Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
File: bhmZOOWGPvPsehfj6VeCESLKy3I.mft (raw, json)
Hash identifier: 5e4aWF00Ttdaj2Y9Vj71AEQ76BPRsW40cjANsQj8Ouc=
Subject key identifier: 8C:06:8D:A5:7C:02:E0:BC:98:0E:16:F8:B1:5E:75:EA:BD:E4:4E:B1
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Certificate issuer: /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial: 019FF9B655BF28C1A5C912EB8FB276DBBE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:01:43 +0000
Manifest this update: Thu 13 Aug 2026 06:01:43 +0000
Manifest next update: Fri 14 Aug 2026 06:01:43 +0000
Files and hashes: 1: C45tLQeLfwaM1RdOqpO-QuLUeQA.asa (hash: 7MH0/rLqYLLQ3/jeeFbZW6qka1ApF6OnChXUKCMlfQ0=)
2: OgAXOTf3IDVfT6V0C3TcApv_UQI.roa (hash: eQxYLK/wPde6Uj0bPjt5BRN1ClEuJ7VpeoOHlBMb9xc=)
3: bhmZOOWGPvPsehfj6VeCESLKy3I.crl (hash: S+8VjbY4x5+UZ/T28JyrFXUCsZDSBT7n/rPpVt6RWNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:55:bf:28:c1:a5:c9:12:eb:8f:b2:76:db:be:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Validity
Not Before: Aug 13 06:01:43 2026 GMT
Not After : Aug 14 06:01:43 2026 GMT
Subject: CN=8c068da57c02e0bc980e16f8b15e75eabde44eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:8c:d3:42:18:65:49:77:68:d5:a9:45:d1:
85:2f:66:71:8d:a8:c0:41:1e:30:9a:f2:10:f6:47:
60:8a:e8:4e:22:b1:0c:fe:ba:65:39:95:0c:94:f3:
44:fa:36:95:d7:0a:6d:ec:9d:45:03:8d:0e:f1:dc:
21:f6:e4:81:08:5d:13:a1:a8:ff:a2:8d:64:85:47:
81:20:e1:41:21:4c:4e:55:07:5d:ca:f7:5e:9b:2c:
f7:85:8e:cc:2d:37:ec:fb:59:5d:26:e1:89:72:24:
f8:1e:a3:f3:8d:c0:7e:f7:38:9e:fa:b9:18:6e:b6:
00:55:f9:89:ee:16:36:49:19:29:af:64:63:53:32:
11:cf:b0:21:85:dc:30:93:23:94:8b:40:c6:d9:5b:
1a:f9:ca:af:74:b0:2d:3f:92:ae:3c:a9:ac:99:84:
b1:11:ce:32:e6:a9:47:ed:29:18:58:4f:81:4f:cf:
4c:be:4c:c2:9f:a0:04:56:ed:65:ec:45:50:e2:80:
d5:aa:ff:b9:f5:de:cd:23:92:b4:08:f9:45:c3:ea:
20:84:3d:8a:57:d6:30:38:7a:65:58:35:b0:58:27:
36:c8:7c:c6:75:4e:79:29:07:4d:10:4c:08:16:5e:
65:1d:3b:c5:b5:ff:98:10:1c:19:4d:f7:c6:a7:e1:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:8D:A5:7C:02:E0:BC:98:0E:16:F8:B1:5E:75:EA:BD:E4:4E:B1
X509v3 Authority Key Identifier:
keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e8:b1:17:1b:ae:80:22:0b:26:3e:10:36:46:8f:ed:90:2a:
d1:6c:4a:e5:81:47:d2:6a:10:0a:72:c3:7f:ed:b0:95:3a:7a:
69:6f:33:16:d7:15:24:95:4a:85:ea:af:db:a1:2e:1d:48:e4:
f7:6a:e8:58:b0:89:17:09:b5:70:4b:2a:fa:5b:4e:21:09:26:
e2:5e:ac:47:25:87:73:30:01:89:c3:03:07:e2:20:9a:8d:9e:
1a:f9:95:32:b9:f1:f5:bf:cd:4a:b3:52:41:d5:12:53:6e:b7:
52:63:60:08:b1:51:79:85:8b:08:1e:02:14:81:75:f0:17:5b:
aa:de:fc:3b:24:2d:38:29:26:e0:b1:9f:9b:db:db:a8:40:bd:
82:56:b6:77:d3:8d:c8:0e:cb:e2:8b:30:d6:a9:2d:0f:99:9f:
14:ab:49:bf:15:a5:0e:b2:c3:f0:33:84:21:ab:58:0a:da:5b:
f8:9d:f7:67:2f:74:19:83:66:9d:95:c7:ff:3e:43:80:24:50:
3d:68:02:7b:d8:60:62:a5:37:c2:7c:4a:09:2c:7b:34:dc:ff:
b9:73:63:f2:76:00:f9:ca:3a:01:d2:82:82:6a:35:53:d5:48:
4e:b9:ae:63:fe:ae:f1:37:be:c8:04:d8:66:99:3d:3b:fb:c7:
67:1b:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:50 2026 by rpki-client