Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: V0XQjnsCUZfr+5zJJQfQ/8MCpBVB4DAJ5809wDhPuLA=
Subject key identifier: 49:ED:56:04:0B:57:AD:C6:3B:CA:D2:DC:BA:24:D3:DE:44:5F:16:AD
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 019D37F7B0AD4707CC8077990124BC7BBA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 0552
Signing time: Sun 29 Mar 2026 05:01:12 +0000
Manifest this update: Sun 29 Mar 2026 05:01:12 +0000
Manifest next update: Mon 30 Mar 2026 05:01:12 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: 3h5Wc50oqK6cWXUfEjRnnQYkjaouH4uohMRSfku+x80=)
2: EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa (hash: efDuAmcnNpFOvzFx+pZEPqBZJO7OWPwyoMU32+Sy6mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:b0:ad:47:07:cc:80:77:99:01:24:bc:7b:ba:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Mar 29 05:01:12 2026 GMT
Not After : Mar 30 05:01:12 2026 GMT
Subject: CN=49ed56040b57adc63bcad2dcba24d3de445f16ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:db:7b:6d:5d:c6:46:68:c0:f9:63:84:31:
8f:a9:83:95:49:0a:f1:85:74:97:48:bd:66:1f:84:
ce:03:82:5f:04:2d:6d:76:cf:39:4d:64:6e:5c:c0:
9c:91:34:c9:78:da:5c:5d:39:8d:fe:5a:6b:ed:3f:
76:12:9e:f8:16:1d:75:d8:a2:64:c2:b7:7a:42:65:
6b:da:66:a4:02:5a:d6:ab:99:5f:b3:3b:93:4a:f1:
fb:1b:9c:57:63:97:0e:d2:f5:ac:27:da:25:ac:ae:
f2:05:89:37:ac:98:25:68:29:3e:79:6a:72:f1:23:
98:4e:ba:9b:49:d9:bd:d1:4f:3c:d6:d8:29:34:e2:
e4:2e:3e:3b:5d:06:f3:ea:cb:b7:50:36:9b:2b:45:
4d:52:b7:18:8b:ff:eb:5f:b4:18:fe:90:b2:88:c2:
98:29:e7:9b:49:2a:ca:36:9a:93:33:ba:14:19:48:
be:d9:bd:f7:5b:a0:a1:e0:93:5e:5b:17:99:9a:ed:
aa:6b:d9:a0:c4:e6:3b:64:26:78:3f:42:3f:09:f5:
ba:87:00:bb:2a:35:35:9f:c4:28:0c:47:88:2e:4c:
8d:89:da:83:43:47:9f:4a:34:a5:6b:56:7b:74:d2:
91:dc:a7:34:59:d4:1a:2a:16:f5:1b:89:23:35:56:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:56:04:0B:57:AD:C6:3B:CA:D2:DC:BA:24:D3:DE:44:5F:16:AD
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:db:b6:97:8c:fd:21:7d:03:60:68:98:56:48:b0:d6:d9:
d7:97:fd:f3:09:05:4c:87:25:5c:1d:94:0d:0e:28:a5:81:78:
69:5f:02:13:81:0b:f7:a8:ec:10:55:d1:13:f6:4d:5c:cc:5e:
60:b4:bd:5d:73:e4:99:bd:70:2f:dc:4c:88:32:a9:2f:4d:dc:
48:4e:33:62:89:59:fd:30:d7:28:c2:8d:5a:7b:7a:f3:4e:3b:
be:c6:12:7c:9c:19:8c:fc:42:20:50:14:98:ce:18:82:c5:3a:
55:5c:b1:c0:19:1b:58:bf:91:a3:97:e7:34:f3:cc:7e:c1:7d:
4c:b3:f1:16:6c:a4:1e:28:4a:e4:17:9a:2f:7d:32:90:c1:b8:
8b:02:74:90:1d:95:78:e1:58:f2:58:af:42:22:d0:65:da:be:
a0:79:1c:52:79:de:51:67:2d:f7:83:4c:21:71:1c:38:e1:83:
09:e9:19:e2:b8:17:d6:77:fd:b9:42:14:61:0f:ea:14:2e:24:
78:e4:92:17:45:5e:08:1e:75:a0:1b:c4:e9:81:3d:36:ef:71:
c3:c4:b3:78:0e:68:9b:0a:ff:7d:95:ba:5b:7d:3f:b2:da:7e:
ad:29:db:df:7b:48:cd:b1:c2:b2:58:0c:ac:16:83:1e:a2:62:
b3:96:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:00 2026 by rpki-client