Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: M3UHVn0zDeZZTkDSdO+vF2jbo7O8nrHI2BJFvq2us2U=
Subject key identifier: A3:7C:29:FA:B8:CE:35:DC:A9:C9:EC:54:4D:5B:47:D8:57:CE:B7:1C
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 019D3941A09AF11AEE0055994B4E7F554357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: Xy/KRIyJ3Eus9KawdYfQNtIvK5iqPoTANPF/xqaPXXI=)
2: tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa (hash: cB5CSJkT3O+9UBmuTizqC0w9ZxVIs1IRBERe6k5DKkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a0:9a:f1:1a:ee:00:55:99:4b:4e:7f:55:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=a37c29fab8ce35dca9c9ec544d5b47d857ceb71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:bb:72:e9:fb:bf:a4:58:f2:74:42:3c:31:
4e:82:ce:67:29:80:c7:93:d0:4f:59:24:d7:b0:5e:
16:04:6c:01:60:26:c7:87:a7:2e:9c:ff:ed:5a:1b:
0a:04:38:c3:17:4a:6e:79:d2:8a:ed:31:e0:19:44:
f3:b0:2d:3b:cd:49:4f:73:53:d6:33:3a:39:58:4d:
02:10:28:99:a2:54:e8:28:d3:16:0b:39:7a:48:a7:
5a:ea:05:bd:5c:ea:cd:2a:a4:64:0e:45:f2:b2:83:
e4:31:9b:cc:bf:06:ec:40:e2:d9:ce:d2:14:58:a7:
4c:20:23:84:f6:7b:67:2a:16:6e:ee:b7:7c:44:36:
51:ef:84:69:80:0f:36:68:38:5d:63:49:77:8c:99:
87:d6:46:46:af:dc:7b:74:ec:fe:d0:c7:51:ee:d7:
34:7f:3c:fd:f1:d0:36:cb:51:6c:5f:92:7a:3a:c4:
1d:71:13:81:8f:e0:44:c4:a1:3d:4e:8a:55:4c:98:
61:cd:fc:a9:65:37:b5:15:28:42:d3:85:6b:56:aa:
3e:9b:15:20:b6:5a:85:45:8d:85:9b:e5:b3:ae:bd:
c5:a3:bb:ed:65:e3:e7:b0:74:bd:f5:c8:aa:be:44:
3a:8b:72:89:4e:20:db:bb:99:6e:3e:a0:12:3c:2f:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:29:FA:B8:CE:35:DC:A9:C9:EC:54:4D:5B:47:D8:57:CE:B7:1C
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a4:4a:81:c7:a5:6d:6b:2a:22:3d:78:d5:79:5b:d5:74:11:
c4:68:42:fe:99:84:51:e8:83:2a:ea:5f:f4:e1:cb:89:bd:c9:
0e:4b:f4:34:a3:84:35:5e:82:8f:f4:9a:af:36:6c:06:4c:37:
91:ca:8c:7f:c9:b0:e8:a0:32:1d:ae:15:da:7e:b2:0c:d4:fb:
1a:a9:df:8d:f2:d4:c9:64:6c:9f:92:ec:79:46:ed:94:bd:1a:
89:b5:04:eb:40:72:ea:74:d9:10:52:9f:8a:99:06:40:94:bf:
53:12:7d:71:a6:22:fd:c9:43:68:bd:26:cf:2d:39:22:e0:02:
30:b4:b0:08:73:b2:cd:16:e5:29:19:73:d2:61:6b:01:1b:81:
41:a6:2b:5f:a3:ae:5f:c1:38:f0:77:01:25:91:3a:21:27:24:
ff:f4:24:09:63:f5:c9:e7:84:5c:e9:32:f9:17:f9:d2:82:3e:
97:6b:bb:80:f3:3a:d1:f7:03:dc:3c:ac:4a:27:4c:d9:3d:19:
b7:7f:7b:dc:dc:0b:5c:ea:b8:ca:81:1d:40:a8:38:3a:f4:7a:
e8:52:c8:9d:59:b5:ea:ef:7a:1e:f1:42:1e:83:05:b7:b6:57:
0e:a0:12:e0:f5:14:08:ea:bb:fb:8c:0b:bd:03:13:8c:b9:e2:
89:9f:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:12 2026 by rpki-client