Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: JojaOub/PCi8x6dNuWXLz+EXdr5Dxz8Pt/79D4GgVvY=
Subject key identifier: 01:C4:63:40:BD:6E:13:B6:FA:BB:0E:9B:A9:A3:8E:C7:A6:69:07:9D
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 01A13CDCB0D68F361C29921D9E3DD7E8F44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 1A42
Signing time: Thu 15 Oct 2026 00:00:58 +0000
Manifest this update: Thu 15 Oct 2026 00:00:58 +0000
Manifest next update: Fri 16 Oct 2026 00:00:58 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: yPBvfGZzEB/9qh6RydeQlS2J9gHs0Nbdn6ryhIpiuf4=)
2: inWJjPlJFW21pp4od2z3iY_uZEk.roa (hash: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:b0:d6:8f:36:1c:29:92:1d:9e:3d:d7:e8:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Oct 15 00:00:58 2026 GMT
Not After : Oct 16 00:00:58 2026 GMT
Subject: CN=01c46340bd6e13b6fabb0e9ba9a38ec7a669079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:16:be:97:c3:4d:b5:9c:43:eb:f3:56:b1:
65:de:c6:27:7e:7c:ed:25:68:99:06:81:81:f4:1e:
b4:ec:7d:4a:60:99:d7:2b:03:fd:c6:75:9a:3e:b9:
3f:55:16:9f:65:31:cf:40:36:da:41:59:3f:f7:68:
0a:2c:b2:4d:31:46:77:43:4d:28:d9:f7:2e:83:1f:
3e:12:1b:b1:fc:87:6f:6d:06:03:6d:06:63:a3:ea:
5c:51:f9:8d:a6:b7:45:8c:a3:e6:3c:a8:9a:30:c0:
ac:82:d3:b7:bd:b1:ac:c5:82:e1:52:bb:86:af:25:
d3:b6:e8:51:f3:70:64:7e:e8:91:69:78:47:77:7d:
48:8e:09:26:18:ff:8a:73:7e:89:3d:27:3f:bc:8e:
2a:6b:1b:e8:8b:9d:ee:19:1c:56:38:81:d7:80:d0:
26:08:a0:eb:50:c7:2d:9b:f5:ed:d2:8e:f8:07:26:
81:36:ad:aa:e4:31:cf:36:2f:e2:0b:21:b9:9e:70:
8c:03:58:1f:26:f2:01:b2:71:b5:3a:3e:47:01:90:
8a:a0:38:b6:45:0f:be:14:27:c0:36:d8:05:a4:cf:
b5:c7:a3:be:22:b2:e9:3c:b3:1c:1e:dc:2f:65:0b:
1d:bc:3e:bd:fe:31:6e:67:76:c3:55:ea:cf:ce:d8:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:63:40:BD:6E:13:B6:FA:BB:0E:9B:A9:A3:8E:C7:A6:69:07:9D
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:31:a6:c2:23:00:dd:3e:53:a6:a5:42:4a:1c:23:4c:bb:ec:
40:20:29:9a:29:84:22:2c:b2:cf:19:5b:0a:f7:cd:f0:5b:33:
f6:72:7d:71:7c:da:63:78:20:e8:97:af:83:c2:31:79:34:82:
e3:85:5f:f2:12:60:7b:f0:99:28:8f:62:f1:58:65:1e:66:b3:
cc:c9:20:8a:c4:71:b0:9b:cb:d7:e1:3d:c1:86:3b:4c:8f:fa:
b5:2b:23:6d:62:80:55:30:b9:01:91:23:92:85:ea:3b:ab:8e:
f5:1f:84:21:bb:9b:d9:e2:a3:0a:be:71:ee:1c:7a:a9:07:1f:
eb:4f:da:5b:7e:86:ea:2c:ca:67:1a:2a:68:67:f5:47:87:25:
ec:50:1b:6a:58:42:88:73:40:90:96:2d:65:b6:06:c8:cd:30:
0c:46:a8:91:27:ab:23:52:67:d3:13:b3:d2:cf:a4:78:e6:ef:
8c:59:e8:98:07:99:bc:b4:6f:f8:33:5d:75:6b:73:16:4a:f7:
3a:a8:7b:1a:29:a4:6e:b8:f8:2c:c9:71:bc:00:c0:0a:71:27:
ea:c0:72:9c:f4:38:b5:cc:35:17:1a:c4:48:ce:12:46:7b:2d:
6a:73:55:0e:c0:46:5e:b5:76:a0:99:c5:95:61:e1:7e:64:ec:
6c:2d:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:52 2026 by rpki-client