Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: 1Ydd8tJAOuLS8e7y/9PgsuOEqXVve0p3TLxt/yI6YZ4=
Subject key identifier: 2D:79:A5:FA:3C:8F:13:FF:5B:4A:E8:30:DF:AA:AC:60:21:D2:08:2F
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019D39AE5B48191224AA6F75161534B1EAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:20 +0000
Manifest this update: Sun 29 Mar 2026 13:00:20 +0000
Manifest next update: Mon 30 Mar 2026 13:00:20 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: X2P2o6OuEwWfKBCzf/wIIgQ7xXW+bcasj0PmFTMIsgE=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5b:48:19:12:24:aa:6f:75:16:15:34:b1:ea:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Mar 29 13:00:20 2026 GMT
Not After : Mar 30 13:00:20 2026 GMT
Subject: CN=2d79a5fa3c8f13ff5b4ae830dfaaac6021d2082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:61:a0:76:3a:83:c8:cc:02:00:5f:e1:66:
b5:d0:d8:ff:bf:3a:5d:c5:f9:50:93:15:c1:b8:e3:
23:2d:39:c7:dc:51:4f:2b:f1:62:d9:85:7a:85:69:
92:16:92:a8:7a:dd:13:a4:2d:b4:80:39:e6:08:b4:
7a:88:bf:8d:11:67:f9:6a:3b:04:02:43:89:b8:cf:
e4:5b:6b:29:fa:49:a6:61:7b:36:d8:7e:b4:52:49:
67:3e:b0:ac:8e:ba:48:f6:02:8a:ce:00:24:6f:29:
2d:14:47:83:eb:69:ff:63:9a:9b:a1:34:02:ce:be:
13:6e:d0:e8:b1:ff:79:51:00:e6:b3:11:5e:76:fa:
75:28:45:89:c3:f7:59:9f:f0:8c:f3:07:85:16:7b:
61:6d:5c:d8:95:1c:d4:62:a8:14:e4:02:b3:f9:c0:
21:92:6e:0c:f9:08:ce:61:e6:11:45:01:e1:8a:43:
e8:c3:11:98:90:6a:b1:dc:21:7d:d7:e4:43:54:74:
01:7f:3a:e1:64:4d:58:85:3d:83:b8:b5:ee:0e:fb:
f5:04:d6:11:64:a7:45:8e:a1:bd:7b:7d:da:71:05:
77:ff:b8:89:10:2e:87:5d:55:eb:c3:de:4e:b7:94:
ac:8f:f1:25:ee:52:dd:23:e9:5b:db:99:2f:0b:41:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:A5:FA:3C:8F:13:FF:5B:4A:E8:30:DF:AA:AC:60:21:D2:08:2F
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ce:d1:c2:d0:4b:7d:4f:27:6b:9a:18:0a:17:99:76:b9:63:
95:bc:9a:d6:20:14:9d:e7:47:65:f7:02:a5:fd:d9:37:ef:fb:
3d:43:0c:67:9d:31:77:36:ad:cf:ef:5e:97:ff:64:bb:a0:0e:
7e:69:17:a4:78:b7:fd:49:84:4e:d4:7d:80:6a:8c:d6:5c:24:
6e:41:82:0c:9e:19:f7:31:6f:43:35:c4:e8:77:06:da:e2:cd:
55:a3:df:e4:7f:a3:44:aa:a7:23:03:7f:b1:89:ec:ae:3a:33:
86:4a:df:b9:9e:86:37:48:f0:f7:b9:55:98:af:94:65:73:29:
ae:9d:8f:2d:0d:11:c3:40:e3:c3:98:db:2b:c5:a1:e8:38:29:
7b:1f:ca:ad:90:6b:05:f4:1a:90:2c:3c:60:99:f1:dc:5b:ae:
2c:be:c9:e4:4d:67:cc:9e:7b:71:7f:14:1d:a7:27:fd:c3:de:
16:89:9f:17:01:18:50:12:e9:68:72:f3:c1:c8:b8:27:68:df:
63:38:3f:fd:97:93:11:20:09:73:0d:3e:cb:d7:28:71:50:98:
6a:2d:d3:e0:a5:b9:31:06:67:eb:62:22:dd:74:ca:85:5f:9d:
01:5b:67:e4:f6:2e:a1:d5:5f:07:43:45:55:9d:ae:4c:79:a7:
56:f4:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:31 2026 by rpki-client