Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: PygHl1/xS3kCtHr25uzOKAEDqYdGGmTCnkgwmskCtz0=
Subject key identifier: 20:D9:40:16:B6:1E:07:94:57:CC:EA:D2:F3:4C:4D:8F:0E:55:90:AE
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 019D38D2F6C152D55BF52469322E652EC6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: 1GrmrNbNGyXyahXMYGt3b4VfY4I.roa (hash: I2AeLswWlG7/hO0PGfHp4xgLUN+8oHGwrspZl3ZzwDg=)
2: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: g6QCCFjUqk6HdFyIvMTUFFUdnYoyQQ2WDbR/nadtY6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f6:c1:52:d5:5b:f5:24:69:32:2e:65:2e:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=20d94016b61e079457ccead2f34c4d8f0e5590ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:65:70:89:eb:5b:67:10:dd:55:2d:aa:1f:
fe:93:9d:99:77:2c:fb:88:9f:d1:2e:54:bf:61:8f:
0d:a9:73:20:88:11:99:df:08:30:43:cf:28:66:4d:
72:b7:b7:ba:f1:6e:c8:23:7c:09:b7:bd:44:4a:9f:
4a:36:d8:c1:26:d3:1c:1a:2a:ea:51:46:d6:1b:35:
40:d2:fd:36:cd:0d:1e:8d:15:47:1b:3b:23:17:59:
be:84:d3:2f:ee:25:75:4b:dd:92:82:e8:2a:b8:5e:
e7:fd:56:b4:55:a2:c9:d6:a5:9c:ba:94:b3:ba:ff:
ad:d4:23:88:fa:94:fa:af:31:a3:fa:94:98:67:49:
27:d7:ce:5e:f0:de:29:d4:9f:14:29:ca:a3:19:4f:
29:1d:bc:29:14:01:ef:cb:4c:5f:e2:51:5a:38:e4:
ca:c5:3e:d7:4b:47:3d:78:dc:35:d4:fb:47:06:66:
39:1f:17:4c:3b:b3:0a:56:b2:69:54:6f:f5:5b:db:
9f:36:da:31:df:57:f5:a6:61:30:52:85:3b:4a:a2:
ee:f8:44:c8:65:8a:01:c7:a6:41:2a:24:20:7a:43:
a1:ae:0f:3c:81:80:77:a5:71:78:77:6b:7a:f8:51:
ec:78:b9:93:16:af:ef:8e:8f:73:c5:5b:15:9d:2e:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D9:40:16:B6:1E:07:94:57:CC:EA:D2:F3:4C:4D:8F:0E:55:90:AE
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ac:a9:ae:93:91:bc:a2:2e:cc:75:b7:51:f7:1a:20:e8:6e:
16:7b:b9:b4:79:c9:72:31:db:3e:a7:e7:7a:c3:58:eb:d3:f6:
16:48:bc:cc:3e:72:ce:43:19:ee:21:a9:80:1f:cd:9e:7d:96:
8f:4b:f6:93:c1:41:8d:0b:fb:9b:4d:03:67:3b:8f:0f:66:bb:
4b:78:81:bb:80:15:00:08:58:27:4f:0e:8b:f3:60:56:d7:3b:
60:71:55:8e:0a:1c:46:0c:de:b9:27:d7:8c:6e:ae:95:30:77:
12:f7:57:5d:4d:c6:0d:36:bd:9c:6b:5c:b7:00:a3:88:12:8c:
22:c5:23:94:49:6f:be:03:f9:a5:93:1d:a9:61:96:8c:d2:b5:
82:6d:cb:46:f2:2f:48:f1:20:9e:53:3e:78:86:be:75:9d:19:
dd:f9:e9:13:45:2f:25:70:ad:a7:f8:e4:7e:e1:a0:30:5b:bf:
80:9d:5b:e3:ba:af:26:09:87:5f:99:b2:eb:c8:56:7d:38:d0:
d3:a1:c0:9d:bd:74:a1:89:d7:9f:d0:1a:e8:b3:f7:e6:03:38:
e9:e7:58:2e:2f:1f:93:65:a2:a1:8a:ce:dd:21:b6:e5:09:aa:
42:38:43:68:da:1d:7e:4e:a4:99:c5:b0:e0:5f:47:9d:10:89:
ba:d9:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:04 2026 by rpki-client