Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: Nb15ZqG4ryEUH4SOv5jKIwlJgnUStDfXRDh0cUd8RNM=
Subject key identifier: CD:83:A6:C7:7A:93:7C:D2:AB:CA:01:09:16:4C:94:B9:BC:A1:B5:2C
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019CAAFD16770ED9400DBAA1E4764B1EF7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:38 +0000
Manifest this update: Sun 01 Mar 2026 20:00:38 +0000
Manifest next update: Mon 02 Mar 2026 20:00:38 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: dijDPAJ+5TxY6xWWP4oF2+SWm8WYCRAjn5TNfbrWtrM=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:16:77:0e:d9:40:0d:ba:a1:e4:76:4b:1e:f7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Mar 1 20:00:38 2026 GMT
Not After : Mar 2 20:00:38 2026 GMT
Subject: CN=cd83a6c77a937cd2abca0109164c94b9bca1b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:20:ac:c8:67:3b:98:7c:6c:95:11:d8:91:
d4:66:dc:b9:14:f5:ca:dc:a3:6f:8e:5e:07:67:6c:
14:ee:d5:33:56:8f:26:fb:d8:6e:c5:03:af:ed:d5:
55:bb:e7:5c:1e:81:d7:73:13:f2:24:3e:77:79:bf:
f9:33:b2:de:6f:9e:25:7c:b1:36:8e:14:ff:88:57:
e1:8c:60:ae:c6:d8:38:a8:0f:a4:2e:c3:ec:bf:ff:
5a:8f:e9:f9:54:48:ab:44:e7:46:ee:3f:b1:e7:2d:
ca:53:72:63:c1:a7:1b:dd:2c:ef:db:6d:ea:1b:74:
3e:4b:61:29:99:80:61:1f:16:e0:73:c1:37:7e:23:
19:a9:cf:97:5e:1e:2a:58:b4:ac:0e:08:83:1b:d2:
a2:6d:0d:43:96:4b:12:52:cd:d5:3b:52:4d:17:c3:
bc:03:ab:c8:b9:96:86:e1:c7:c5:4a:fb:45:94:52:
78:92:e9:78:12:3c:03:bd:05:36:fd:c3:c7:05:7f:
ad:73:26:60:2c:62:ba:39:fb:83:5d:49:e2:08:22:
77:1f:7c:b7:07:47:c6:87:61:f6:5c:cf:50:b5:48:
16:15:9a:b5:78:c1:53:a5:13:7d:02:5c:5f:fc:78:
b7:58:f3:d6:17:d1:3b:5e:69:08:e4:86:f0:94:83:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:A6:C7:7A:93:7C:D2:AB:CA:01:09:16:4C:94:B9:BC:A1:B5:2C
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:67:5b:64:7c:08:0e:8d:97:30:3a:b9:ee:3c:66:cd:73:be:
70:dc:4f:b2:42:74:17:77:e8:9d:06:96:64:9e:d4:22:da:0e:
ff:13:3e:3e:eb:dd:57:11:d8:77:e6:19:c8:b8:8f:2f:66:b6:
f1:2c:cd:d4:f4:a7:41:54:42:84:8f:db:38:82:7c:f5:e6:d3:
bf:38:9a:21:75:28:46:72:0e:15:3c:61:5a:ab:93:ab:2c:fd:
d3:26:e1:c5:30:43:15:52:b7:23:bf:10:e2:2d:13:5f:d0:51:
27:8f:91:1d:3c:d7:9b:66:e7:ef:44:ab:cd:55:56:3a:60:58:
55:fb:c2:d2:4c:f5:b7:ca:6c:cc:53:81:b1:96:67:9b:9b:3f:
6c:79:3c:aa:aa:e9:09:6e:db:64:78:8d:e2:0c:15:5b:b3:11:
c9:81:a8:2e:b6:3b:9b:00:51:f3:b8:7b:f8:36:6d:28:31:ce:
73:a2:08:a2:b0:2e:7f:1a:9d:21:d8:ce:d1:ee:81:a2:a2:6f:
1f:7e:73:68:27:34:19:48:f9:6b:c9:06:68:1b:fa:89:06:bb:
70:52:13:34:f8:42:d3:ba:5a:07:be:6a:e8:70:87:3c:dc:53:
cf:77:1c:ad:4d:89:02:5d:92:54:d0:49:7e:a5:75:6b:1b:1e:
3b:29:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:23 2026 by rpki-client