Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
File: bhWkM20vXhvWBzfelXlomSp0cOk.mft (raw, json)
Hash identifier: iEmONSwFHIRPE2/1IXrL+a/RS0hmpH/NlUf62U2WRwM=
Subject key identifier: D2:B2:5E:59:BB:40:18:CB:71:36:3A:85:BC:4C:0D:57:C0:7E:F7:AA
Authority key identifier: 6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9
Certificate issuer: /CN=6e15a4336d2f5e1bd60737de957968992a7470e9
Certificate serial: 019FA1F2D1BE1A565E90707F12BD22E521D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 05:01:12 +0000
Manifest this update: Mon 27 Jul 2026 05:01:12 +0000
Manifest next update: Tue 28 Jul 2026 05:01:12 +0000
Files and hashes: 1: Vu-e1GygyQXjjracczxIzivdztw.roa (hash: VKVRS5igE/oTY5xgq6v9aHjG9onlTSU6jTSymC7H728=)
2: bhWkM20vXhvWBzfelXlomSp0cOk.crl (hash: XSnxW/v/VztbUBu8ZhPIV3YOtsgctUGoWhp/UmElawk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:d1:be:1a:56:5e:90:70:7f:12:bd:22:e5:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e15a4336d2f5e1bd60737de957968992a7470e9
Validity
Not Before: Jul 27 05:01:12 2026 GMT
Not After : Jul 28 05:01:12 2026 GMT
Subject: CN=d2b25e59bb4018cb71363a85bc4c0d57c07ef7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:95:e4:ef:c7:53:41:d8:92:53:32:5e:cc:
51:16:c7:c1:42:55:5c:43:ea:f7:62:42:2f:d8:a5:
de:a6:b6:63:da:49:4b:bb:e0:f0:58:16:36:0f:10:
40:91:14:91:e2:af:1b:61:e4:f4:86:71:62:51:88:
90:e7:c9:ef:f9:f6:ed:3b:de:b8:26:2a:46:78:0e:
d3:ac:dc:38:5c:82:2c:6b:3d:51:4d:ae:d6:3c:ee:
95:70:2b:d2:65:1e:e3:8a:c3:82:f0:da:28:2d:21:
77:48:78:59:c7:18:00:12:b9:8a:24:8e:d3:22:04:
77:6b:0a:a7:3f:62:03:fa:84:7f:4e:d2:2d:d7:64:
d5:f1:bc:20:57:dd:aa:97:70:5b:84:7c:e7:31:7c:
03:09:0d:40:4e:97:de:41:4b:e0:b7:73:eb:c2:c7:
67:cd:4b:52:c7:5c:64:b7:d4:73:1f:18:ac:58:24:
8d:4c:cb:20:2e:b6:06:57:ae:38:c4:f8:a8:11:4d:
6b:60:24:18:29:58:d9:72:d4:a5:fb:0d:9c:b7:90:
27:5b:e3:c5:72:40:c7:4a:3b:35:2b:58:00:74:a0:
c1:da:0f:35:1b:78:6c:c3:0d:ea:7b:af:ec:14:38:
9d:a9:92:45:b7:bb:5e:73:ad:8e:0b:57:80:8d:7f:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:5E:59:BB:40:18:CB:71:36:3A:85:BC:4C:0D:57:C0:7E:F7:AA
X509v3 Authority Key Identifier:
keyid:6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6f:70:8f:8f:13:87:c2:41:16:be:85:00:a5:9b:b3:8e:3f:
81:33:ac:ae:b9:1c:42:2d:2b:c7:0a:d2:2f:9b:02:0b:16:50:
36:f0:e5:b7:4c:4c:f3:b4:54:73:e5:3f:fa:c1:eb:59:4f:61:
0d:dd:48:2f:64:43:e3:33:9a:75:20:08:76:c1:8b:01:ac:4f:
c4:12:6a:2f:fc:3d:b6:ae:15:73:7d:6a:7e:ae:53:c9:c1:31:
d3:f5:9a:cd:6a:fb:92:ae:ec:df:bb:5b:eb:8a:44:71:5a:25:
76:ab:77:ba:90:4d:b1:99:a1:39:0d:d6:72:aa:01:15:32:01:
36:7e:50:32:22:60:36:51:21:bd:31:b2:fd:44:57:15:7c:5f:
48:fb:a8:d1:ba:c8:4d:ec:4d:b3:a4:3c:8b:01:bd:32:93:1d:
bf:cf:65:45:8b:3d:0a:c3:c8:86:c5:6c:eb:c6:1f:26:23:2c:
4f:2f:90:40:a1:ba:a5:35:76:e9:97:e5:8d:c5:1f:32:6d:99:
c9:9e:b3:81:e2:9c:4e:83:2f:23:f1:f9:fc:77:d5:94:22:2d:
d1:66:b1:67:3a:79:73:f4:2c:cb:90:85:e9:5d:91:68:9c:39:
e3:49:a7:20:9a:65:27:fd:ce:56:68:4d:f8:82:61:e1:86:fe:
7c:35:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:20:28 2026 by rpki-client