Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: 6aa0vIYRz+jO47KAncgDu3CUySgO8xTci4c1AuyrQ1c=
Subject key identifier: 64:BF:F5:50:6D:78:A2:83:00:7B:2D:5C:87:93:7F:26:D2:C0:F3:F6
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 019E87FE7E7C6BAF3E730BA5FA8F70AF7445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 0312
Signing time: Tue 02 Jun 2026 11:01:02 +0000
Manifest this update: Tue 02 Jun 2026 11:01:02 +0000
Manifest next update: Wed 03 Jun 2026 11:01:02 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: 5Dv2Ha4ggaBPWakKjQwm8m7noAbXl+LefAFvHJUFYOI=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:fe:7e:7c:6b:af:3e:73:0b:a5:fa:8f:70:af:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Jun 2 11:01:02 2026 GMT
Not After : Jun 3 11:01:02 2026 GMT
Subject: CN=64bff5506d78a283007b2d5c87937f26d2c0f3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:76:ac:17:8f:e9:05:ef:97:c3:d4:94:59:
76:9c:96:e3:17:1a:df:4b:43:81:09:79:f1:33:64:
01:42:de:28:70:42:89:62:94:11:91:4d:59:5c:e7:
41:6f:0c:5b:06:01:1c:17:5a:47:42:dc:0d:61:13:
f8:3e:ca:4b:ee:a3:2a:a5:7d:38:b9:f0:34:11:d0:
70:81:09:a1:3e:f0:8c:c1:b8:0c:a8:c0:28:be:1f:
9e:9e:1b:de:6c:f7:e3:8c:d6:17:1b:6a:87:d6:4c:
13:2b:ef:51:00:35:9f:5b:3d:a6:10:78:d2:3f:c0:
29:7e:50:bb:b1:45:61:64:0b:32:9e:0e:9a:b9:03:
68:12:c4:b5:db:d4:0a:d0:83:19:23:b6:5b:74:c0:
43:df:98:f1:37:78:6a:63:8a:bd:b7:83:13:28:bf:
35:eb:66:3a:1c:42:cf:d4:38:e0:4c:a2:89:bb:8f:
fe:1c:92:54:a6:48:ca:cf:99:b2:b1:30:53:67:ce:
ef:b7:4e:8e:9f:38:3c:ad:ef:29:eb:d6:1c:bd:5e:
85:bc:7a:30:07:73:67:d1:36:0a:6a:8f:f5:14:b0:
0b:b5:c2:d7:4b:12:bf:81:df:40:91:64:b8:9f:c5:
6e:e0:d6:29:66:4c:01:aa:6d:1c:93:98:06:9c:c7:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BF:F5:50:6D:78:A2:83:00:7B:2D:5C:87:93:7F:26:D2:C0:F3:F6
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e7:90:e4:7f:a5:4b:fb:38:ed:55:02:62:c3:c0:34:c5:5b:
2b:1c:90:00:36:6b:b4:eb:9d:82:91:83:b8:8b:2c:22:3a:ac:
65:28:86:e9:ab:0e:85:e2:3a:fb:03:2b:3e:b3:ba:6e:c5:dd:
55:d6:35:27:dc:6a:dd:b7:ca:5c:93:30:54:cf:3b:cc:8b:88:
71:5f:bc:17:05:d3:c7:fe:80:1e:13:8f:e5:86:93:1a:1f:08:
11:03:e8:bb:15:3e:41:2b:2f:67:c6:80:a4:20:63:ec:c4:71:
ae:6f:21:57:fe:68:7f:ca:23:6e:66:df:c3:03:e5:d2:98:58:
f2:ea:e4:56:37:13:87:94:3b:4e:78:08:26:87:39:03:93:2d:
04:7e:4d:52:f1:86:ac:03:f7:6c:bf:7e:78:3a:b8:17:4e:c7:
66:77:8f:3e:5a:6d:dd:9b:4c:71:48:5d:4c:64:88:5d:f2:d7:
f4:93:ea:f0:77:83:00:25:32:ef:64:11:b6:b8:b2:a5:19:e4:
67:9e:9a:aa:83:59:f0:73:72:4c:63:db:f5:39:a1:1c:d3:bf:
a5:5d:c4:9b:b6:4b:ea:ac:c8:84:f8:04:ea:17:f9:a8:9c:cc:
e7:42:b1:bf:13:d8:5e:eb:b6:e3:aa:e1:a5:55:6c:71:44:48:
33:02:60:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6H/n58a68+cwul+o9wr3RFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzE4ODE3NzhhMWUxMmY2ZDk3YzUyODhlZmQ0Y2I5NTYz
ZDFkNDkwHhcNMjYwNjAyMTEwMTAyWhcNMjYwNjAzMTEwMTAyWjAzMTEwLwYDVQQD
Eyg2NGJmZjU1MDZkNzhhMjgzMDA3YjJkNWM4NzkzN2YyNmQyYzBmM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt752rBeP6QXvl8PUlFl2nJbjFxrf
S0OBCXnxM2QBQt4ocEKJYpQRkU1ZXOdBbwxbBgEcF1pHQtwNYRP4PspL7qMqpX04
ufA0EdBwgQmhPvCMwbgMqMAovh+enhvebPfjjNYXG2qH1kwTK+9RADWfWz2mEHjS
P8ApflC7sUVhZAsyng6auQNoEsS129QK0IMZI7ZbdMBD35jxN3hqY4q9t4MTKL81
62Y6HELP1DjgTKKJu4/+HJJUpkjKz5mysTBTZ87vt06Onzg8re8p69YcvV6FvHow
B3Nn0TYKao/1FLALtcLXSxK/gd9AkWS4n8Vu4NYpZkwBqm0ck5gGnMcpmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS/9VBteKKDAHstXIeTfybSwPP2MB8GA1UdIwQY
MBaAFARxiBd4oeEvbZfFKI79TLlWPR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgt
NDJlYTQ3YjEyNTM3LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgtNDJlYTQ3YjEyNTM3
LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFueQ5H+l
S/s47VUCYsPANMVbKxyQADZrtOudgpGDuIssIjqsZSiG6asOheI6+wMrPrO6bsXd
VdY1J9xq3bfKXJMwVM87zIuIcV+8FwXTx/6AHhOP5YaTGh8IEQPouxU+QSsvZ8aA
pCBj7MRxrm8hV/5of8ojbmbfwwPl0phY8urkVjcTh5Q7TngIJoc5A5MtBH5NUvGG
rAP3bL9+eDq4F07HZnePPlpt3ZtMcUhdTGSIXfLX9JPq8HeDACUy72QRtriypRnk
Z56aqoNZ8HNyTGPb9TmhHNO/pV3Em7ZL6qzIhPgE6hf5qJzM50KxvxPYXuu246rh
pVVscURIMwJgVw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:09 2026 by rpki-client