Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: L26+6fUroIijL4zJGmaD+hFyuuJmmKfGcCQ4N6cv7XI=
Subject key identifier: E8:3E:14:AC:BE:93:59:5A:31:BD:83:C4:1D:C3:54:6F:9D:72:16:DF
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 01A0C74682522971E382AFE1F1B7ED84ADB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 04:01:21 +0000
Manifest this update: Tue 22 Sep 2026 04:01:21 +0000
Manifest next update: Wed 23 Sep 2026 04:01:21 +0000
Files and hashes: 1: 8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa (hash: R1f4TY4NVLDBlI4mibWng28Ip80KPchDGU+0MuMj7zs=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: lvW3Y1+a6zf1Nf2fOJmT7MuNgobXw+X8Beyrb+bvyzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:82:52:29:71:e3:82:af:e1:f1:b7:ed:84:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Sep 22 04:01:21 2026 GMT
Not After : Sep 23 04:01:21 2026 GMT
Subject: CN=e83e14acbe93595a31bd83c41dc3546f9d7216df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:84:d0:cf:14:ce:8f:6a:4d:1a:24:9e:cf:
6c:8f:b7:b7:fa:87:7e:c7:43:4d:e4:91:e6:57:1d:
97:0b:61:4b:35:db:42:9a:2c:90:6b:e9:7a:bf:63:
cf:a1:84:92:a9:b2:43:72:e6:a2:6a:5b:6b:7a:81:
6e:59:a2:ee:ae:1d:78:06:fa:8a:5d:79:e2:e6:06:
6b:67:83:14:4a:6b:ec:1d:be:04:41:f7:30:c6:d2:
1d:ad:44:11:b8:c3:4a:41:13:eb:e2:e4:2a:94:ee:
94:bd:54:f8:3b:cb:fa:71:f7:a6:0e:b2:27:c2:14:
be:81:5c:10:15:35:18:01:01:01:d0:e5:f8:53:0b:
db:1d:c5:bf:c8:05:0d:59:c1:ea:69:34:76:f4:37:
07:c5:3c:75:7c:e0:3a:a9:87:f7:57:5f:ef:d2:9a:
6a:75:6a:ff:22:f2:ce:b6:d5:96:b6:70:b3:d5:72:
34:2a:cd:57:63:cc:a3:80:75:da:3b:2a:12:30:16:
c4:17:2a:0e:52:05:59:7e:7f:e6:d3:60:33:19:6d:
ea:aa:71:dd:30:aa:6e:f2:9a:66:12:02:e1:27:2a:
a6:36:f6:90:c8:b5:f4:9c:54:ac:f4:94:37:0e:42:
1f:18:ed:06:de:68:40:0a:b8:b3:75:bb:23:00:9e:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:14:AC:BE:93:59:5A:31:BD:83:C4:1D:C3:54:6F:9D:72:16:DF
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:af:9f:43:c5:80:c7:5c:c4:4e:72:99:df:17:ec:03:0a:28:
3a:2c:44:c7:4b:3d:71:19:01:2e:9f:06:b2:8d:46:57:f4:85:
12:92:84:1d:58:fd:8e:40:18:dd:c1:d8:98:03:f8:50:85:bf:
07:db:38:55:d1:dd:6e:d0:e1:c2:52:50:99:1a:21:e7:c3:38:
c8:d1:d7:b1:af:7a:ee:0a:af:b1:f2:34:db:5d:e3:12:01:6c:
3f:71:f5:11:30:72:8b:3e:68:cd:db:57:68:17:37:a7:2c:99:
ae:f9:3d:0f:21:0d:a8:75:05:41:99:f2:eb:e2:54:52:82:e6:
73:fb:1f:4e:c3:db:59:b7:18:c5:6b:12:ff:59:ce:dd:ab:1f:
c9:76:9a:59:0b:35:b6:c5:30:a0:6e:a3:ce:d5:dc:0e:37:e8:
83:8d:6a:b4:ed:be:63:7c:b4:b2:da:ed:d2:52:e8:41:4d:4a:
3a:f5:0d:b8:84:98:d2:75:7f:72:71:98:41:8c:09:0f:b3:f0:
39:a4:83:f6:ca:67:00:fb:3a:f1:a8:6c:16:95:97:c3:27:de:
a0:97:97:46:ba:99:83:46:69:92:58:e2:bd:59:c1:cb:e3:40:
67:b6:4f:24:ea:5c:c2:ef:4d:e4:63:3f:b0:09:13:b6:52:b6:
63:25:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:08:35 2026 by rpki-client