Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: KAN0+4OnXy1gRjbH22nhfDRzu9t16agnZCBlMG3DIOo=
Subject key identifier: D9:94:B8:E9:B6:89:C2:33:E8:DB:CD:C6:B7:9E:60:35:2B:74:39:12
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 019D05F8ADD4635EBB2A21E00254A773ED5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0BF4
Signing time: Thu 19 Mar 2026 12:01:16 +0000
Manifest this update: Thu 19 Mar 2026 12:01:16 +0000
Manifest next update: Fri 20 Mar 2026 12:01:16 +0000
Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: z/Xb8dy0sLbI94t6SK6voumSHaHl1Q/3XVvkCvdXyjE=)
3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:f8:ad:d4:63:5e:bb:2a:21:e0:02:54:a7:73:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Mar 19 12:01:16 2026 GMT
Not After : Mar 20 12:01:16 2026 GMT
Subject: CN=d994b8e9b689c233e8dbcdc6b79e60352b743912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:ed:a0:0f:8e:c6:9e:8d:95:e8:b3:6d:73:
52:25:07:fc:be:b0:55:1f:a1:1e:77:0d:42:b7:b1:
9e:85:c2:74:44:2d:24:ce:bc:cd:89:76:05:02:87:
1f:7e:d5:6b:d5:5d:3d:62:24:7e:29:0f:a0:b6:9b:
ce:3a:2c:58:71:4d:0c:c2:dd:be:d1:f6:0e:ef:3c:
f5:7a:59:3b:68:d5:58:77:6a:7e:5d:a2:94:15:0e:
9c:63:3b:b2:23:06:98:cb:6e:d7:aa:56:cf:50:1f:
b2:c3:00:19:ce:2c:ca:59:5e:17:75:2c:fd:ec:72:
12:d1:a8:8f:69:d1:ff:82:50:4e:5d:ba:b7:50:b4:
39:eb:b7:b9:6f:2c:ab:b7:09:d0:01:6f:95:13:e3:
25:45:46:e6:b5:b6:2a:6b:79:f8:d2:7f:67:30:80:
ca:e3:5e:8e:05:70:92:3c:04:cf:8e:d9:80:39:69:
2d:63:f5:b7:e6:90:5b:e1:bd:9f:97:1c:c6:bb:f3:
19:7d:ca:15:25:3e:13:ef:be:a1:21:a6:dd:0a:06:
6c:c6:7c:44:8b:c9:23:31:00:77:d5:4b:4b:81:13:
2e:1f:55:4b:99:f7:be:15:4b:86:fe:8e:d7:d9:0c:
2d:bf:b4:a9:74:82:7d:9d:a2:74:26:41:6c:ae:5c:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:B8:E9:B6:89:C2:33:E8:DB:CD:C6:B7:9E:60:35:2B:74:39:12
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5e:01:c5:f8:49:12:a5:06:ae:60:7a:97:67:db:de:84:63:
85:c7:b5:43:d2:f5:f8:f3:42:27:f6:d8:24:77:55:10:57:c3:
fa:20:d1:f9:e4:7f:a1:4d:da:4b:bd:c9:9d:26:62:6a:26:35:
a5:1d:96:21:18:f7:9d:68:ef:aa:0a:c9:23:58:aa:ae:f3:a6:
9e:ca:86:8d:04:7c:e5:3c:77:81:06:73:17:0c:26:ab:55:c4:
18:55:e6:6a:56:d0:3d:b3:b2:6a:77:b0:99:4f:65:13:bf:37:
dd:7f:d1:88:13:69:ec:77:0b:a3:a5:dd:8c:b3:f5:2e:a8:03:
8e:76:47:3c:d9:0a:47:9a:e6:93:2c:04:d6:57:d2:8f:54:a2:
e9:9d:a7:75:b4:1b:ab:c3:74:7d:6d:01:98:04:c0:68:48:5a:
ab:9a:2b:18:0e:56:31:53:e2:69:d4:d6:51:7e:b1:5e:d5:65:
85:36:dd:20:8f:b6:de:a2:f0:5e:eb:dd:7c:1d:a6:23:c7:54:
cd:a9:82:c0:06:da:4c:31:a8:9c:29:43:18:09:0e:43:d7:1b:
e2:86:01:d0:d0:f3:91:ea:3b:ab:fe:b9:b3:c7:04:e0:d7:ce:
c3:b3:14:43:70:df:86:1b:ff:ef:9e:d7:a4:67:64:cd:a7:93:
08:16:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:07 2026 by rpki-client