
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: +7i5I1JSOFaYiSUj2W8bfXlz9k0/jwpdE3BKkSHSFPo=
Subject key identifier: CC:9A:EA:6B:A6:0E:0F:50:00:56:5D:FD:D0:0E:BE:2D:EB:B0:C3:E4
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019D9A753AFD181492A8B9151388692E47D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:01:07 +0000
Manifest this update: Fri 17 Apr 2026 08:01:07 +0000
Manifest next update: Sat 18 Apr 2026 08:01:07 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: y4/eXUEGj9Mb39FUAjPhOsvOcSUgdsXnpVkh+sdxp/g=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:3a:fd:18:14:92:a8:b9:15:13:88:69:2e:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Apr 17 08:01:07 2026 GMT
Not After : Apr 18 08:01:07 2026 GMT
Subject: CN=cc9aea6ba60e0f5000565dfdd00ebe2debb0c3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:28:5e:6d:41:01:84:a9:93:7d:56:79:27:
36:86:c3:9c:d9:cd:c4:a7:9f:69:76:a4:28:e1:a1:
0f:30:77:60:94:a7:1d:32:8a:e9:6d:7e:03:e3:f4:
9a:38:17:69:25:64:8e:d6:a2:c3:a3:0f:fb:da:57:
bc:bf:c0:30:e9:c0:9d:ae:12:01:be:21:29:6f:6d:
c6:4b:aa:4f:4f:55:67:7d:49:4b:d5:c1:ad:73:46:
3f:01:d9:2d:ab:08:f3:74:b1:91:fd:ad:8a:49:68:
ec:fb:59:50:52:53:d5:e5:44:fb:ed:62:1d:f4:b1:
e9:b5:f3:2a:95:f2:9b:60:26:9d:e1:29:53:7f:3b:
41:28:57:1c:f1:c4:4e:75:b9:f3:3a:62:a1:36:c7:
13:34:47:bc:93:bb:65:1d:4b:a5:84:47:19:2c:91:
ca:4e:1b:24:7b:f3:04:03:90:b5:ce:ee:c7:db:db:
c3:29:0e:bb:05:32:fe:23:4f:90:d1:49:0d:d1:fd:
b5:17:25:ac:1b:2d:53:34:9a:8e:4f:61:d3:02:f1:
a7:1b:3e:74:62:c1:24:0c:aa:8d:1b:b8:77:20:48:
e7:a1:c1:7f:14:14:5e:c8:1a:08:94:b4:da:98:a7:
41:32:8e:1f:15:05:8f:bb:99:89:a7:60:1a:90:91:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:EA:6B:A6:0E:0F:50:00:56:5D:FD:D0:0E:BE:2D:EB:B0:C3:E4
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:04:e1:be:02:59:c5:d2:37:f9:b8:c0:a2:a2:fd:f9:25:b8:
7c:64:1c:61:9a:17:2c:3f:40:fe:74:ea:fb:36:ed:ab:5c:e5:
88:db:f6:c1:f0:6c:d1:ae:6a:65:a4:87:63:77:04:c2:66:7e:
cb:1e:2b:9a:f4:68:b9:e2:27:08:8f:e6:81:f0:b4:46:f9:61:
c5:72:c8:af:38:0d:4a:5f:9d:13:f8:d0:cf:5b:56:76:dd:5b:
0d:c5:45:4d:5e:f6:e2:37:c7:a9:90:0b:76:be:e2:5b:f7:1e:
5d:aa:a3:2d:87:dd:2e:7a:16:3d:b9:58:1c:cf:f3:9b:94:de:
3e:f6:83:61:4a:65:c5:af:42:a1:a6:64:fb:1a:8f:c3:4e:81:
0f:3a:a0:90:66:18:14:bb:0b:65:53:0c:2f:2f:99:be:6c:0a:
cb:00:d9:e6:f6:ad:b8:d0:c2:e0:bc:74:e8:75:36:5b:03:79:
3d:3f:df:48:dd:5a:3a:30:f1:f6:03:21:4d:d0:18:40:84:3b:
c5:81:7f:ed:e2:d1:d3:3b:85:d7:83:dd:4b:5b:3a:40:c3:0e:
c4:ea:33:99:70:64:c0:39:75:72:a0:66:68:70:26:34:c4:02:
95:37:17:f9:b0:b0:bd:d9:8f:bd:65:00:bf:a3:a0:7f:f5:28:
1d:1f:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:55 2026 by rpki-client