Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: C5ut7XV/9OmJTm9Yoj8ixqds3kDyPTIkJy3de30s3vk=
Subject key identifier: DC:06:0A:5C:CE:C0:B3:4C:CA:23:F9:DF:25:F0:69:FB:03:39:A8:2D
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 019D9D0839035EFD6A2884DBE29872750EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 1295
Signing time: Fri 17 Apr 2026 20:00:54 +0000
Manifest this update: Fri 17 Apr 2026 20:00:54 +0000
Manifest next update: Sat 18 Apr 2026 20:00:54 +0000
Files and hashes: 1: B2icUM6CeeejuMgcUvx_kDaA564.roa (hash: MnhHbagUBXFrbwkwtXZWHt9EfUip9vPtnZBoYPXkEak=)
2: I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa (hash: CvvU8QwgatBH8M1Cq+F7WmSuoj+U0VtrnMnDWpsz+50=)
3: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: KGGnAZiKzPztAo491uMEYvKTijkRBxOgE+sFsqJ68GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:39:03:5e:fd:6a:28:84:db:e2:98:72:75:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Apr 17 20:00:54 2026 GMT
Not After : Apr 18 20:00:54 2026 GMT
Subject: CN=dc060a5ccec0b34cca23f9df25f069fb0339a82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:f1:a7:7b:35:62:fa:a2:db:dd:f7:0f:fc:
02:25:e9:61:9a:7b:18:d8:6f:77:76:18:cf:b0:1a:
2c:c0:60:7f:e3:43:88:53:be:53:5d:93:00:1e:e4:
44:9d:94:be:df:ef:20:c7:0a:d4:90:27:c3:e3:80:
3b:ec:a3:c1:ea:c0:f1:94:8d:15:ec:f3:14:96:0f:
5d:58:ac:e2:46:89:73:40:b8:71:c2:55:c8:c8:23:
0a:e0:43:e9:02:22:bd:ed:95:fa:30:c8:f6:65:2c:
e5:ba:64:02:c7:ed:42:f4:3a:a1:65:28:f1:e0:cb:
1e:b2:90:8d:1f:58:c9:d9:76:0c:ba:f6:a4:ef:2c:
67:54:b2:55:73:0a:bd:16:4c:85:0b:25:43:dd:c9:
80:29:ff:23:f5:e3:06:19:d0:7b:00:b9:c6:7a:69:
03:4a:e4:f1:f1:66:05:0b:58:58:56:e5:15:ed:ef:
18:ab:e0:11:79:f1:a0:eb:3c:cf:56:e0:32:fb:a3:
e4:6c:92:7f:78:44:4e:1b:72:86:cb:83:5e:62:72:
04:b8:af:cb:37:59:5c:33:d4:bf:95:38:e2:d7:c7:
e4:21:61:2b:64:bc:b5:c6:4e:3c:5a:2e:39:1c:f5:
c7:f8:2a:bd:8a:a5:ae:f4:e2:0a:02:8e:73:4d:dd:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:0A:5C:CE:C0:B3:4C:CA:23:F9:DF:25:F0:69:FB:03:39:A8:2D
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:f1:43:59:3e:99:6b:a2:82:63:b7:cb:d0:7d:9f:c4:de:
fc:a6:0d:40:55:c1:5a:27:4b:8a:85:f7:fd:cb:fc:85:10:fb:
6c:3f:b6:38:0e:f7:ba:19:58:c3:4a:96:f6:ca:db:22:eb:79:
41:73:fd:47:de:ea:55:46:82:25:31:ff:d9:ee:85:9b:65:36:
8e:b8:1a:18:52:cb:f1:71:40:d5:43:f9:d5:55:46:1b:76:5b:
90:09:a8:3c:1c:cb:59:80:57:db:58:68:d6:45:ad:e7:0e:22:
12:bd:29:89:9d:3b:55:c9:3d:d1:58:ab:cc:f7:ec:ce:67:8e:
60:c7:a7:3f:bf:c1:0e:8b:41:71:f0:bf:97:a0:5e:f5:54:69:
4d:48:13:1a:d5:b9:ef:99:19:73:22:db:51:a1:73:aa:6b:ae:
94:64:5f:48:cf:e4:54:97:74:12:67:56:9b:d8:e5:fd:2f:89:
b2:a9:c1:26:c0:2b:bc:7b:1f:c7:78:9a:6a:94:b0:8d:65:c2:
e6:e9:70:4e:34:61:94:1b:02:7c:d2:05:58:76:e0:0a:0b:9a:
2f:b4:0b:88:8d:09:02:bb:41:a4:67:96:d5:c1:b2:e2:77:07:
af:77:6d:4e:0e:57:44:f0:ef:9b:b3:30:46:76:aa:5a:09:f5:
4b:33:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:11 2026 by rpki-client