Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: w8PBLxWviUQUA8XGSqSAiCuUZKU/GVPoalQZaV4P/BI=
Subject key identifier: FE:D6:29:AA:D0:D8:5D:A7:24:D2:BB:10:31:FF:69:3A:9E:AE:C8:8B
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 019F37F2CE052064F1342BD740E07E0AE58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0D17
Signing time: Mon 06 Jul 2026 15:01:27 +0000
Manifest this update: Mon 06 Jul 2026 15:01:27 +0000
Manifest next update: Tue 07 Jul 2026 15:01:27 +0000
Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: 3FPrFZdFr8J5HZgRO/t93v2nUKCZ2oa5NmtXVqZtyy0=)
3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:ce:05:20:64:f1:34:2b:d7:40:e0:7e:0a:e5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jul 6 15:01:27 2026 GMT
Not After : Jul 7 15:01:27 2026 GMT
Subject: CN=fed629aad0d85da724d2bb1031ff693a9eaec88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:26:9d:79:4e:c2:3e:4f:d5:3d:9b:07:30:
29:ec:48:0a:9a:ee:56:2c:83:d1:c0:33:c5:43:0f:
4b:31:07:68:24:b4:ef:e7:d3:b5:6f:47:98:dc:c0:
23:dd:64:72:fe:c1:d4:ef:f2:4f:a2:4e:98:c8:32:
62:95:54:b3:67:2d:6b:f9:85:15:74:3f:56:0b:61:
83:f2:a1:1b:f1:92:13:61:1c:04:d7:24:b4:68:d6:
aa:09:2d:0e:43:b0:51:7b:af:ba:be:4e:e5:03:22:
a4:e3:a1:fd:df:d6:07:1f:d2:06:66:3d:88:82:97:
0b:97:40:ca:f6:d1:d2:53:a7:3e:f5:fd:00:27:f7:
20:88:af:db:93:29:d3:93:74:ca:2b:1a:1b:ba:f2:
4b:1d:b3:e4:c6:ba:cf:f6:4e:b9:53:57:30:7c:6a:
03:b4:e9:e5:bd:01:ed:34:7a:37:f8:28:8d:21:cf:
5c:a1:e6:dc:9b:de:66:70:bc:ce:79:41:97:bb:6b:
19:86:05:0a:5d:13:af:31:53:84:8f:e0:cc:a7:06:
9c:1c:aa:61:b7:2a:a3:c2:9d:08:60:77:88:51:cd:
1a:a1:ca:6c:e0:cf:69:14:a1:e1:e0:95:95:c3:b1:
8d:f1:bd:b3:f1:0f:0e:fc:dd:19:02:9e:08:04:9f:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D6:29:AA:D0:D8:5D:A7:24:D2:BB:10:31:FF:69:3A:9E:AE:C8:8B
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:67:19:63:bb:e3:a6:fb:e4:c1:f7:25:be:14:b5:1b:e0:00:
89:b3:07:11:4d:ee:37:08:d6:27:fd:46:32:7f:d0:c5:48:5d:
71:f0:f3:02:6b:7b:f5:e5:da:08:4f:9a:b8:a0:ff:76:1d:b5:
7c:19:c0:4d:82:ed:a0:22:bc:5e:d1:72:32:50:b9:48:2f:c7:
f0:60:ec:45:e4:a2:f3:67:ad:d0:20:04:98:68:06:10:5b:7a:
f4:0f:8d:e9:67:ec:5f:36:9f:b4:da:d6:66:41:48:4c:48:a6:
f4:f0:53:2c:40:1b:64:83:fe:b2:3a:84:b7:b1:d8:4d:37:e7:
13:ca:ca:7b:1d:08:60:5b:31:7d:89:eb:70:af:28:6c:57:1f:
26:d8:5f:a1:e0:2d:8e:80:a2:de:44:3f:b1:8f:3b:42:6d:4e:
c1:ce:fe:b4:41:90:fd:95:cd:20:61:3d:1b:82:d7:ad:31:21:
a8:99:0d:2d:8a:33:f1:a6:bd:21:4e:8c:13:89:79:db:e0:c4:
69:30:6f:12:0f:78:1b:20:8d:8b:7f:71:f9:e6:a0:56:48:b1:
15:98:e7:ad:0f:c7:bd:29:f5:77:1e:0b:f1:1d:01:08:d3:05:
f8:73:05:0b:70:9e:32:03:6f:9f:17:45:20:09:6f:32:de:53:
85:9b:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:24:55 2026 by rpki-client