Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: PUYENZphODFykpcWCUmUAw0ZD3l7XodshDHByas75k4=
Subject key identifier: 27:DD:0F:0D:F8:82:D9:17:3E:94:36:C4:D2:A6:8B:56:B5:DD:18:65
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 019CAED9FD3A8E43246C5511C5ABC5E2CB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 086F
Signing time: Mon 02 Mar 2026 14:00:47 +0000
Manifest this update: Mon 02 Mar 2026 14:00:47 +0000
Manifest next update: Tue 03 Mar 2026 14:00:47 +0000
Files and hashes: 1: 2txQ-0RSqs2uJRwQDVdC5Ar0Q1U.roa (hash: dgukSS0gWF7oah9dhXPhy2J6/nwd2z1Om6wRww4A75c=)
2: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: IS7HJPkMyHrmQn6zVQulCaclX4eDxwoFHqyslT6xYks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:fd:3a:8e:43:24:6c:55:11:c5:ab:c5:e2:cb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Mar 2 14:00:47 2026 GMT
Not After : Mar 3 14:00:47 2026 GMT
Subject: CN=27dd0f0df882d9173e9436c4d2a68b56b5dd1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:64:bc:7c:f1:fb:9c:98:d7:c5:8a:de:76:
52:9e:7a:da:15:73:e5:26:8f:3d:62:16:89:02:e4:
aa:95:1f:cf:dd:e4:17:ed:95:a2:53:f4:6e:bc:e8:
bd:ec:d3:8a:f3:63:3e:4e:ee:c8:e9:df:6e:83:63:
8a:03:12:30:d1:57:e4:3c:0f:56:a2:c7:89:34:1e:
8e:fe:e0:78:ef:cd:18:5a:22:6c:90:1c:45:46:20:
62:0d:e2:dd:1d:ec:26:a2:f4:e0:45:74:84:03:4c:
8f:10:04:5c:9b:74:26:38:30:ba:f2:37:8a:e6:c6:
3d:03:f1:59:34:24:59:b4:e1:49:cf:ac:30:18:8f:
ee:d3:00:7d:1f:d5:6b:c2:da:f4:c9:b3:fc:51:e0:
41:2e:fd:82:2d:93:ab:07:14:f6:22:53:fd:4f:58:
01:49:a4:d5:9a:90:7d:ea:fc:6d:10:9e:01:9a:08:
65:a5:06:56:86:d0:be:8f:81:17:fa:3f:c2:67:00:
91:2e:1e:10:46:f6:f9:7c:9e:a0:03:9f:55:5e:72:
ee:ec:44:87:ff:82:a0:e4:ef:90:95:29:51:f3:44:
3a:21:84:92:2e:57:59:3a:15:be:fb:96:4f:4f:27:
01:f2:83:b6:8a:5c:17:69:d3:bb:a3:e9:92:24:65:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DD:0F:0D:F8:82:D9:17:3E:94:36:C4:D2:A6:8B:56:B5:DD:18:65
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:d1:0b:ed:65:cb:6d:0e:70:7c:5b:28:63:01:45:7a:cc:
05:a7:ac:82:27:17:70:38:0f:2d:fe:c0:32:9d:bc:9e:d1:b6:
37:07:f8:b4:76:0e:a9:11:46:44:c5:ea:ce:e1:fc:fe:eb:5c:
3d:26:ce:b5:f0:f0:ab:0a:1d:8e:38:36:cf:c7:0b:ed:62:e7:
ef:13:1f:3b:85:dd:c8:7e:f5:29:2b:e6:1a:9b:ce:f5:e9:c2:
40:e3:c0:63:ea:f9:92:29:ce:ea:d0:e3:ac:65:db:80:94:64:
cc:7a:b5:df:4f:83:f1:82:0a:fd:ff:03:d2:3d:c0:28:2a:65:
db:e2:dd:d7:36:b1:b0:72:b3:79:d2:be:f9:0a:0d:ab:07:6d:
3f:e9:40:7d:e7:75:a8:9c:d5:83:6c:53:dd:2b:16:ea:9b:f7:
5b:12:d1:27:86:14:2a:dd:d6:fc:96:09:48:9a:19:8f:e6:4c:
5f:d2:90:e7:a7:58:81:47:73:e3:a9:35:3b:45:92:d8:db:e7:
b4:57:25:d5:0c:4d:34:bc:35:c2:a1:72:c5:29:84:4d:73:f1:
80:8f:4a:b4:43:e9:f6:d5:82:09:7d:b7:e7:8f:2b:f3:8f:7b:
54:0d:e4:99:e2:ba:50:e9:0a:bb:6e:3d:68:11:52:67:e6:56:
8f:17:15:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2f06jkMkbFURxavF4stqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDg2MTkyY2IzZjI4ZjU4YjIxNDRkZGUyZDkxYTIzMTIw
NTZmYzgwHhcNMjYwMzAyMTQwMDQ3WhcNMjYwMzAzMTQwMDQ3WjAzMTEwLwYDVQQD
EygyN2RkMGYwZGY4ODJkOTE3M2U5NDM2YzRkMmE2OGI1NmI1ZGQxODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+1kvHzx+5yY18WK3nZSnnraFXPl
Jo89YhaJAuSqlR/P3eQX7ZWiU/RuvOi97NOK82M+Tu7I6d9ug2OKAxIw0VfkPA9W
oseJNB6O/uB4780YWiJskBxFRiBiDeLdHewmovTgRXSEA0yPEARcm3QmODC68jeK
5sY9A/FZNCRZtOFJz6wwGI/u0wB9H9Vrwtr0ybP8UeBBLv2CLZOrBxT2IlP9T1gB
SaTVmpB96vxtEJ4BmghlpQZWhtC+j4EX+j/CZwCRLh4QRvb5fJ6gA59VXnLu7ESH
/4Kg5O+QlSlR80Q6IYSSLldZOhW++5ZPTycB8oO2ilwXadO7o+mSJGUM7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfdDw34gtkXPpQ2xNKmi1a13RhlMB8GA1UdIwQY
MBaAFGwIYZLLPyj1iyFE3eLZGiMSBW/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjkt
ZWVmNTI5YTQ3N2U3LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjktZWVmNTI5YTQ3N2U3
LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQXRC+1l
y20OcHxbKGMBRXrMBaesgicXcDgPLf7AMp28ntG2Nwf4tHYOqRFGRMXqzuH8/utc
PSbOtfDwqwodjjg2z8cL7WLn7xMfO4XdyH71KSvmGpvO9enCQOPAY+r5kinO6tDj
rGXbgJRkzHq130+D8YIK/f8D0j3AKCpl2+Ld1zaxsHKzedK++QoNqwdtP+lAfed1
qJzVg2xT3SsW6pv3WxLRJ4YUKt3W/JYJSJoZj+ZMX9KQ56dYgUdz46k1O0WS2Nvn
tFcl1QxNNLw1wqFyxSmETXPxgI9KtEPp9tWCCX23548r8497VA3kmeK6UOkKu249
aBFSZ+ZWjxcVVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:43 2026 by rpki-client