Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: JT7e5X2zQ9o1wXRztZ1b2yBxrBK+s2vhZSlsKsAHzWY=
Subject key identifier: 3B:CF:93:89:85:EE:3B:33:4C:10:BF:CB:F8:C7:5A:8E:BA:27:74:DC
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 019FA9ABA327D877B84F549E8DAB0229A9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 03A8
Signing time: Tue 28 Jul 2026 17:00:25 +0000
Manifest this update: Tue 28 Jul 2026 17:00:25 +0000
Manifest next update: Wed 29 Jul 2026 17:00:25 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: RaGFdMZMVOEnGErftied3px4D6jYzJxumrIPWTjMltk=)
2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=)
3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=)
4: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (hash: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a3:27:d8:77:b8:4f:54:9e:8d:ab:02:29:a9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Jul 28 17:00:25 2026 GMT
Not After : Jul 29 17:00:25 2026 GMT
Subject: CN=3bcf938985ee3b334c10bfcbf8c75a8eba2774dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:a3:80:f4:14:c9:43:e2:22:c3:af:65:8a:
8a:69:73:f2:7c:f1:75:bd:9b:d1:cb:63:2a:71:e3:
c2:e3:91:1f:ed:77:05:e9:fe:b8:65:fc:81:87:7e:
13:ec:bf:8f:3c:91:a7:85:bb:f7:23:cb:e6:3e:8f:
58:a0:5c:e3:5f:ee:3c:ff:ff:58:8a:9d:19:f6:69:
df:32:0a:fe:34:fb:8b:db:e4:05:1c:9a:aa:4a:81:
48:01:cf:e9:a9:5b:7c:72:1a:6d:3f:30:52:28:31:
75:80:27:ee:62:75:a7:0a:72:2e:60:34:03:0b:87:
f4:f6:3a:28:1d:74:c1:f5:f8:8f:40:24:7b:84:30:
48:1b:b3:46:01:96:eb:da:25:dd:85:dc:bc:1f:c3:
98:4c:8a:c8:21:94:14:36:41:57:59:e0:45:f2:d6:
f2:3f:ef:2d:fb:17:b7:23:d7:09:65:fa:e6:c6:22:
69:35:66:da:1f:bf:c6:bb:d9:7f:c1:75:fe:4d:d5:
b8:33:0b:5b:f8:9a:79:3e:c1:5d:fa:ee:25:e9:01:
fc:d2:14:47:82:5e:07:93:ce:bd:8e:79:eb:9d:b0:
29:93:71:68:b4:fc:f3:dd:90:98:30:4c:3b:52:75:
13:e6:3a:3d:17:c6:6b:0a:b6:d6:bd:fb:7a:02:d8:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:93:89:85:EE:3B:33:4C:10:BF:CB:F8:C7:5A:8E:BA:27:74:DC
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:15:f6:9e:60:b6:bf:a0:7c:84:35:7c:c9:e3:04:ba:55:
09:76:a0:a1:5e:85:cb:3e:47:79:f0:32:c1:f3:d4:9b:93:21:
43:47:6a:01:de:45:30:18:14:9c:a0:17:38:04:a6:44:1e:86:
af:30:55:59:c7:14:19:d6:4e:a2:5a:c5:8e:9f:fb:24:7d:17:
3f:f8:3f:68:47:0b:e7:b4:22:72:01:a5:23:df:4b:9b:6a:0f:
70:ac:f0:1e:d8:4b:0f:ed:21:b2:48:d4:bc:a9:d0:4a:ed:1a:
ec:67:46:1f:d3:07:22:01:fe:fe:24:00:e2:cb:7f:15:8b:ca:
c4:ab:ea:3c:b3:4f:51:e4:84:2f:31:9b:52:ff:5d:b0:a3:6c:
a2:22:4c:b5:e4:18:a9:e4:f8:7b:35:7c:18:a8:05:2b:35:fb:
a8:4d:5b:c7:34:15:02:5c:d1:9c:5b:42:77:a9:28:35:1c:84:
07:d4:78:81:2f:a8:61:32:4d:6a:5c:43:20:41:64:eb:51:06:
ea:20:49:15:e1:ac:12:04:64:73:a0:e2:38:ee:8e:d2:aa:d3:
94:6a:23:0e:d5:cf:15:16:77:83:85:55:af:36:4a:f0:b5:97:
b1:42:b8:4c:63:27:f6:b5:70:20:de:93:d3:95:d3:81:4a:0e:
98:ff:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:01 2026 by rpki-client