Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
File: bhmZOOWGPvPsehfj6VeCESLKy3I.mft (raw, json)
Hash identifier: IbZ3/npeScS0x2ZGog/IzDMwPO60zDPGacdUM+mltOQ=
Subject key identifier: 16:D8:B9:E2:37:39:28:E5:77:61:AD:0B:69:FF:35:0B:F3:BC:97:E8
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Certificate issuer: /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial: 01A0E3623E3FB9317D53A29280198EA8EBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:01 +0000
Manifest this update: Sun 27 Sep 2026 15:01:01 +0000
Manifest next update: Mon 28 Sep 2026 15:01:01 +0000
Files and hashes: 1: C45tLQeLfwaM1RdOqpO-QuLUeQA.asa (hash: 7MH0/rLqYLLQ3/jeeFbZW6qka1ApF6OnChXUKCMlfQ0=)
2: OgAXOTf3IDVfT6V0C3TcApv_UQI.roa (hash: eQxYLK/wPde6Uj0bPjt5BRN1ClEuJ7VpeoOHlBMb9xc=)
3: bhmZOOWGPvPsehfj6VeCESLKy3I.crl (hash: dUfJoD/GmXXWkZldL+EEXvdAxNSE+KvUlB01UzuhlMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:3e:3f:b9:31:7d:53:a2:92:80:19:8e:a8:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Validity
Not Before: Sep 27 15:01:01 2026 GMT
Not After : Sep 28 15:01:01 2026 GMT
Subject: CN=16d8b9e2373928e57761ad0b69ff350bf3bc97e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:47:56:fc:ea:3d:30:5f:7c:05:d2:f2:ff:
9e:b2:db:b9:b5:11:c3:a6:08:09:3c:8d:86:f3:6f:
18:82:32:46:2d:ed:b7:35:aa:38:f5:3d:96:c0:39:
ef:0b:83:30:54:c1:6f:59:ba:26:13:8c:3f:a7:64:
89:d6:f1:f9:b8:6c:58:e7:8b:1d:00:a8:f4:84:ad:
a9:c1:f4:1e:b1:24:00:a3:b5:f5:ad:d0:15:41:e6:
95:29:d6:7b:23:c0:39:39:0f:96:2d:55:8b:b9:ed:
aa:70:1c:64:5e:fe:7c:61:70:2e:11:ff:10:02:11:
18:b8:09:ab:b4:63:84:7a:d5:77:c2:fe:c4:2c:6b:
e5:1c:21:5f:0d:2e:c9:2f:f7:3f:a3:74:4c:c1:c7:
cb:f5:bf:97:67:5b:43:d9:19:91:cb:f0:c4:76:6f:
97:d3:aa:03:e2:af:a0:7f:bf:4a:4c:53:73:c8:b2:
ea:ce:63:38:fd:4e:d4:68:9a:db:b1:4d:df:37:4c:
03:16:9d:5f:7f:9c:30:69:ba:74:c3:6c:66:cf:e4:
3d:88:6d:86:a1:10:26:84:f7:ad:49:5b:d7:13:a6:
57:5a:59:db:4a:00:df:a5:32:df:87:fc:b2:de:9b:
75:1b:98:ff:e8:4a:07:72:f9:78:8f:ea:c0:0f:f2:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D8:B9:E2:37:39:28:E5:77:61:AD:0B:69:FF:35:0B:F3:BC:97:E8
X509v3 Authority Key Identifier:
keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:74:5c:1d:bd:95:43:a2:71:87:4f:45:0b:d7:8e:9e:ce:c1:
b6:64:6b:72:ef:97:8b:19:3a:54:ec:f6:f4:a0:8e:65:d3:d4:
8f:44:4f:6f:81:be:7b:f8:a3:85:ec:18:9f:7d:07:31:6a:b1:
ff:a2:13:6e:35:60:2e:96:25:6d:0c:46:2a:68:bb:3b:14:92:
67:63:53:31:87:cb:fd:62:2d:e9:01:62:2a:77:52:0d:63:19:
5b:bc:32:ba:ee:f0:54:f8:45:75:6c:c7:55:da:4e:7c:e9:34:
46:35:9f:f1:14:63:d4:1c:8e:e6:52:a7:f1:8d:b5:6f:ab:d0:
ee:78:c5:e2:1b:74:9f:ef:81:60:f5:84:7f:1f:c2:62:2c:9e:
ed:19:d0:5f:d9:ba:12:c4:24:ce:6a:8e:4e:4e:08:19:ae:ca:
91:78:87:a6:04:b4:ed:78:91:6d:7e:7c:7c:42:ce:45:91:e5:
93:c0:ff:d5:95:b0:43:14:bf:fa:93:00:25:91:dc:e5:91:7d:
f4:aa:9b:79:bb:76:08:82:de:1e:1e:7c:c3:24:eb:14:3e:c9:
49:34:b3:ef:a2:4f:e4:5a:a1:03:3f:9e:63:59:08:f6:2b:33:
1c:9b:d9:26:bc:6a:d5:7a:a2:3c:c1:95:c0:db:77:a0:fb:44:
a0:3b:49:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjYj4/uTF9U6KSgBmOqOulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMTk5OTM4ZTU4NjNlZjNlYzdhMTdlM2U5NTc4MjExMjJj
YWNiNzIwHhcNMjYwOTI3MTUwMTAxWhcNMjYwOTI4MTUwMTAxWjAzMTEwLwYDVQQD
EygxNmQ4YjllMjM3MzkyOGU1Nzc2MWFkMGI2OWZmMzUwYmYzYmM5N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhpHVvzqPTBffAXS8v+estu5tRHD
pggJPI2G828YgjJGLe23Nao49T2WwDnvC4MwVMFvWbomE4w/p2SJ1vH5uGxY54sd
AKj0hK2pwfQesSQAo7X1rdAVQeaVKdZ7I8A5OQ+WLVWLue2qcBxkXv58YXAuEf8Q
AhEYuAmrtGOEetV3wv7ELGvlHCFfDS7JL/c/o3RMwcfL9b+XZ1tD2RmRy/DEdm+X
06oD4q+gf79KTFNzyLLqzmM4/U7UaJrbsU3fN0wDFp1ff5wwabp0w2xmz+Q9iG2G
oRAmhPetSVvXE6ZXWlnbSgDfpTLfh/yy3pt1G5j/6EoHcvl4j+rAD/JM9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbYueI3OSjld2GtC2n/NQvzvJfoMB8GA1UdIwQY
MBaAFG4ZmTjlhj7z7HoX4+lXghEiystyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmhtWk9PV0dQdlBzZWhmajZWZUNFU0xLeTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZjcyZTgtZjBkMi00ZDY2LWI1MjAt
M2FiYTU5NWI1OGE4LzEvYmhtWk9PV0dQdlBzZWhmajZWZUNFU0xLeTNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZjcyZTgtZjBkMi00ZDY2LWI1MjAtM2FiYTU5NWI1OGE4
LzEvYmhtWk9PV0dQdlBzZWhmajZWZUNFU0xLeTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXRcHb2V
Q6Jxh09FC9eOns7BtmRrcu+Xixk6VOz29KCOZdPUj0RPb4G+e/ijhewYn30HMWqx
/6ITbjVgLpYlbQxGKmi7OxSSZ2NTMYfL/WIt6QFiKndSDWMZW7wyuu7wVPhFdWzH
VdpOfOk0RjWf8RRj1ByO5lKn8Y21b6vQ7njF4ht0n++BYPWEfx/CYiye7RnQX9m6
EsQkzmqOTk4IGa7KkXiHpgS07XiRbX58fELORZHlk8D/1ZWwQxS/+pMAJZHc5ZF9
9Kqbebt2CILeHh58wyTrFD7JSTSz76JP5FqhAz+eY1kI9iszHJvZJrxq1XqiPMGV
wNt3oPtEoDtJ1Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 22:31:05 2026 by rpki-client