Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: jK9cuyVEwW6X2QxNPZw/XWvXdwUJM6ZeZ0DRwyG6gII=
Subject key identifier: CF:63:A0:A3:76:9C:E2:9A:5B:D6:87:2D:EF:68:10:41:7C:A3:21:41
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019D37F7ADF17EC5714E216EBCDF38878068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 05:01:11 +0000
Manifest this update: Sun 29 Mar 2026 05:01:11 +0000
Manifest next update: Mon 30 Mar 2026 05:01:11 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: RdrAg9n7pbNzixznz6826G6zcBlbRHZRbiTl+kvPwNA=)
2: c57QPKVrulqe_tqOAQiAMnzGNHY.roa (hash: hBy4NZPhmcsKXhRSeI2d9E/JnPVdvroDZRs5OxnQU4k=)
3: enheJsXMtTxgm2wRND7dJgv8cak.roa (hash: C3fYygAIlGdruBbPXDLy8TVW2TRb7yeOUTAGkUC/fmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:ad:f1:7e:c5:71:4e:21:6e:bc:df:38:87:80:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Mar 29 05:01:11 2026 GMT
Not After : Mar 30 05:01:11 2026 GMT
Subject: CN=cf63a0a3769ce29a5bd6872def6810417ca32141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:a0:73:05:75:b1:6f:4d:6d:e2:ca:4d:f5:
ec:ce:60:39:38:0d:a9:57:3b:54:df:b7:02:78:fb:
91:70:3d:07:54:68:ea:79:d9:24:64:7b:30:1a:14:
8d:ea:ba:c4:d5:c6:0b:70:25:f0:67:42:90:65:89:
10:f5:49:42:72:6d:77:33:a9:39:a8:a1:d6:4e:00:
1c:8b:2f:6e:43:a7:fd:8a:f2:4c:f2:a7:aa:09:98:
e2:61:eb:b7:52:b9:ce:42:4c:10:8f:da:13:e9:73:
49:ed:65:6a:fe:aa:d2:39:cf:df:0a:d5:65:d7:3f:
bc:95:8f:6b:cd:c3:f8:e3:80:f1:14:c1:c4:fd:19:
72:2a:52:ee:ba:2b:25:1c:38:bc:76:43:47:e5:57:
66:55:dd:3f:70:eb:c9:25:fd:97:47:b1:05:d7:3a:
2f:68:7f:3c:af:5d:c2:a6:f2:71:ee:32:bd:d9:44:
fb:77:51:87:8b:26:a1:ff:1e:75:4d:81:d8:cf:41:
71:d5:f2:31:63:e5:fd:b9:31:fa:88:6a:ee:83:5e:
2e:ce:44:a6:49:d2:39:e6:8d:37:cb:f1:d5:bf:e7:
00:eb:22:31:46:9e:72:e9:dc:02:10:80:48:9f:8e:
0a:6e:41:e1:12:1c:c1:34:e5:89:6e:39:bb:6c:33:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:63:A0:A3:76:9C:E2:9A:5B:D6:87:2D:EF:68:10:41:7C:A3:21:41
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:aa:5d:fa:73:84:89:76:f3:bb:71:63:2c:1e:78:f4:d7:
86:61:89:85:40:be:90:d6:0d:a8:7a:d8:71:52:3b:92:bc:af:
68:7f:ba:b8:76:7f:ac:9c:ff:3f:e7:c2:aa:e2:95:3b:4f:4c:
d4:87:24:77:97:28:2b:8a:c5:92:95:2e:ea:8d:90:23:ad:87:
eb:d6:53:43:0c:02:92:4a:1c:67:a1:e3:fc:ce:00:8e:f7:83:
e0:64:aa:d9:52:7f:bd:07:ee:0d:7d:a1:f3:8f:b4:ba:c5:08:
81:be:5c:41:30:ab:9f:bb:46:58:f4:b4:d4:ba:a3:8f:28:c6:
b0:4a:bd:45:71:15:e0:b5:14:ab:b1:8f:92:22:46:6e:4f:72:
73:67:a9:8a:d9:6b:9b:5d:22:f9:53:6d:ec:f4:67:20:5a:8e:
f4:57:8a:9e:4c:db:e1:9d:b1:d7:ca:c0:e0:64:c3:e0:82:ac:
7b:7b:7a:8b:8a:e8:eb:ea:72:4d:cb:ac:46:d4:38:2f:83:bc:
c8:f7:04:c7:58:e3:5f:22:fa:ca:6b:90:76:71:93:5c:a8:d4:
a4:67:90:d1:63:33:ad:63:5d:62:2a:25:cf:c5:b3:37:8b:13:
fe:82:c5:95:c7:ec:cb:b6:d8:46:48:7c:3f:87:30:10:ec:8a:
a7:c0:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:51 2026 by rpki-client