctYHJ5hZRbdPWWbBeDOWtASogdbQVizGWyFvftgp9qG
U1aDuMuwB84e0mGbnEou3TAJms6WIlWkZx8OfGv2FVT/FEhztM9Zo4HD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASBPhYxUHmBVogQiymimhm5EdTbMB8GA1UdIwQY
MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut
ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx
LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsfn1/Um
Dgki4IvVsz3QokcS+7Xi2lWPna9qVbMEp7vOa0d1c+6kd4NxyapssFMeOSX7sucF
bebWmkMXcEeVe4UHQcPZFCxiIcmyDhoQM1rsPzb20DfaoBSAq4R4zdCDGizWD2xa
Rllw+xsHQs8hZOTZYSTUgadPKDV+OCdoddAxUosY/q6xdGjXwjHnZavz8ccCWbqk
R8DJ2jZjtgdfjAwEUzSAB0Oodb6ICaDUn6aI+zhft0GtwsoltxHC70/xbNT1W6Xd
DsR4o5pXxIc0bz0Gb75SL/S4ctSpkij0BSVYHkjd/XZPiqNSjfMIGaKWpWekIdCV
uiVCPsGv75wBmQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:15 2026 by rpki-client