Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
File: bhmZOOWGPvPsehfj6VeCESLKy3I.mft (raw, json)
Hash identifier: qUrQaHH3uUyEE2s1AKYaaUYnY0XvXglT8Yldh1f8aBQ=
Subject key identifier: F4:CC:2C:F5:B1:C5:9D:C8:21:83:55:A7:45:61:CE:06:4D:BC:EF:A7
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Certificate issuer: /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial: 01A1AA4C7CAE5124C5E0020D880AF653D221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
Manifest number: 0156
Signing time: Thu 05 Nov 2026 06:01:41 +0000
Manifest this update: Thu 05 Nov 2026 06:01:41 +0000
Manifest next update: Fri 06 Nov 2026 06:01:41 +0000
Files and hashes: 1: C45tLQeLfwaM1RdOqpO-QuLUeQA.asa (hash: 7MH0/rLqYLLQ3/jeeFbZW6qka1ApF6OnChXUKCMlfQ0=)
2: OgAXOTf3IDVfT6V0C3TcApv_UQI.roa (hash: eQxYLK/wPde6Uj0bPjt5BRN1ClEuJ7VpeoOHlBMb9xc=)
3: bhmZOOWGPvPsehfj6VeCESLKy3I.crl (hash: 3yitUm6VG8M/8v3hLxvTpdLnPLXRa5zV/hpc16HoOPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:7c:ae:51:24:c5:e0:02:0d:88:0a:f6:53:d2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Validity
Not Before: Nov 5 06:01:41 2026 GMT
Not After : Nov 6 06:01:41 2026 GMT
Subject: CN=f4cc2cf5b1c59dc8218355a74561ce064dbcefa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:9a:3f:39:f8:1e:b2:9b:b7:60:3d:dc:98:
2a:70:aa:2f:f7:56:df:35:9f:1c:17:85:27:4e:11:
5a:6a:37:d2:90:17:f4:0f:72:01:40:51:c3:1c:5a:
86:dc:6f:ff:98:ed:28:6b:5f:8f:0e:2c:f1:40:8d:
be:62:61:cd:5f:9c:b9:fe:91:02:de:30:d5:ed:e5:
c6:77:79:d3:93:9c:b4:d9:4c:c3:9a:e5:6b:25:49:
66:61:8d:49:85:6c:6e:39:f6:0d:b8:a5:d8:83:5b:
1d:04:38:73:35:fb:61:4c:e2:0f:ff:00:29:e6:ad:
d8:b6:97:ed:e4:d7:49:19:75:73:fd:e4:fa:a3:3b:
54:2a:c1:46:ce:96:32:35:c8:64:89:e5:84:27:1b:
8a:7f:d7:03:ba:90:19:9d:a5:70:9a:c1:52:5d:59:
25:85:35:a4:1b:78:fb:df:1f:c9:e6:92:4d:1c:9e:
cb:7a:2b:42:d6:2a:e2:43:e5:99:1b:b6:19:bf:d8:
08:e5:e4:40:05:de:c6:5e:50:2e:58:2a:92:72:3f:
b7:72:7b:ab:34:ca:01:92:8c:c7:50:a8:7c:e6:ce:
b7:6a:79:e1:ad:d9:a7:35:48:64:e2:95:7a:84:4d:
6e:6e:fa:d4:8d:79:76:59:c8:2a:01:da:e2:bf:e3:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CC:2C:F5:B1:C5:9D:C8:21:83:55:A7:45:61:CE:06:4D:BC:EF:A7
X509v3 Authority Key Identifier:
keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d2:fc:20:9a:b2:3e:5a:28:b8:8e:b8:46:c6:05:e8:eb:6c:
2b:f2:69:39:24:f3:fa:52:b2:a8:92:7b:3c:18:60:88:34:dc:
40:7b:b7:d5:22:fe:d2:a4:a2:23:ab:5a:0b:d0:6a:d4:2d:28:
df:37:90:1b:e4:62:8f:4c:8e:92:82:2a:a5:34:9f:03:85:7e:
5f:7e:1e:1e:7a:d3:ea:0c:81:58:3c:e0:17:59:32:26:4a:55:
7e:76:36:c9:64:a7:31:d5:2e:64:27:2e:0f:47:7a:9e:1c:25:
f6:18:a6:ef:fd:79:e4:64:e3:84:55:e0:70:0a:5e:7d:41:54:
a5:e0:fc:49:83:7b:ba:18:a9:75:91:fb:49:92:a4:e6:27:44:
8a:53:51:3b:b2:54:23:e7:0b:64:1c:4b:bf:29:93:0b:5e:a6:
e3:c4:7c:52:70:a5:51:4f:50:e4:0f:a3:ed:d9:94:ca:2e:e4:
af:59:4d:b0:d4:bb:41:e3:49:e5:dd:60:7b:24:6e:da:d8:1f:
e3:6e:0f:ee:2c:b8:ee:3a:7d:cb:2e:af:56:00:01:b2:48:b1:
ba:42:a2:cf:d1:b9:e0:b6:e2:b5:a3:aa:f9:79:7f:06:48:07:
ec:17:c0:87:af:e9:92:2a:6d:5f:97:b0:fb:de:95:f8:39:9d:
66:65:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:31:03 2026 by rpki-client