Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: wK4pzLESZf761EWtDfLU5xGjK0/CMTjmMVfJzKM9lF0=
Subject key identifier: 68:9D:27:42:14:B0:1F:F7:68:66:09:3B:FF:ED:F3:94:59:E4:6A:AC
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 01A08A8D12800D82A4A459A0009AB4F6541E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 09:01:36 +0000
Manifest this update: Thu 10 Sep 2026 09:01:36 +0000
Manifest next update: Fri 11 Sep 2026 09:01:36 +0000
Files and hashes: 1: 1GrmrNbNGyXyahXMYGt3b4VfY4I.roa (hash: I2AeLswWlG7/hO0PGfHp4xgLUN+8oHGwrspZl3ZzwDg=)
2: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: NPzgS1W8+Tv7sewAxEU3f4mmMSNK4FvjsPORNnDoSdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:12:80:0d:82:a4:a4:59:a0:00:9a:b4:f6:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Sep 10 09:01:36 2026 GMT
Not After : Sep 11 09:01:36 2026 GMT
Subject: CN=689d274214b01ff76866093bffedf39459e46aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:bc:84:26:91:bf:c2:2a:95:83:0f:a2:a0:
65:48:26:8b:c2:f2:91:58:54:11:15:ae:50:91:9e:
9e:c4:75:91:c7:76:c6:42:ab:52:b7:1c:b0:96:92:
04:42:b6:34:4a:b6:53:aa:98:f0:de:e4:ef:64:b9:
f9:7f:66:50:69:71:3c:d1:2b:4a:30:4a:f9:17:75:
cd:69:f4:d8:6c:5a:36:e4:b8:05:ab:12:6d:96:68:
f7:60:9e:9a:c1:5e:6e:c8:07:c7:08:fb:cd:bc:fc:
06:2a:95:13:be:d5:38:2c:ea:33:86:a9:29:a1:d9:
61:fc:cd:50:5a:cd:13:24:02:cf:30:b7:e5:47:df:
aa:3f:f1:8a:c0:0a:a3:4b:19:36:e6:c9:9a:41:7e:
9a:61:62:ef:cd:0e:6b:a2:8a:4a:47:e6:fc:7c:8b:
0e:00:fc:4f:e5:34:78:84:0a:8f:a0:08:62:ab:b2:
c0:b9:b2:44:41:51:9b:36:3f:42:87:7b:bd:bf:92:
6c:d8:ad:ee:d3:41:eb:46:4c:d9:30:3a:9d:2d:69:
49:f5:ca:cc:7c:f0:99:5a:35:01:0f:81:39:52:38:
74:41:6e:9c:1d:37:73:bc:74:55:7e:f9:c4:e4:48:
29:ba:06:ed:e7:fc:ed:ea:10:c2:d4:37:d9:0a:05:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:27:42:14:B0:1F:F7:68:66:09:3B:FF:ED:F3:94:59:E4:6A:AC
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d3:de:69:35:45:38:4d:ca:7c:36:d2:5a:24:5b:65:58:0a:
8e:e3:f5:d6:d5:63:87:eb:7a:e4:d2:72:0a:eb:23:d0:a2:1e:
47:80:68:c2:e5:87:93:05:aa:da:9c:7e:7c:95:9c:04:a4:32:
5d:cf:ea:9e:4e:61:68:f1:f2:07:61:35:0b:33:c1:71:e3:6b:
cc:de:50:cc:1c:e1:69:e1:26:10:a8:9c:8f:0a:ad:92:95:77:
98:da:51:81:6b:29:36:aa:68:d5:d7:d9:6f:e5:70:de:ad:ed:
5a:75:1b:b7:f3:57:35:13:d8:98:04:01:28:c1:a6:e9:d2:01:
c6:8a:22:d1:23:27:98:9a:34:dc:a3:63:25:97:b9:9a:17:b1:
15:c5:d1:a0:51:66:2f:a7:91:e1:cc:01:b7:1c:21:d8:99:68:
d0:88:2f:77:ce:40:26:c0:39:c6:41:eb:f6:ac:8e:dc:ec:38:
07:5c:57:77:69:4b:35:c8:57:01:55:b3:28:22:84:3d:bf:ef:
31:a5:32:b8:c8:9e:87:8d:e2:35:bb:64:ed:05:b2:62:c2:95:
9c:33:0e:33:c8:39:bf:c6:b8:ec:62:f3:6c:10:93:44:74:ed:
71:9c:b5:73:ec:cf:34:51:e5:29:02:c1:d1:44:c2:bd:64:33:
a4:12:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:29:17 2026 by rpki-client