Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: SkxSZYFH9+hNx8G3l4o/t+F+RnKHV9aZ7NycZsFwAnQ=
Subject key identifier: 18:67:1E:B0:70:E6:FA:B8:24:DA:28:35:21:20:D2:1C:46:96:05:5D
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019CACEB4EEAA596B63D449C4B4001244C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 05:00:27 +0000
Manifest this update: Mon 02 Mar 2026 05:00:27 +0000
Manifest next update: Tue 03 Mar 2026 05:00:27 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: YarbRqZpa0AdQv1gqgg8h+MnLBf6WbUrZIOZdZTbSXA=)
2: c57QPKVrulqe_tqOAQiAMnzGNHY.roa (hash: hBy4NZPhmcsKXhRSeI2d9E/JnPVdvroDZRs5OxnQU4k=)
3: enheJsXMtTxgm2wRND7dJgv8cak.roa (hash: C3fYygAIlGdruBbPXDLy8TVW2TRb7yeOUTAGkUC/fmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:4e:ea:a5:96:b6:3d:44:9c:4b:40:01:24:4c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Mar 2 05:00:27 2026 GMT
Not After : Mar 3 05:00:27 2026 GMT
Subject: CN=18671eb070e6fab824da28352120d21c4696055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:38:e4:de:4b:e9:83:b0:04:25:15:e1:d4:
d9:7d:32:46:d1:59:34:6f:fa:30:29:e4:6c:bb:7e:
88:07:0a:23:21:67:48:ba:7b:34:0e:da:d3:af:85:
1d:c6:1b:dc:1b:a1:ae:8d:06:2d:02:de:b8:2e:31:
d7:2f:da:eb:f9:94:f0:19:04:d9:2e:a1:2f:d2:11:
ee:15:79:09:80:5e:4b:28:af:99:27:9f:a7:00:ac:
e9:c9:40:c9:f5:52:1b:9d:45:43:b0:22:22:41:8c:
b6:52:5e:70:ba:2c:8f:3f:5e:0e:b3:5b:25:24:9b:
0a:a8:0c:bc:db:d5:26:7f:71:ea:a3:ea:c0:38:37:
25:0d:39:8a:53:42:15:77:9a:9d:79:78:79:c8:5d:
51:2f:29:2f:85:0e:92:bd:09:00:fd:dd:e2:b1:fb:
96:09:54:5b:73:7d:e5:30:b6:a2:31:48:7e:a1:2a:
3c:96:81:df:ff:3e:8e:fc:c5:ef:b7:c8:f9:8c:59:
48:75:cf:b4:49:0c:ae:d0:39:e6:80:fb:7e:c6:c4:
8f:21:a8:db:0e:38:48:53:8c:bf:93:5a:55:8f:5d:
a5:28:f0:43:46:5f:a7:60:de:fc:de:48:80:8d:2d:
1e:ec:7d:6a:cc:1b:fc:28:c7:52:81:15:64:60:58:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:1E:B0:70:E6:FA:B8:24:DA:28:35:21:20:D2:1C:46:96:05:5D
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:04:18:6a:28:02:84:0e:1c:5e:77:80:12:74:fa:03:cd:77:
14:45:b4:d6:d6:78:6f:e8:42:cb:f2:3d:05:a2:06:83:84:17:
c8:4f:f0:a3:85:4d:e8:8f:7c:ec:51:02:93:06:19:79:e9:5a:
95:67:05:5b:3c:73:c9:26:c3:8c:39:8b:f7:f8:4f:f7:7f:e9:
4c:b8:9b:31:98:6a:fb:21:0b:33:48:de:22:93:0c:10:c2:8a:
4f:81:9c:37:8f:bb:9f:72:cf:18:2e:17:7b:63:59:d7:b2:c0:
80:31:7c:78:fb:ba:8b:06:98:91:21:5a:83:ed:43:59:09:b6:
bf:ab:14:e5:9e:a3:57:b2:2e:4d:ad:7e:53:33:b1:d3:40:d5:
c1:e0:8c:39:be:fe:c6:0b:9d:42:47:75:98:11:1a:e4:5c:aa:
40:59:51:b4:5b:f9:fa:2a:64:a6:98:7f:14:2a:9e:44:ba:ee:
27:dd:8c:e4:e1:37:a2:8b:04:af:c5:24:42:83:c0:42:17:26:
06:4f:3a:7a:65:3c:bc:c2:e1:57:6c:ce:d6:98:9a:c7:07:85:
b1:be:85:d6:0c:80:94:76:74:61:e5:f6:42:ef:3c:b0:ab:50:
7e:cc:36:29:b4:90:c4:aa:31:d0:73:6b:6f:c5:62:81:c4:6d:
62:91:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:33 2026 by rpki-client