Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: lAHXrVCUmGDO9mBMLkxZPiK6nmm0LCv5muSIPQzm9t4=
Subject key identifier: 27:4C:70:F6:02:79:D9:A1:19:F8:B3:CE:6B:91:EB:42:40:5C:7A:73
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 019FACACBF221E2BF82033203672800828B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 07:00:30 +0000
Manifest this update: Wed 29 Jul 2026 07:00:30 +0000
Manifest next update: Thu 30 Jul 2026 07:00:30 +0000
Files and hashes: 1: SUVgPcCNecAn7h3a2odgkdUnXAE.asa (hash: JHYm3gRUz1k6I2OldseBDJbvhLcJl5oAw0QgRA7AXfE=)
2: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: 4+pxb394SqmRXbacgt6zm9VlFADejhGgFIM6fHOWEoM=)
3: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:bf:22:1e:2b:f8:20:33:20:36:72:80:08:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Jul 29 07:00:30 2026 GMT
Not After : Jul 30 07:00:30 2026 GMT
Subject: CN=274c70f60279d9a119f8b3ce6b91eb42405c7a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:2c:a3:d5:1f:16:51:e0:4d:d0:3e:8c:cb:
29:61:a2:8b:14:00:a5:28:d0:52:58:0d:30:98:71:
69:0e:8a:54:e7:0b:7b:77:dc:89:fb:d2:39:eb:24:
11:9b:4c:b5:be:46:b7:3b:dc:ba:a0:23:65:5b:aa:
dd:b7:8d:71:02:7f:c7:11:08:0c:82:a2:cb:b9:4a:
f4:b2:30:17:a4:22:d3:90:2c:62:f2:50:fc:8a:30:
13:8b:57:54:eb:e6:7c:70:a7:20:3d:79:ab:31:dd:
52:00:20:9b:45:f6:89:1f:0a:b8:2d:fc:8c:b2:9d:
30:46:ed:bb:a8:af:cf:29:a8:24:fb:94:1b:0f:70:
32:25:8e:01:c6:7d:09:e9:b5:25:2e:1a:8c:61:dc:
36:9f:3d:7d:69:c0:d9:06:a7:82:6c:7e:25:68:18:
f3:46:b4:45:0b:47:e1:77:e0:a3:c8:53:d0:cd:d2:
6f:ff:e2:cf:24:00:c7:08:42:4d:9f:f3:e9:12:f2:
9d:1c:17:19:a3:18:da:5b:85:0d:88:76:14:9f:b7:
b6:48:d4:c9:5f:b6:96:45:3c:6d:ac:c5:34:be:39:
bd:3c:19:8b:5b:9c:e1:99:2c:82:58:62:e4:90:14:
c7:46:06:3f:d8:81:14:96:55:da:87:ea:80:6c:26:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:70:F6:02:79:D9:A1:19:F8:B3:CE:6B:91:EB:42:40:5C:7A:73
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:15:f0:60:19:a1:fb:16:93:4e:1b:f0:7b:19:d4:12:4a:b5:
ee:e9:bc:ea:eb:6d:ba:1a:11:51:36:da:5d:56:8c:c7:c3:04:
a9:f3:69:b7:c3:f0:f3:5f:a2:b4:c5:6f:dc:99:c1:dd:d3:c1:
0d:59:ab:42:67:8f:0a:22:8b:89:30:1a:31:ef:20:04:4d:49:
7b:dc:9c:cb:b8:2f:a0:1f:6e:93:eb:06:27:81:3d:22:72:5d:
89:bc:3d:0d:2c:c3:4e:86:aa:a1:92:d4:2c:f5:b3:86:39:4e:
57:56:1a:b4:ea:21:7d:b6:9e:45:7f:a7:6d:1b:48:55:73:d7:
04:42:ed:23:4a:f7:b1:16:78:c2:9c:9d:a1:90:0a:ce:8a:5b:
4f:da:44:bc:0b:99:4c:cb:47:27:e1:b4:4a:3a:f7:00:aa:5f:
06:b6:1b:dd:25:5b:98:a5:7b:08:b7:6e:dd:98:9e:7e:1a:7f:
4c:ba:7e:99:f3:48:8e:2e:d0:ae:76:78:5a:f5:5f:c6:da:ed:
de:7a:34:0a:08:4f:c5:7f:ad:ee:b0:ff:68:94:fa:70:e9:cb:
41:db:f1:d9:4f:c9:fd:b3:01:96:66:d1:8a:4a:84:e8:38:55:
f0:df:1a:df:fb:8c:18:f6:83:01:bf:ff:b2:4f:04:4b:4f:f7:
fb:41:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:14 2026 by rpki-client