Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: 7P2kh/4wDA+CWT7JD2OdtOG3vBFxGD2MwnnmV2wV3RE=
Subject key identifier: 3C:6E:63:FC:A3:4C:76:04:78:8D:22:DD:08:4A:21:A3:21:57:8D:62
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 01A0C77D18FD0DE2D2339B2831895BB0B8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 043C
Signing time: Tue 22 Sep 2026 05:00:59 +0000
Manifest this update: Tue 22 Sep 2026 05:00:59 +0000
Manifest next update: Wed 23 Sep 2026 05:00:59 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: pVVzV5ceZzX4bkw5JtlCB9i8DD+hHjIQNagf07gyYos=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:18:fd:0d:e2:d2:33:9b:28:31:89:5b:b0:b8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Sep 22 05:00:59 2026 GMT
Not After : Sep 23 05:00:59 2026 GMT
Subject: CN=3c6e63fca34c7604788d22dd084a21a321578d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:ff:6c:3b:51:1a:b7:e0:15:22:08:43:8f:
39:af:b2:f4:98:96:79:b6:d5:b2:c6:16:46:f2:dc:
11:b3:b8:0b:09:2a:53:27:18:5a:d2:d0:17:ba:a4:
a0:91:6b:7a:a8:57:e0:97:56:dd:1e:7d:69:16:8f:
b1:21:8a:44:e1:80:4b:37:87:b6:6c:ae:e5:fe:cc:
91:15:7b:aa:9b:d4:d9:8e:57:1e:49:92:cd:7f:ea:
60:86:83:6c:bb:d2:e6:29:d2:d7:56:dc:1c:ba:8d:
1a:e7:a2:34:d6:f8:50:3e:3c:c3:3c:b7:67:2e:96:
17:07:03:db:ed:5f:3d:20:99:3d:14:ae:cb:8f:0f:
cc:19:13:c0:03:a2:c9:17:33:18:2e:0d:d6:04:b5:
c3:ea:0b:37:38:c1:b4:cf:13:cb:59:7a:52:dd:89:
89:ad:1a:36:b1:ba:43:10:1c:7b:95:3b:cf:76:0c:
6d:d4:8c:89:eb:97:25:61:11:1c:59:3d:56:b6:6b:
92:2f:b2:36:85:c7:02:e0:e7:78:57:3b:fb:c8:ff:
80:aa:de:2a:bb:af:44:ad:9c:76:1b:a9:86:9c:e2:
e6:a8:0a:f0:d5:9b:87:66:ad:cd:8d:df:5a:5f:51:
b1:8b:e0:e4:59:2e:90:61:13:d7:e4:85:21:2b:b9:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:63:FC:A3:4C:76:04:78:8D:22:DD:08:4A:21:A3:21:57:8D:62
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d4:1e:e9:55:9e:1f:07:9c:9b:8e:c2:0d:e3:11:b0:f4:26:
17:88:21:79:a3:8d:3d:ad:db:99:6f:48:a8:1e:37:11:ff:92:
0f:ac:72:c8:e5:b9:d1:27:12:02:d8:3f:ae:09:fc:3a:00:ff:
d2:3d:55:b4:07:e4:c5:df:b4:ca:ee:18:b7:2d:be:3e:61:ba:
96:86:82:69:d5:bf:4b:f5:f0:23:83:af:5a:8b:34:6d:a8:7b:
3a:21:3e:85:09:36:c8:0f:0e:c6:9d:32:d7:8c:cc:6c:e3:06:
d8:a1:ab:20:70:3f:ad:0e:0e:c4:c5:1d:cf:91:9d:51:1b:0f:
f6:23:15:20:e9:50:93:15:de:9f:da:1e:86:47:f0:b5:23:89:
bd:ac:cf:e2:1f:ed:16:9f:54:cc:c6:cf:74:40:7c:23:dc:71:
ff:f4:38:9a:26:7c:5e:0e:03:1b:37:b5:92:d1:1f:cc:f5:43:
b6:2e:b2:02:d0:56:ae:4c:e5:25:df:7e:a9:a8:18:89:e9:0f:
7e:2c:1b:91:bc:04:23:75:27:c7:03:73:1a:74:ef:4d:18:0c:
33:1d:7e:57:23:50:84:9d:b4:f3:64:1b:66:97:3d:7f:e2:24:
8e:29:ad:6c:02:43:3d:b8:98:4d:ac:db:d6:93:e0:82:1c:bb:
32:83:c5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfRj9DeLSM5soMYlbsLiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzE4ODE3NzhhMWUxMmY2ZDk3YzUyODhlZmQ0Y2I5NTYz
ZDFkNDkwHhcNMjYwOTIyMDUwMDU5WhcNMjYwOTIzMDUwMDU5WjAzMTEwLwYDVQQD
EygzYzZlNjNmY2EzNGM3NjA0Nzg4ZDIyZGQwODRhMjFhMzIxNTc4ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgr/bDtRGrfgFSIIQ485r7L0mJZ5
ttWyxhZG8twRs7gLCSpTJxha0tAXuqSgkWt6qFfgl1bdHn1pFo+xIYpE4YBLN4e2
bK7l/syRFXuqm9TZjlceSZLNf+pghoNsu9LmKdLXVtwcuo0a56I01vhQPjzDPLdn
LpYXBwPb7V89IJk9FK7Ljw/MGRPAA6LJFzMYLg3WBLXD6gs3OMG0zxPLWXpS3YmJ
rRo2sbpDEBx7lTvPdgxt1IyJ65clYREcWT1WtmuSL7I2hccC4Od4Vzv7yP+Aqt4q
u69ErZx2G6mGnOLmqArw1ZuHZq3Njd9aX1Gxi+DkWS6QYRPX5IUhK7lU9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxuY/yjTHYEeI0i3QhKIaMhV41iMB8GA1UdIwQY
MBaAFARxiBd4oeEvbZfFKI79TLlWPR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgt
NDJlYTQ3YjEyNTM3LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgtNDJlYTQ3YjEyNTM3
LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy9Qe6VWe
Hwecm47CDeMRsPQmF4gheaONPa3bmW9IqB43Ef+SD6xyyOW50ScSAtg/rgn8OgD/
0j1VtAfkxd+0yu4Yty2+PmG6loaCadW/S/XwI4OvWos0bah7OiE+hQk2yA8Oxp0y
14zMbOMG2KGrIHA/rQ4OxMUdz5GdURsP9iMVIOlQkxXen9oehkfwtSOJvazP4h/t
Fp9UzMbPdEB8I9xx//Q4miZ8Xg4DGze1ktEfzPVDti6yAtBWrkzlJd9+qagYiekP
fiwbkbwEI3UnxwNzGnTvTRgMMx1+VyNQhJ2082QbZpc9f+IkjimtbAJDPbiYTazb
1pPgghy7MoPF5g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:30:46 2026 by rpki-client