Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: ynfx6gJz+uEw1WAFsuwoj8ac0en2z7Fb+IoswnYy0m4=
Subject key identifier: B7:0C:F8:B5:DE:74:03:24:51:DD:55:A4:1E:7B:D0:05:BF:48:A8:DD
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 01A01FB0A80E2407EE8A51BCDB018FC51E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0D8F
Signing time: Thu 20 Aug 2026 15:01:06 +0000
Manifest this update: Thu 20 Aug 2026 15:01:06 +0000
Manifest next update: Fri 21 Aug 2026 15:01:06 +0000
Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: B+WUTyIijQlg19+ltMmF4P75mp1wKUmhWWnLeOL0xG0=)
3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:a8:0e:24:07:ee:8a:51:bc:db:01:8f:c5:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Aug 20 15:01:06 2026 GMT
Not After : Aug 21 15:01:06 2026 GMT
Subject: CN=b70cf8b5de74032451dd55a41e7bd005bf48a8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c9:ee:c1:fd:8c:84:9b:2e:15:a5:75:f6:1b:
d9:36:00:3e:03:b0:7f:9f:43:c0:08:18:64:88:82:
f6:33:3c:97:5d:0c:e5:f9:23:45:a0:ae:a4:7b:1f:
3d:e9:90:d8:85:8b:65:49:08:e5:a7:ab:80:bf:ff:
1c:bc:89:70:4c:38:5c:f3:e0:23:c3:cf:44:6a:fd:
83:f8:01:4e:35:c5:65:02:dd:44:73:f1:a9:69:9d:
cd:e5:2b:7b:2d:76:9d:b9:24:48:13:6c:29:25:45:
d5:ed:2a:fd:8e:cf:3c:d4:ca:d3:93:34:e6:14:9c:
70:5a:72:3e:d5:37:77:e1:ce:ea:b0:c1:cc:3e:06:
2b:29:c5:5e:a6:32:24:3f:2a:e0:9f:c6:41:7f:e7:
b2:29:92:d0:1d:3b:93:18:ba:11:10:dc:45:d3:ed:
07:23:98:c6:74:99:d1:95:01:dc:19:c8:c5:55:af:
41:db:83:a4:70:d4:4d:4f:ef:93:49:2f:52:9f:dd:
7b:a8:46:7f:c7:27:dd:db:b7:c5:d3:ec:10:16:fb:
31:c3:17:07:75:80:9b:9d:49:c1:95:1d:1c:f9:fc:
44:6b:95:4d:b9:35:b0:cc:d3:73:6f:34:3e:e5:bd:
5f:68:fe:98:26:2d:a6:56:8a:1d:17:3b:bb:2c:ea:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0C:F8:B5:DE:74:03:24:51:DD:55:A4:1E:7B:D0:05:BF:48:A8:DD
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b1:66:b1:e4:e5:4c:46:a1:a8:79:c7:eb:10:c9:4c:a0:72:
c0:d4:30:78:36:11:ef:7c:26:f1:42:8e:4b:6f:5f:6f:28:c3:
56:e8:ac:6b:e9:3a:4d:7e:d5:d9:2e:ef:41:5b:ae:43:6a:e9:
a0:67:2f:1a:f5:6f:7e:0f:d9:72:67:98:a0:46:43:6c:e2:7e:
af:39:1a:44:46:53:0b:2a:67:cb:86:ab:34:6e:f1:6d:71:bd:
fd:4d:ae:52:17:a4:07:a6:90:28:18:a8:02:94:89:d4:6c:4f:
0c:83:44:5d:64:da:ec:47:26:76:35:85:8a:c8:41:d2:70:b4:
b6:15:89:51:e5:05:c3:fb:e0:b3:46:84:19:b5:8c:9b:b4:dc:
6d:41:2d:ad:bd:e6:30:e9:1b:39:14:92:3d:8b:0c:04:ab:d0:
3a:3a:40:5a:e2:80:ac:7b:2a:e3:78:7d:d7:fb:02:4e:f4:d1:
9b:7a:71:cf:f9:7d:45:77:08:5b:3c:a7:b8:54:d2:67:99:d4:
25:6d:4e:a1:84:4d:a2:62:55:6e:56:7c:00:8b:ad:12:e0:79:
7f:15:de:02:6c:f7:82:51:a4:c7:84:9b:7e:1a:9a:9f:81:e7:
0e:04:12:51:1e:77:2d:ec:38:be:41:6f:27:b2:7d:c3:72:ab:
60:17:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:52 2026 by rpki-client