Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: F6MZjfiHZnpgR9xPRws7ooLDgcghc/dRFtoZa3J+9Co=
Subject key identifier: 2F:CF:BB:A9:FF:A6:1E:51:78:46:67:B5:63:AE:25:4F:FD:81:7A:04
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019F189DF0B10CA5ADAF101CB67D2A359612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 13:00:31 +0000
Manifest this update: Tue 30 Jun 2026 13:00:31 +0000
Manifest next update: Wed 01 Jul 2026 13:00:31 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: TARQPzZOSal+fWOMM0TTOEPM9HyiqKuQwnWusDtxZ98=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:f0:b1:0c:a5:ad:af:10:1c:b6:7d:2a:35:96:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jun 30 13:00:31 2026 GMT
Not After : Jul 1 13:00:31 2026 GMT
Subject: CN=2fcfbba9ffa61e51784667b563ae254ffd817a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:9c:58:a5:c2:7d:81:a9:b9:b7:08:b7:57:
14:2d:d7:aa:9e:a1:25:7d:aa:31:dd:59:ff:b0:93:
5c:e9:3f:ce:30:6f:7f:cc:0c:ba:ca:97:13:1a:f1:
93:06:bc:c5:6e:28:f8:73:32:c2:82:61:10:06:a9:
8e:c7:ba:e8:b2:34:c7:31:f0:28:48:08:86:93:5b:
9d:0b:31:93:d6:5c:79:d6:64:c7:30:07:cc:5c:c7:
80:28:2a:90:2c:0f:71:c4:76:f7:39:d4:79:4f:11:
e6:3e:76:3d:39:8a:bd:32:71:bf:72:2b:e0:3e:e7:
79:b7:3e:76:9b:3f:f7:5e:32:a4:ae:f0:a4:3e:e3:
7a:e3:fd:ce:10:5e:66:26:a7:23:3d:44:12:1a:93:
6c:f7:7f:53:8b:85:9a:7c:4a:cf:84:0d:b9:2d:90:
23:f1:9e:e5:f5:44:43:e5:1f:6f:36:fa:75:5a:15:
f3:06:ca:ef:94:c8:3a:4f:74:ba:40:4c:22:e5:08:
d7:99:d7:cc:bb:c1:d5:5e:95:ad:aa:f4:fd:cb:50:
41:c1:69:e7:19:07:f8:ed:87:42:ab:80:13:62:f5:
69:a4:80:65:43:87:fe:15:ff:ae:7e:43:c7:98:f5:
03:e2:7b:7a:89:d4:63:f4:c6:04:8c:0d:28:56:7b:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CF:BB:A9:FF:A6:1E:51:78:46:67:B5:63:AE:25:4F:FD:81:7A:04
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:e9:c7:90:f9:63:d6:59:b2:c7:b0:47:ec:73:56:96:91:
38:b2:a7:c7:9c:d5:50:16:16:98:10:34:3c:ac:d7:5c:c9:ba:
e0:46:35:39:61:aa:dc:e4:db:81:ec:99:46:f2:a0:f1:fa:0c:
12:98:7e:04:84:29:aa:48:b7:82:37:da:df:ef:92:a3:f1:b8:
6b:9f:0e:b3:de:be:d6:69:a0:67:73:b8:14:69:ce:6b:72:db:
b3:76:bb:a7:49:b4:2d:00:97:a4:d3:0e:d9:50:f3:8a:ad:fb:
f5:39:d8:e7:06:fe:d0:33:1d:35:bd:02:11:cb:f8:df:30:11:
6f:e3:b3:3a:5e:8a:30:c5:9e:dc:7d:76:04:34:35:78:09:1e:
1c:b1:d6:fc:33:84:4b:51:18:cb:7c:4d:db:72:3b:ca:dc:e8:
3c:fe:80:0d:0c:45:6c:ff:02:37:eb:ad:40:99:99:47:1e:03:
30:8b:6b:c0:8e:a7:0b:89:3c:90:7a:25:af:f0:db:e4:d1:3c:
41:fa:fb:05:26:24:d6:83:35:08:2c:1c:83:f5:ae:6e:2b:10:
e0:f0:e1:f8:73:3d:18:ef:1e:1a:94:af:e7:f9:bf:27:9c:a0:
ca:c1:1f:9a:33:b1:27:65:29:69:c2:88:d4:1c:dd:1c:11:91:
c2:27:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:22 2026 by rpki-client