Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: kEh/M45ZGBsRDJyVBQv6xiXZiLgc2tyL/7SiPwjauoA=
Subject key identifier: 3E:B7:FE:F8:F9:FF:6F:CA:E8:0F:7F:75:B4:FB:29:84:BD:31:88:7A
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 019CAC46CA540006DA87C9A7BEA728893AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:46 +0000
Manifest this update: Mon 02 Mar 2026 02:00:46 +0000
Manifest next update: Tue 03 Mar 2026 02:00:46 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: 6QZsPUEtcom20VGE7worEctH9nSPotuu9iMduFTkmnY=)
2: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ca:54:00:06:da:87:c9:a7:be:a7:28:89:3a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Mar 2 02:00:46 2026 GMT
Not After : Mar 3 02:00:46 2026 GMT
Subject: CN=3eb7fef8f9ff6fcae80f7f75b4fb2984bd31887a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:80:b7:f1:ae:9b:10:b8:44:d1:cd:7e:6a:
28:01:ff:5c:7a:73:06:39:38:47:7f:12:e0:ac:bb:
e6:5d:3b:3d:4b:92:3e:29:ff:17:f1:ae:3e:df:28:
21:34:d2:ea:a7:a2:41:d6:39:45:ff:8e:81:93:df:
12:75:38:74:58:4f:8a:c8:db:37:96:d9:d0:3b:a7:
38:c2:08:c3:4a:8b:44:55:e1:34:07:3e:ff:a8:b8:
87:b5:e3:22:7a:60:c0:29:78:15:b5:62:91:bb:a0:
5b:49:15:e5:da:13:90:52:ad:db:16:63:6c:e5:4b:
b1:fc:60:60:65:4b:77:29:a1:18:4e:55:7e:e3:a3:
36:58:2e:1b:01:45:ef:58:2f:85:95:2d:4e:29:a1:
98:eb:ea:2d:58:2e:1f:ed:41:c6:03:10:9f:5a:06:
c7:d9:2e:3b:ec:ca:eb:94:34:14:13:56:b2:c1:44:
f2:1b:52:fe:0a:9b:c1:48:47:cf:69:bf:eb:31:3a:
b2:54:de:31:90:67:03:af:d4:e0:77:c8:21:c5:f7:
e3:b3:c9:39:bb:63:47:27:53:dd:db:bf:18:50:31:
0f:24:6e:11:54:49:c1:6d:a3:93:ef:2e:41:ea:41:
8d:10:06:fc:6f:7b:2c:93:d0:61:ad:2d:46:bd:58:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:FE:F8:F9:FF:6F:CA:E8:0F:7F:75:B4:FB:29:84:BD:31:88:7A
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:71:54:5e:f7:b8:16:09:f6:73:28:83:7a:19:52:95:ac:bd:
6b:0c:7f:bb:a0:ab:b1:b1:fe:25:fe:7a:4f:36:d4:60:90:0a:
0d:30:ab:67:96:0b:a4:fc:1a:c7:9a:af:ed:16:0f:0b:03:e1:
a8:ce:a1:dc:56:77:0e:3d:3b:21:74:4a:84:aa:3e:84:1f:43:
cd:fb:9c:fb:f4:17:4b:1e:ad:ad:7c:b2:0c:67:70:8b:26:ec:
bc:54:83:ea:a1:ce:f9:ba:33:52:f3:d9:2b:1f:8e:f4:04:5a:
7a:ef:eb:cb:75:44:a7:e0:e5:c2:aa:eb:58:a8:6b:f7:18:7f:
f8:c1:67:b1:94:ff:f1:7d:8c:c5:66:7b:91:47:32:32:5b:dc:
a2:bc:16:2e:71:80:cd:8c:ab:11:12:e6:83:71:52:04:ba:f3:
56:af:6f:97:17:cd:07:a1:76:4a:87:ac:0c:30:33:5a:05:b6:
b0:12:5f:14:29:47:17:e4:7e:7b:0b:86:68:66:3c:e6:46:c0:
74:f9:1b:b4:21:a6:80:95:6e:a0:43:6b:c8:3b:3e:81:44:10:
d3:7c:f6:c4:46:da:1c:14:68:46:ad:43:3e:41:5c:10:aa:88:
60:d2:8d:a0:82:58:4f:21:02:b9:e0:4f:64:8b:24:76:be:1c:
dd:44:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:06 2026 by rpki-client