Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: 3DcXXJplyMxGBg76JD1A1EtznSfDKlcdEcDTlFBoXQQ=
Subject key identifier: B3:D4:95:D3:96:09:23:05:26:06:E2:45:06:56:E9:7F:BA:1A:5B:98
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 01A13D13531AB46CBD3F6E3EC7922A33A28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 01:00:38 +0000
Manifest this update: Thu 15 Oct 2026 01:00:38 +0000
Manifest next update: Fri 16 Oct 2026 01:00:38 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: bmJE6EkDuyeoQqwl6y1zl0Sez4d1TQmTgFd7R30drY4=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:53:1a:b4:6c:bd:3f:6e:3e:c7:92:2a:33:a2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Oct 15 01:00:38 2026 GMT
Not After : Oct 16 01:00:38 2026 GMT
Subject: CN=b3d495d3960923052606e2450656e97fba1a5b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:dc:03:ca:d6:db:ee:24:cc:a8:fb:40:d2:
d4:c0:f7:8c:a8:b7:18:61:5d:f6:12:b4:3c:cc:b9:
5f:9b:ea:31:ba:4b:12:c6:25:ca:7d:de:10:e3:98:
28:aa:77:3c:48:0a:5c:3e:93:65:a7:98:ec:07:23:
43:a7:3e:ce:6c:19:1a:55:55:47:91:35:85:86:4f:
d1:9f:1e:0c:17:04:82:33:63:93:dd:fe:cd:f8:48:
5f:5e:c9:22:77:39:72:e9:6d:bf:e8:b9:40:26:b6:
6e:68:e4:c4:7e:ec:d2:1e:21:42:f1:0e:46:06:eb:
00:be:dd:59:92:dd:36:00:b2:64:68:14:70:78:9c:
09:2a:cd:89:4d:15:ba:ed:9d:70:7b:1e:ae:50:72:
e0:5d:f5:52:06:c8:45:f0:9d:ce:9e:4b:7c:40:4a:
bb:a5:36:78:00:7b:1e:8e:81:36:f6:71:d9:b2:f7:
fa:a8:22:35:35:d6:47:35:bb:cb:fd:5a:26:11:51:
6a:a0:3c:00:96:58:82:14:73:28:52:93:b8:9f:05:
12:d9:0b:9c:22:20:97:2c:9b:b0:5c:d0:20:6a:92:
fb:e2:f0:96:95:71:3d:7f:6a:e8:b4:30:ed:65:f2:
0b:74:5c:01:29:f9:56:a5:86:ad:d7:6f:2a:6a:2b:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:95:D3:96:09:23:05:26:06:E2:45:06:56:E9:7F:BA:1A:5B:98
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a8:ed:84:50:d5:84:c9:2e:50:3b:83:fd:53:97:56:df:40:
0d:f4:f4:2f:cc:92:f6:bc:0e:a6:85:5d:dc:65:49:2b:42:27:
06:b9:8f:a7:a8:a1:87:5d:cb:e1:75:ac:32:1a:cc:bf:a9:7b:
a9:f0:41:94:9b:9e:06:12:57:fc:dd:ad:27:9f:b6:2f:0e:21:
eb:75:1d:93:1d:b3:58:29:84:5c:07:22:db:66:2a:69:ca:24:
a9:4b:3b:9b:22:cd:fa:35:d5:3e:06:26:e0:dc:c5:68:b9:4b:
36:38:40:ed:de:a5:52:8d:c2:fb:6e:4d:bf:15:f7:04:f7:5a:
eb:76:a8:e7:41:e0:ee:d5:d4:5d:22:83:b0:ce:3d:e7:a2:be:
00:f9:04:a6:75:ba:57:03:33:2b:35:54:bd:af:39:64:58:53:
df:3f:79:37:6d:35:6f:3b:79:d4:5c:fc:b6:92:59:99:5f:7f:
09:77:e8:4b:74:9c:6c:b0:1e:b6:4b:bd:5a:c4:5e:a1:1e:ed:
f9:13:c5:85:d5:50:f4:a5:12:f0:92:69:b5:ff:b3:96:33:77:
4a:5f:d8:dc:e6:10:02:92:37:16:78:01:99:fa:5d:66:67:eb:
a3:cf:0a:30:09:93:9b:96:23:2d:ae:23:e2:66:19:c8:93:20:
81:f9:4b:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E1MatGy9P24+x5IqM6KLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5
ZGI3ZDAwHhcNMjYxMDE1MDEwMDM4WhcNMjYxMDE2MDEwMDM4WjAzMTEwLwYDVQQD
EyhiM2Q0OTVkMzk2MDkyMzA1MjYwNmUyNDUwNjU2ZTk3ZmJhMWE1Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN7cA8rW2+4kzKj7QNLUwPeMqLcY
YV32ErQ8zLlfm+oxuksSxiXKfd4Q45goqnc8SApcPpNlp5jsByNDpz7ObBkaVVVH
kTWFhk/Rnx4MFwSCM2OT3f7N+EhfXskidzly6W2/6LlAJrZuaOTEfuzSHiFC8Q5G
BusAvt1Zkt02ALJkaBRweJwJKs2JTRW67Z1wex6uUHLgXfVSBshF8J3Onkt8QEq7
pTZ4AHsejoE29nHZsvf6qCI1NdZHNbvL/VomEVFqoDwAlliCFHMoUpO4nwUS2Quc
IiCXLJuwXNAgapL74vCWlXE9f2rotDDtZfILdFwBKflWpYat128qaivprQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPUldOWCSMFJgbiRQZW6X+6GluYMB8GA1UdIwQY
MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt
YzJkYzdhMDU4ZTMwLzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw
LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqjthFDV
hMkuUDuD/VOXVt9ADfT0L8yS9rwOpoVd3GVJK0InBrmPp6ihh13L4XWsMhrMv6l7
qfBBlJueBhJX/N2tJ5+2Lw4h63Udkx2zWCmEXAci22YqacokqUs7myLN+jXVPgYm
4NzFaLlLNjhA7d6lUo3C+25NvxX3BPda63ao50Hg7tXUXSKDsM4956K+APkEpnW6
VwMzKzVUva85ZFhT3z95N201bzt51Fz8tpJZmV9/CXfoS3ScbLAetku9WsReoR7t
+RPFhdVQ9KUS8JJptf+zljN3Sl/Y3OYQApI3FngBmfpdZmfro88KMAmTm5YjLa4j
4mYZyJMggflLsA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:25 2026 by rpki-client