Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
File: bhmZOOWGPvPsehfj6VeCESLKy3I.mft (raw, json)
Hash identifier: DUfvNwha/TYRCHkX6T25yIUNtISpMJcZ6g/2ThvHHic=
Subject key identifier: E7:8B:8C:9C:04:B6:C7:4F:73:B3:22:E1:5A:0B:19:5A:C0:6D:85:42
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Certificate issuer: /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial: 019FA89A6A61A63AE35633C3A6C308A9F21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:59 +0000
Manifest this update: Tue 28 Jul 2026 12:01:59 +0000
Manifest next update: Wed 29 Jul 2026 12:01:59 +0000
Files and hashes: 1: C45tLQeLfwaM1RdOqpO-QuLUeQA.asa (hash: 7MH0/rLqYLLQ3/jeeFbZW6qka1ApF6OnChXUKCMlfQ0=)
2: OgAXOTf3IDVfT6V0C3TcApv_UQI.roa (hash: eQxYLK/wPde6Uj0bPjt5BRN1ClEuJ7VpeoOHlBMb9xc=)
3: bhmZOOWGPvPsehfj6VeCESLKy3I.crl (hash: n4dvVGhpJQGXkbDxd96xQTeeUGYDY6mCvos9sx95PvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:6a:61:a6:3a:e3:56:33:c3:a6:c3:08:a9:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Validity
Not Before: Jul 28 12:01:59 2026 GMT
Not After : Jul 29 12:01:59 2026 GMT
Subject: CN=e78b8c9c04b6c74f73b322e15a0b195ac06d8542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:54:4a:8c:09:f7:63:f6:6c:bf:52:15:dd:
20:af:1d:e2:89:50:1a:34:42:9a:26:b5:e1:e5:ee:
91:b8:9f:2a:1d:93:08:f9:ce:13:60:2b:52:a9:db:
ae:a7:ba:36:24:79:15:1d:31:33:bb:84:1a:b1:0b:
ee:d0:91:3a:77:9f:c0:41:12:fe:44:ea:e0:67:86:
7c:44:2c:fc:7c:87:22:87:bc:34:0e:1b:03:ef:d6:
11:72:4b:b7:fb:6f:52:64:46:01:34:be:cf:1f:c0:
06:fe:ac:38:cb:13:2e:74:01:26:23:d0:89:fb:83:
74:63:12:26:dc:6f:2b:d8:fc:22:ea:c8:db:d2:e7:
b6:f7:84:f5:2d:b6:43:0a:b2:df:0e:b6:20:c0:14:
80:35:af:81:d9:7c:b4:33:17:09:d9:37:bd:f8:5a:
ae:8a:2e:34:dd:3f:31:b7:22:59:36:2c:36:a4:16:
a4:3e:41:8c:e2:8e:08:2c:1b:13:73:37:8d:8a:1a:
bf:e1:96:83:e0:82:0e:40:9e:21:bc:38:b3:3e:d4:
2c:f6:81:1c:80:90:53:64:81:8c:93:97:c9:31:42:
86:87:62:b8:13:12:eb:a9:1f:18:6e:a6:8d:d6:60:
38:c8:9b:ae:a9:b3:24:d1:88:4a:c5:c7:c7:39:8d:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:8C:9C:04:B6:C7:4F:73:B3:22:E1:5A:0B:19:5A:C0:6D:85:42
X509v3 Authority Key Identifier:
keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ba:83:a0:81:e0:57:e4:d8:06:48:3b:bf:14:ed:25:83:20:
97:69:83:cb:b4:af:db:de:73:e2:9f:33:51:94:e1:6b:56:0a:
51:a8:a6:fb:81:f6:50:1a:53:cb:ad:5e:52:81:8f:2d:83:23:
95:df:66:55:c6:a4:0f:d9:45:2d:27:fc:ae:aa:f7:e8:3d:ea:
55:66:8f:23:37:f6:d7:8c:49:da:ae:40:9d:1a:3c:b6:79:14:
f0:29:09:04:bf:05:82:f3:08:0f:54:1f:3f:fc:5e:79:48:4d:
da:06:ad:1c:c5:5e:4a:22:d2:48:4c:00:37:42:c7:ba:0b:d0:
34:0e:99:e3:6c:1f:7f:e1:28:ad:f8:ec:ff:1a:0f:d8:5b:0c:
94:94:b5:39:4a:6e:4b:64:bf:0c:ba:3c:d0:d1:2a:f2:a0:f2:
dd:1f:57:5d:13:8b:1f:2d:0b:6f:83:7f:b4:a9:6c:5c:e4:ff:
41:a1:ea:c8:b2:b2:ec:9c:d0:8d:82:d8:2a:f2:a0:1a:31:54:
e3:35:b8:7f:fa:8e:da:17:73:00:92:49:46:55:52:02:1c:8f:
c3:dd:8e:03:6f:d6:dc:f7:0d:60:2e:49:f2:e9:3e:fc:ca:f8:
67:83:c2:fa:11:e2:48:01:22:45:a6:9a:53:96:51:d7:26:84:
d3:98:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:50 2026 by rpki-client