Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: baMe9CSFPTvrkbfK1FGYi7OF3vWIsqjpyf4WSeSlrkQ=
Subject key identifier: 6E:AE:24:20:AE:E4:02:7A:D8:6D:E7:CB:DB:55:B1:87:9C:10:C4:40
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019FA97538662D1C54E70113AFEDB9ED0E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 16:00:59 +0000
Manifest this update: Tue 28 Jul 2026 16:00:59 +0000
Manifest next update: Wed 29 Jul 2026 16:00:59 +0000
Files and hashes: 1: 8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa (hash: R1f4TY4NVLDBlI4mibWng28Ip80KPchDGU+0MuMj7zs=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: +e92xn9Pt4sGWIBVMvPS8hQbQPQWF0BWufiZr4U/OpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:38:66:2d:1c:54:e7:01:13:af:ed:b9:ed:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jul 28 16:00:59 2026 GMT
Not After : Jul 29 16:00:59 2026 GMT
Subject: CN=6eae2420aee4027ad86de7cbdb55b1879c10c440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:42:7e:af:3a:d0:b9:79:8a:02:3e:90:fb:
e8:8f:b8:14:2e:dc:eb:eb:3b:46:5d:f3:74:e2:c3:
c9:11:0d:41:4b:53:d8:83:65:1c:11:57:8b:84:ec:
41:a3:62:31:68:d3:cf:71:c8:1f:4f:41:51:b5:b8:
12:17:b1:7a:d1:a9:d7:ff:3e:fd:e4:cb:cb:4e:9c:
87:02:42:00:5f:71:eb:75:de:db:d4:bf:b8:f7:d8:
cf:63:8b:0c:28:6b:3a:f3:4f:21:2b:5c:ed:c5:5f:
15:de:aa:04:2f:46:67:b9:bc:aa:14:01:28:0a:c0:
2c:16:e4:75:59:56:06:1e:f1:98:f0:d2:a3:87:a5:
25:aa:e3:9a:2e:d0:0c:7a:34:a7:b4:58:e1:a6:a8:
9e:ff:37:fd:9e:5d:c3:c9:ca:43:81:99:9b:3a:28:
ec:b0:26:f0:7f:cc:36:70:2d:31:1d:57:44:40:4c:
7c:8c:31:e7:a9:ed:25:a9:98:23:6b:3b:0e:0d:ca:
d6:90:b9:07:f4:ac:47:54:15:27:13:d2:3f:bb:c8:
09:2b:72:1b:ba:27:94:c1:db:f7:d5:99:53:64:6b:
ac:11:7a:df:c1:fd:92:ee:15:c9:fa:d6:ed:3e:26:
9c:34:1f:e2:5e:2f:bd:48:63:0a:69:28:aa:b9:7b:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:24:20:AE:E4:02:7A:D8:6D:E7:CB:DB:55:B1:87:9C:10:C4:40
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7e:30:ee:42:bd:f9:69:c6:c4:a0:d4:dd:c6:71:c6:69:4f:
63:45:11:c0:21:30:ea:7b:60:0e:d9:3a:bc:37:50:69:db:4b:
7c:91:67:72:00:cf:35:42:cc:4c:d3:a5:1f:6a:ca:a1:f3:13:
68:bb:77:ed:63:83:81:4f:d1:bf:c8:c9:15:bf:30:d3:a5:f9:
fa:59:d0:e7:0a:0c:c2:01:c5:e9:8a:b4:8e:89:0c:24:ae:79:
24:2f:5b:0b:54:22:26:b2:d5:66:3b:40:9f:94:06:31:96:85:
ae:38:e7:73:e4:8f:21:64:b8:bb:9b:fe:cb:62:25:ef:4d:7b:
d0:2a:f4:65:76:f8:84:91:bb:ea:32:a0:68:cf:09:19:6b:18:
da:b3:04:1a:1c:ac:c2:f8:e6:cb:9a:42:a0:57:33:21:57:3e:
e1:33:b5:98:d9:50:7a:ac:2d:c7:6e:01:74:22:ef:37:dc:9a:
b2:56:2c:70:a8:fa:63:3e:6e:fb:bd:5e:68:5a:99:c1:15:37:
ba:fa:78:f0:f7:d4:41:5c:84:a7:b0:5d:29:2a:51:3c:29:b9:
79:57:05:a8:58:78:48:14:85:1f:c5:47:a9:0c:d6:43:36:6c:
69:c8:a6:a9:2b:6c:33:4c:e3:6d:3c:c1:f0:f5:91:80:3c:df:
e0:29:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:16 2026 by rpki-client