Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: QXUg4klS5Dgben9BVXs/aqz7RGsmBR1AKghcvY2d9WY=
Subject key identifier: 4C:5E:07:0A:14:C2:C5:F1:2E:9B:95:B8:70:82:32:99:22:DA:41:A9
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 019CEBCAA418009A8C6D4F598EEEA5DF92D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 023C
Signing time: Sat 14 Mar 2026 10:00:51 +0000
Manifest this update: Sat 14 Mar 2026 10:00:51 +0000
Manifest next update: Sun 15 Mar 2026 10:00:51 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: 8NQXBWNbOYzDvOYEWH0wJ6x+NSUXAH9nYH5EBbz0JfI=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:ca:a4:18:00:9a:8c:6d:4f:59:8e:ee:a5:df:92:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Mar 14 10:00:51 2026 GMT
Not After : Mar 15 10:00:51 2026 GMT
Subject: CN=4c5e070a14c2c5f12e9b95b87082329922da41a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:6b:65:59:9b:f4:42:6c:06:ef:01:e0:96:
3f:bb:3e:82:eb:43:22:a8:f9:1f:17:e6:c5:c6:73:
0a:0f:5d:69:a9:08:e6:37:fd:e8:76:42:f4:8c:fe:
22:74:00:4c:18:1b:d2:2d:a1:ad:f0:a2:19:3d:b6:
10:7b:60:b8:30:37:f9:e6:5b:98:26:35:a3:f2:26:
1f:a3:47:cb:30:de:c9:0b:1a:4c:7a:5a:16:de:9d:
23:4e:cc:40:6d:30:5f:dd:98:00:47:d0:dd:a7:51:
fa:22:cc:56:00:80:4c:c2:e5:8a:c0:ba:f4:5c:cf:
eb:32:0e:8a:c0:67:1e:28:f6:78:06:ac:b3:9a:dc:
36:18:63:e7:e1:f8:70:1b:ef:b6:d0:6e:ab:5a:7e:
52:ae:4e:6a:5c:1a:60:64:7c:35:d2:f0:05:05:31:
35:41:0a:8a:ac:86:8b:39:e8:6a:c2:0e:d0:9d:89:
f6:16:ff:9f:fa:21:42:45:04:39:da:f8:de:aa:00:
51:f5:d8:08:77:a6:d3:0c:10:7e:54:c7:38:2b:a3:
db:18:97:bd:9b:6a:85:43:29:01:70:6f:70:5a:9c:
44:dc:ef:90:a1:e4:3d:d4:9b:26:db:91:db:88:32:
71:85:e8:d5:bd:f3:18:af:b8:f6:64:88:44:87:7e:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:07:0A:14:C2:C5:F1:2E:9B:95:B8:70:82:32:99:22:DA:41:A9
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5f:5d:eb:7d:dc:89:64:6d:a6:c9:a9:20:c3:2c:65:84:ce:
c7:97:3f:9a:6a:a1:08:86:27:64:6a:4e:21:0b:d1:dd:2d:7b:
0e:b5:e6:80:d4:12:d3:de:6b:58:ec:3c:e0:27:83:7f:36:20:
af:80:1d:04:b8:f8:25:77:91:28:63:35:87:31:02:1c:f3:e6:
32:fa:10:cc:3c:ec:9f:f1:b4:d9:34:b8:46:c9:15:28:72:f6:
f3:b2:51:7a:bc:b8:d5:f4:4a:98:f5:85:a6:a4:a4:84:12:2c:
e3:a4:e1:a0:e7:87:a1:70:2d:a0:be:d2:a9:da:72:b5:24:7d:
55:9f:9b:6c:1a:bc:cd:79:0b:d6:04:7d:f2:b7:80:74:f7:a8:
fb:70:52:5a:65:5c:40:92:67:f9:cf:fe:dd:29:26:d1:db:f5:
de:44:05:38:02:e2:2b:7b:19:26:b7:12:fc:83:e0:24:cf:bc:
99:a6:99:34:75:c2:af:cf:a6:aa:94:f2:dd:c9:11:83:29:fc:
90:31:42:1f:84:58:68:db:86:78:37:a7:00:68:26:11:a4:70:
47:cb:f4:69:b0:08:a7:ba:1b:c1:8a:77:9a:95:5d:16:25:aa:
8d:86:78:2a:82:eb:6b:84:e3:23:f6:bf:10:a9:c4:59:fa:c6:
63:47:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:19:19 2026 by rpki-client