Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: qN327F6+Ycn7xJ51hlKXCM2OYSaToIkSYFNQ/OQsa84=
Subject key identifier: E5:E0:44:41:BA:80:AC:E3:97:E5:92:CF:00:84:19:F9:C0:E8:17:4A
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 01A154774E0FF22CC7DE03FA1FB05F8ADA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 0485
Signing time: Mon 19 Oct 2026 14:01:07 +0000
Manifest this update: Mon 19 Oct 2026 14:01:07 +0000
Manifest next update: Tue 20 Oct 2026 14:01:07 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: taNy3TjaJNxD19v/38Wc3XwVeIF81aRuRjLcbljnH0o=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:4e:0f:f2:2c:c7:de:03:fa:1f:b0:5f:8a:da:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Oct 19 14:01:07 2026 GMT
Not After : Oct 20 14:01:07 2026 GMT
Subject: CN=e5e04441ba80ace397e592cf008419f9c0e8174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:1e:2b:e5:cd:95:c2:92:5b:9b:4b:d7:6e:
f2:17:4e:2c:db:c8:d3:0c:43:70:98:e8:c4:d9:ad:
50:f7:2d:35:da:c5:8f:e9:22:31:ad:47:5f:f8:f2:
ef:6c:7b:75:df:2e:5b:00:fb:ab:6a:a4:18:54:45:
77:d5:76:d4:d1:a0:18:27:1e:83:11:62:6b:52:11:
94:c3:94:8b:0f:be:e6:c3:1e:d9:dd:6a:51:6f:c0:
75:40:89:fe:f6:b8:a6:5d:02:42:27:68:d4:4a:7b:
19:d4:b1:f0:a1:b8:55:63:f8:b4:52:2c:9c:3f:11:
49:03:d6:f3:a4:be:40:1d:77:9a:06:2b:70:8b:54:
d6:0a:bb:1a:55:8b:2d:88:43:16:5e:1a:b1:77:48:
a9:44:4a:f9:a6:a1:0d:c2:2d:55:4e:62:34:ec:eb:
32:c5:da:3d:36:fe:c4:fb:59:56:7a:52:bc:e7:39:
c9:83:05:60:69:ca:68:78:93:c5:ae:30:91:97:85:
46:2f:42:ec:94:85:34:a4:08:eb:91:9d:90:86:df:
24:10:65:25:5c:09:ff:8a:2c:7b:07:8f:52:a1:ad:
d5:0f:b8:d6:ea:59:da:5d:1c:61:c1:ec:d3:e4:b4:
68:43:1d:86:5f:41:c8:17:ac:ab:52:fb:cd:99:11:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:44:41:BA:80:AC:E3:97:E5:92:CF:00:84:19:F9:C0:E8:17:4A
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c1:7f:7d:49:71:95:5e:de:2f:e1:19:7d:90:49:c5:37:35:
13:0d:e4:9c:da:6d:06:67:14:4b:10:8c:eb:b8:9e:ac:2d:1e:
a0:65:b3:81:01:0d:38:59:42:16:65:72:39:21:fc:70:74:8f:
52:20:07:b5:43:68:48:3e:c6:d9:44:0e:c1:cf:e8:b6:2f:75:
fc:24:1a:8d:fa:a3:41:a4:76:7e:71:03:0e:c5:ff:d2:e2:9a:
16:b6:a8:e8:2a:24:37:31:a8:7f:ec:6e:3a:a6:cf:25:2f:e2:
a6:60:72:26:79:e7:85:f8:38:c1:02:7f:ba:21:bc:82:a0:e4:
e2:31:78:c0:40:c3:8e:03:a5:d5:43:01:75:2e:9c:1d:80:de:
c8:8d:59:56:da:c0:15:95:86:07:f2:10:ac:ab:04:87:68:82:
7e:7b:1e:d6:b0:3e:db:b9:a0:b2:ea:d9:c8:68:fb:5c:85:77:
a2:9b:96:c4:74:5b:d8:32:4a:c5:85:f1:9c:8b:60:d4:57:42:
ef:c5:3e:8c:76:5e:11:83:b4:e2:23:d0:14:7b:10:85:22:19:
97:40:84:d8:51:42:0a:1e:6f:51:1f:df:73:72:e8:ea:4d:06:
e7:3e:dc:73:87:a1:a9:15:e8:f3:0b:74:34:2d:87:ff:9e:92:
87:7a:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:36:29 2026 by rpki-client