Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: /WNfHx532H4KYlWlh5h/XODdD5+uwUtrxDIlB/JPjRc=
Subject key identifier: 95:D3:31:71:01:B6:28:EF:AA:FD:E4:80:FB:E7:3E:F2:61:82:D4:06
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 01A0C77C7A017AC0D2FC313CAF5A55120108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 05:00:18 +0000
Manifest this update: Tue 22 Sep 2026 05:00:18 +0000
Manifest next update: Wed 23 Sep 2026 05:00:18 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: ScmCoSh4i3lCkP70E71Is31KxssX3I38BOvZTotiOTE=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:7a:01:7a:c0:d2:fc:31:3c:af:5a:55:12:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Sep 22 05:00:18 2026 GMT
Not After : Sep 23 05:00:18 2026 GMT
Subject: CN=95d3317101b628efaafde480fbe73ef26182d406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:0c:b7:56:a9:83:c0:ed:e8:16:e5:06:db:
ba:dc:09:07:56:fe:15:90:a6:e7:1d:5e:c4:2f:e8:
4a:05:82:0f:11:76:17:db:a7:53:3b:cd:96:ef:d2:
4b:ad:d5:f0:b6:12:9f:0e:27:cb:0a:53:41:56:3f:
b1:bb:5e:3a:34:29:de:40:5e:32:73:c5:3c:15:5b:
d2:f2:57:ba:1f:05:eb:5c:00:14:d7:2d:04:cf:51:
25:da:e3:06:4c:a4:8c:5a:a2:76:1b:f6:64:62:2f:
01:1c:e5:3e:72:df:82:e4:16:38:52:c3:70:3c:97:
35:0d:31:de:08:30:95:2b:7a:65:fe:86:7d:04:e5:
60:5b:57:25:f0:6b:82:af:e6:29:e5:0a:87:0c:7c:
95:95:5b:f4:0e:13:33:f4:f8:2f:26:7f:40:f8:17:
ee:45:68:4d:1a:ca:e7:47:b3:6f:1b:5a:e6:85:e3:
0b:0a:1d:72:1a:84:21:45:70:a0:8e:fe:bb:de:23:
ec:94:d5:4e:f9:0a:be:3f:f1:6d:ef:57:c6:6f:24:
17:7b:ac:d4:7a:db:5b:9b:09:e6:67:41:d1:e3:bb:
a3:c8:96:39:95:62:39:a1:41:ae:f4:ea:9b:8c:3f:
44:f1:22:44:66:7f:e5:ed:ed:35:e8:55:0c:8f:b0:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:31:71:01:B6:28:EF:AA:FD:E4:80:FB:E7:3E:F2:61:82:D4:06
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:26:bb:9c:d1:90:57:6d:b4:b9:b7:36:b9:e2:23:31:73:
b3:cd:1b:0e:ee:38:b5:12:97:dc:90:b1:79:07:42:0d:5f:4a:
e5:b3:95:74:42:bd:75:9f:56:c0:7d:25:c2:9c:11:10:04:3c:
f6:f3:35:c6:64:00:32:c6:c0:85:c8:70:c6:ee:20:b4:53:33:
bc:61:28:34:b0:6d:38:7c:38:e9:43:83:e4:30:b2:7d:34:8f:
8c:99:fd:22:d3:2a:af:1d:ad:38:fa:da:da:d0:d6:90:fd:64:
e8:0a:b6:3e:05:41:12:3d:b1:71:cd:2e:51:0d:8c:5f:ee:7b:
d8:5c:dd:fb:ba:1d:b1:40:89:15:d1:41:ed:b4:9a:00:65:6e:
9d:df:d4:63:ec:b8:a6:eb:04:aa:b2:87:d3:9b:b6:0f:31:b9:
83:26:f5:11:90:39:fb:f6:32:87:e2:d2:2c:b4:30:65:a7:5d:
d9:10:d5:95:d3:c9:f3:a6:00:07:9c:82:f4:63:7d:c5:a1:b1:
41:91:6c:9b:fa:fb:28:7d:2a:8e:4c:92:fd:c2:d1:c3:cc:7a:
ed:ea:1d:e1:28:72:49:5d:29:ee:58:83:3a:12:37:5b:45:13:
11:46:04:2a:8a:82:b1:ef:dd:ef:85:4a:26:2e:06:db:37:75:
76:27:7d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfHoBesDS/DE8r1pVEgEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzQ3YjU2NTg0NGUzZTJmYzcxMmZhYjViZTg1OTI0YWFj
NTg2NDMwHhcNMjYwOTIyMDUwMDE4WhcNMjYwOTIzMDUwMDE4WjAzMTEwLwYDVQQD
Eyg5NWQzMzE3MTAxYjYyOGVmYWFmZGU0ODBmYmU3M2VmMjYxODJkNDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HwMt1apg8Dt6BblBtu63AkHVv4V
kKbnHV7EL+hKBYIPEXYX26dTO82W79JLrdXwthKfDifLClNBVj+xu146NCneQF4y
c8U8FVvS8le6HwXrXAAU1y0Ez1El2uMGTKSMWqJ2G/ZkYi8BHOU+ct+C5BY4UsNw
PJc1DTHeCDCVK3pl/oZ9BOVgW1cl8GuCr+Yp5QqHDHyVlVv0DhMz9PgvJn9A+Bfu
RWhNGsrnR7NvG1rmheMLCh1yGoQhRXCgjv673iPslNVO+Qq+P/Ft71fGbyQXe6zU
ettbmwnmZ0HR47ujyJY5lWI5oUGu9OqbjD9E8SJEZn/l7e016FUMj7AblwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXTMXEBtijvqv3kgPvnPvJhgtQGMB8GA1UdIwQY
MBaAFAR0e1ZYROPi/HEvq1voWSSqxYZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQt
OTdiMjE1N2NiYWQxLzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQtOTdiMjE1N2NiYWQx
LzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrYmu5zR
kFdttLm3NrniIzFzs80bDu44tRKX3JCxeQdCDV9K5bOVdEK9dZ9WwH0lwpwREAQ8
9vM1xmQAMsbAhchwxu4gtFMzvGEoNLBtOHw46UOD5DCyfTSPjJn9ItMqrx2tOPra
2tDWkP1k6Aq2PgVBEj2xcc0uUQ2MX+572Fzd+7odsUCJFdFB7bSaAGVund/UY+y4
pusEqrKH05u2DzG5gyb1EZA5+/Yyh+LSLLQwZadd2RDVldPJ86YAB5yC9GN9xaGx
QZFsm/r7KH0qjkyS/cLRw8x67eod4ShySV0p7liDOhI3W0UTEUYEKoqCse/d74VK
Ji4G2zd1did9kA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:50:03 2026 by rpki-client