Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
File: bHwktnELOtfXKCoMlH9rlTHVjsU.mft (raw, json)
Hash identifier: tNxVNuVTcxWto9nW3bCf9G+82qfAQdxg6B3XuMYq8jQ=
Subject key identifier: F1:69:EC:93:85:82:7C:74:A3:A1:41:07:2F:AF:FE:A1:43:7D:DA:5C
Authority key identifier: 6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
Certificate issuer: /CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Certificate serial: 019D38D39AE156E8B739FF9318DAA1FF67F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: bHwktnELOtfXKCoMlH9rlTHVjsU.crl (hash: lJiu5NN+AmgSKKp+IhvPu0rzeJKVzZSWAjrPO+hGoAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9a:e1:56:e8:b7:39:ff:93:18:da:a1:ff:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=f169ec9385827c74a3a141072faffea1437dda5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:a1:87:94:19:99:22:6a:fd:83:4c:1c:e4:
2e:13:56:7e:e3:97:b3:e8:a9:14:8d:39:a1:08:fe:
57:45:99:67:13:71:bc:e4:eb:d9:74:58:62:99:57:
b0:15:30:19:62:4b:bd:51:52:02:67:38:a9:fe:c9:
8b:0c:5b:31:15:e4:c0:ac:fe:c8:9b:ef:68:49:df:
7b:fe:3e:81:54:53:83:92:fc:58:4e:8a:04:74:70:
4c:63:ed:66:bc:48:1f:77:cc:c8:2f:2b:8c:6f:e6:
e5:d0:2a:3e:67:f6:ad:93:2c:9c:10:ad:bc:8d:f3:
07:01:99:e6:88:83:2d:56:3a:9f:1e:e6:4e:95:f4:
5c:f5:a2:54:f0:f2:a8:a3:e9:95:11:b0:ba:b2:aa:
be:a1:91:a4:3e:4e:b7:af:e9:b0:0e:1f:51:0c:ee:
00:16:af:fd:40:45:6f:fe:ef:7d:e1:33:cc:38:81:
d3:0e:ad:ac:5b:f7:9f:c9:da:9c:62:5f:55:96:5e:
e3:7d:81:33:5e:fc:6e:34:e7:9c:ea:72:42:4f:52:
9b:7c:51:97:d5:aa:6e:59:15:31:e8:b6:3c:1b:ac:
4a:a9:e0:d9:4c:4f:dd:f1:64:79:57:dc:d1:be:7d:
eb:46:83:35:b6:fa:79:53:be:b9:f5:36:50:80:ca:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:EC:93:85:82:7C:74:A3:A1:41:07:2F:AF:FE:A1:43:7D:DA:5C
X509v3 Authority Key Identifier:
keyid:6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:53:d9:ae:05:cf:90:04:18:2d:c1:77:b7:f3:88:25:1e:
c1:0b:3f:2e:1d:d6:07:d5:24:ed:1b:12:6a:ce:76:13:61:8b:
ee:9e:54:49:8e:52:fb:f6:77:d0:12:0b:94:3d:18:d0:0f:15:
da:23:b8:3f:1f:d5:60:c1:52:e3:26:ac:41:79:09:32:8c:25:
ef:e7:c8:61:03:84:65:ee:13:89:8e:5a:15:42:dc:21:8c:a1:
2c:f6:67:76:eb:5f:9a:81:3a:2e:21:71:5d:02:e7:25:03:a1:
db:e8:29:bf:a0:a9:bc:f9:2d:a7:79:fe:99:60:ea:07:9a:f4:
d6:fb:2d:5a:a0:90:fe:b2:7a:48:94:ea:ca:ee:e6:8c:da:1b:
eb:2f:3f:28:32:0b:51:48:e7:ca:c9:c2:76:d5:63:aa:8c:b9:
01:ce:8f:88:ee:6e:dd:77:0b:3f:e2:92:78:d5:bb:ad:ac:74:
c7:00:e7:c6:6a:10:c2:c7:d5:35:82:ed:b5:43:c8:69:9d:c2:
70:d7:4c:db:cb:5f:89:5d:88:13:ac:be:4b:7f:b2:1f:40:08:
a1:57:3e:e7:38:eb:3d:b9:22:8c:ad:62:d4:bb:94:56:67:a4:
52:be:0b:39:d1:3a:2c:45:2a:b8:d0:21:89:f5:a5:74:ee:2a:
e7:80:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:08 2026 by rpki-client