Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: BdWnFQwM3tf7cD+rZbpLTmUL2RmrLS5dbQ9n+VxQHtU=
Subject key identifier: BC:AE:5C:05:54:04:89:CB:A8:DF:CE:E1:8F:09:93:5A:E6:67:20:B3
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 019D389C2DE89678D081771932F9A9AC1516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 1261
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: B2icUM6CeeejuMgcUvx_kDaA564.roa (hash: MnhHbagUBXFrbwkwtXZWHt9EfUip9vPtnZBoYPXkEak=)
2: I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa (hash: CvvU8QwgatBH8M1Cq+F7WmSuoj+U0VtrnMnDWpsz+50=)
3: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: FP/K7A2sVf2ChdvO6cICDMzgDd1NJQ/ATJPUWy4Uk3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2d:e8:96:78:d0:81:77:19:32:f9:a9:ac:15:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=bcae5c05540489cba8dfcee18f09935ae66720b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:54:61:c9:d6:68:da:ff:97:55:b8:99:ec:
58:2d:f2:27:5c:b9:7f:b8:89:0c:80:45:b6:a3:83:
0f:cf:e4:b7:a9:5a:8d:2d:f0:67:0b:a4:71:60:51:
e7:aa:2a:14:aa:85:68:cc:a6:4e:95:d8:e0:76:ec:
f6:29:20:36:93:02:cc:69:f9:99:80:bf:07:85:60:
71:87:f1:8a:5d:87:2e:e2:ed:ac:c4:05:eb:6f:83:
a1:33:9b:7d:11:b7:5c:a3:98:b3:70:c4:9e:f5:9f:
25:87:ff:cb:bd:b9:df:64:91:ed:a1:e4:79:74:68:
ba:d6:a5:f7:89:27:9d:b1:da:af:db:a2:70:85:5d:
8b:f5:39:ba:88:95:03:fa:39:0a:75:36:96:23:d4:
f1:ed:52:3a:e8:f8:b6:56:34:ca:5b:33:b3:19:45:
29:31:00:9e:06:4a:99:b4:26:a6:e0:80:ba:f4:43:
ba:9a:59:d0:05:76:a8:d8:f7:9f:0e:b0:ad:29:3f:
ab:4c:14:21:fc:9b:aa:e5:59:fe:a6:87:56:dc:31:
81:03:6e:6f:e1:e2:2c:a3:ea:cc:1a:39:3f:34:ab:
3e:14:a1:2c:6f:24:94:90:7a:01:41:1b:88:b4:8f:
4f:c4:b6:43:b0:f3:d4:a4:8d:66:d9:a3:48:51:f5:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:5C:05:54:04:89:CB:A8:DF:CE:E1:8F:09:93:5A:E6:67:20:B3
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:93:31:aa:7a:c9:89:a3:de:06:1c:26:27:5b:eb:79:ea:43:
61:88:c4:d9:a6:dd:58:99:07:39:3a:03:b1:f6:18:a1:9b:c3:
1c:cd:91:84:45:74:f2:1e:b0:56:7c:f7:b4:20:70:f3:65:b3:
8f:7f:96:60:54:da:dd:f8:ab:8a:ca:23:62:16:9c:6b:3c:20:
26:5a:99:69:7b:23:67:0a:a6:7d:48:ef:ae:9f:75:0a:5f:ef:
8a:1d:2a:e2:85:84:83:a3:61:5e:63:b1:0e:e6:06:09:d5:e7:
bd:78:d4:cb:1f:50:af:01:b6:f4:37:32:62:86:1b:9d:e6:2a:
d5:7f:0f:8f:02:40:4b:c6:24:cd:f1:ca:64:01:70:b6:ac:23:
9c:e3:8a:05:c1:cc:0b:51:ba:28:33:e6:ea:67:41:a0:69:a1:
b8:2b:ab:9e:3b:5f:55:a3:c4:9e:fa:3f:96:aa:7a:1f:6f:02:
60:26:25:ca:0d:5a:b3:e9:97:ef:ee:9f:f0:be:9e:13:45:3b:
a4:23:36:8b:5d:5e:03:1a:d3:1e:7e:50:19:32:bb:fd:99:c7:
70:4b:7d:67:12:24:e6:ca:69:a6:f3:68:4f:08:87:13:38:30:
dd:9a:d4:12:fd:f7:0c:d2:4a:c6:c9:3e:81:2f:b8:13:94:27:
8e:07:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:07 2026 by rpki-client