Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: 6zbyrVTb5RmCHlOtKW4FiCd4Ypr8NjsBgSCNhMJ8Qf0=
Subject key identifier: 61:D0:02:E0:28:5E:9C:04:10:0F:A7:D1:27:2E:68:46:B7:37:80:7F
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 019CAC7E0430AFA271CA3760CCDD09317890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 17E5
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: v17kslKBWaNxBJkwNf1nhF0XrUbZthlDirLGEsrvtS4=)
2: inWJjPlJFW21pp4od2z3iY_uZEk.roa (hash: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:04:30:af:a2:71:ca:37:60:cc:dd:09:31:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=61d002e0285e9c04100fa7d1272e6846b737807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:07:c8:33:81:03:cc:33:e1:c8:95:b7:be:
29:68:ac:64:97:79:ee:8e:77:01:fa:71:0a:bf:9d:
66:11:56:05:e1:41:11:7c:27:e3:3d:a5:3f:4e:f3:
78:90:38:95:45:95:ab:a1:b1:c2:7a:f1:f1:b5:ee:
a6:75:8e:d5:33:f9:14:a3:a7:17:b8:51:f5:3b:79:
4b:8b:5d:24:d9:84:d1:34:3a:6b:ff:f7:ca:68:0e:
2f:54:50:df:bf:ec:70:ca:df:1a:b2:9f:52:86:bc:
ca:50:a0:d0:9d:eb:7c:10:b6:bd:25:83:59:1c:c7:
63:0d:a7:28:90:e0:f5:cc:21:6d:c2:4f:bf:b4:2d:
e3:82:c2:9e:08:f4:30:12:80:ad:a8:8b:17:0c:8e:
70:f7:98:56:d2:33:8f:dd:a1:23:c3:66:10:ae:ed:
0b:ac:bb:3e:7f:8f:1f:11:09:fb:45:99:23:33:af:
47:ff:7d:8d:70:0c:d8:69:6d:6d:28:1d:48:d6:ac:
f5:f9:e3:cc:31:10:fa:4a:04:1e:c1:7a:f5:ce:d9:
c2:ff:6a:11:c7:03:64:e9:47:f3:15:42:8e:c2:89:
5c:5d:32:f4:b9:93:d9:93:c0:c4:df:5b:36:23:4d:
f3:5f:cc:3c:94:e2:23:2a:c1:40:75:4c:3e:6c:93:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D0:02:E0:28:5E:9C:04:10:0F:A7:D1:27:2E:68:46:B7:37:80:7F
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:69:ae:06:57:f5:08:a0:93:12:e8:70:b0:76:f6:40:b5:
07:c6:0f:8f:ff:84:0d:d7:9b:30:10:39:44:65:ff:1e:bb:d1:
0a:ca:d7:2d:98:8f:11:6a:d0:30:4b:d3:39:ee:01:8c:fc:33:
d1:2a:6f:59:ac:c7:59:67:7c:15:5d:db:f1:86:cc:bd:43:16:
08:b6:d5:ec:d3:4f:4f:81:ab:5c:73:51:b7:28:5e:61:19:e7:
80:fc:ce:c6:25:0d:c9:7c:c8:aa:41:cd:51:ea:ec:4f:77:da:
2b:7d:e3:19:ff:7a:88:4e:b4:05:2e:cf:61:f1:39:c7:d2:66:
ab:5f:74:8e:35:2a:fe:fa:a0:8b:f3:91:10:7a:58:28:85:26:
7f:8a:30:06:d8:73:a0:a6:f8:80:97:0f:3a:8b:c0:0f:3d:fe:
e3:fe:23:a1:f8:c7:35:fd:a2:22:93:4b:27:bc:cd:e2:c2:b2:
7b:3f:c7:30:78:b0:5c:c7:51:96:d5:5f:d2:95:c6:ed:db:bb:
ba:c8:4d:64:df:61:87:8a:a6:8e:66:0c:81:d3:40:11:c5:ce:
b5:cc:f5:23:53:23:10:86:52:3e:00:22:85:cf:4c:97:f5:07:
04:f2:d5:ed:28:ce:3c:7d:ae:37:13:07:c3:63:62:24:b0:35:
d3:51:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:17 2026 by rpki-client