Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: jmdZS4j27vPqZPFwudCJy79ZoHokEHW31DC+2f0Z5NI=
Subject key identifier: 3B:27:E1:C6:12:37:71:8C:5C:AD:7E:B4:7F:5F:57:7F:D9:AB:AC:A7
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019D9A74CB9CE22881F142AF781793DC61A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 08:00:38 +0000
Manifest this update: Fri 17 Apr 2026 08:00:38 +0000
Manifest next update: Sat 18 Apr 2026 08:00:38 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: BIuf3blnXs9prpHiMoN6sf8zoMRCgns0fUHjdL10S90=)
2: c57QPKVrulqe_tqOAQiAMnzGNHY.roa (hash: hBy4NZPhmcsKXhRSeI2d9E/JnPVdvroDZRs5OxnQU4k=)
3: enheJsXMtTxgm2wRND7dJgv8cak.roa (hash: C3fYygAIlGdruBbPXDLy8TVW2TRb7yeOUTAGkUC/fmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:cb:9c:e2:28:81:f1:42:af:78:17:93:dc:61:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Apr 17 08:00:38 2026 GMT
Not After : Apr 18 08:00:38 2026 GMT
Subject: CN=3b27e1c61237718c5cad7eb47f5f577fd9abaca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:59:f1:be:4f:27:07:5d:79:d2:90:88:bb:
b8:96:15:7d:9e:6e:15:3c:b7:9a:8f:59:63:5e:02:
64:3f:ad:39:fb:ee:54:f8:15:3a:ba:14:8c:a7:1c:
74:ed:4d:58:43:51:57:1f:9b:7d:77:c8:7e:66:e1:
1c:12:a2:39:49:b6:0e:a9:d1:3c:3c:ba:02:43:63:
50:83:7c:ac:0b:82:37:0b:71:5b:0f:f0:cf:d9:e6:
c3:c0:9e:b2:ec:a2:8d:2f:67:ca:e5:47:83:a5:06:
23:81:52:e9:1d:f6:51:78:24:85:c3:70:24:fa:15:
de:be:df:15:10:6f:6c:3e:cc:6c:50:55:d7:c0:8d:
9d:73:f6:30:7c:b4:df:1b:dc:1d:5c:24:d6:e9:d2:
5f:de:6a:7d:23:0c:4e:fd:c6:e7:b0:22:3f:c3:44:
0c:a8:1c:ef:20:2c:c1:a6:dd:6d:93:3e:2a:8c:bd:
10:52:9a:71:f1:14:b5:f8:cc:72:84:54:13:0f:50:
b3:ee:c3:25:e3:91:78:00:0d:c0:8b:56:c8:22:8e:
07:9e:01:74:91:d9:5d:52:0c:d0:8d:44:ba:c3:84:
09:1c:03:31:1c:2e:4d:d8:bb:3e:98:fb:08:69:6b:
8d:6e:e9:da:f7:2f:07:5d:4c:79:7a:e5:b0:c8:62:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:E1:C6:12:37:71:8C:5C:AD:7E:B4:7F:5F:57:7F:D9:AB:AC:A7
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:5c:15:8f:3a:a9:0b:d6:ce:ab:5c:b4:6c:8e:04:84:0c:a6:
48:09:9a:67:29:81:0b:20:64:62:be:e6:34:4b:3e:c7:c4:cf:
31:e3:15:8c:e3:1d:61:90:3c:a4:95:2f:1f:6d:e9:98:c9:c3:
16:75:15:7d:57:bb:6c:ac:97:92:ac:5c:c4:ab:c2:28:25:2b:
7b:80:c7:11:8c:e7:db:d9:cb:c8:bc:d3:b9:fb:be:b1:0c:21:
81:5b:00:03:ea:96:82:8d:28:86:4e:48:e2:4f:a9:3b:d3:6b:
77:e7:9f:ac:f4:a1:59:07:6d:0c:e2:5d:4b:53:e9:da:ba:13:
b1:39:d5:66:ae:ba:0d:d4:28:f8:40:cb:0b:03:80:0a:8c:f1:
85:28:6c:3e:3a:8e:bf:64:db:4c:60:c7:89:b8:58:0b:bc:a6:
8c:40:d8:f7:9d:21:8c:30:15:0a:df:07:ea:39:a2:d5:0d:c7:
ff:86:dc:1b:b9:ff:2e:16:2b:42:c3:c1:d3:89:4c:2d:5f:f2:
be:90:aa:01:c2:d4:8f:29:d2:b9:dc:92:cf:aa:1a:05:55:c3:
ab:3b:75:cd:97:a0:00:bf:c3:d6:b8:70:f2:26:0b:67:c8:90:
94:d9:6a:d4:63:17:0e:21:55:68:1a:e8:aa:4a:af:dc:a1:b9:
5e:40:cd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:26 2026 by rpki-client