Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: /hkYOVK+CO9O2nWNktv+MmxzMCcnL99A/xLvexeHiNI=
Subject key identifier: 94:C5:B4:EA:5D:B3:26:0A:19:68:5D:40:51:6E:10:0D:48:A8:C9:6E
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 019FA93E31FC285BBB29DBF37BC518A106A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 1971
Signing time: Tue 28 Jul 2026 15:00:53 +0000
Manifest this update: Tue 28 Jul 2026 15:00:53 +0000
Manifest next update: Wed 29 Jul 2026 15:00:53 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: BapXAVu4G5k9ws/SHp8HZf0O5k+Fmns/bgV5JiDHBNo=)
2: inWJjPlJFW21pp4od2z3iY_uZEk.roa (hash: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:31:fc:28:5b:bb:29:db:f3:7b:c5:18:a1:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Jul 28 15:00:53 2026 GMT
Not After : Jul 29 15:00:53 2026 GMT
Subject: CN=94c5b4ea5db3260a19685d40516e100d48a8c96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:84:8a:ac:d6:82:d2:61:58:ae:62:84:0c:
6d:4e:cd:b7:85:a0:96:6e:59:cf:3a:2d:ce:66:65:
32:ea:c6:66:32:2d:65:ae:b8:06:d0:e6:c2:ec:44:
90:f9:99:ae:36:c7:53:60:ef:6a:07:2b:f9:f7:d3:
e5:bf:eb:68:ef:96:9b:41:f2:72:8b:2f:24:a3:3a:
c1:a3:92:5b:ab:e7:03:a4:6d:f6:8a:02:f9:35:0b:
81:16:29:77:62:99:59:87:cb:6c:62:ab:76:70:04:
45:5d:82:6f:37:62:eb:97:1f:13:06:87:ec:b1:8d:
48:57:59:5c:d7:19:d7:f1:94:eb:59:62:19:d3:c4:
e6:e1:fe:a3:33:82:77:d9:32:6f:32:db:b2:03:98:
2e:d0:0c:e8:a0:71:76:3d:ba:66:2b:3a:12:ce:4a:
8f:5d:75:0c:d4:86:9a:0d:4b:80:e8:ea:e4:0f:be:
a0:13:17:ce:43:9a:2a:ae:15:7c:ce:6d:41:84:07:
1f:05:8e:29:f2:f4:cf:9a:b3:15:6a:40:b9:2d:5d:
9f:20:be:56:72:f7:91:d8:3c:c0:cd:15:7c:1e:a2:
fe:34:a9:24:31:2b:43:56:36:ea:65:7f:e5:67:bc:
9e:10:94:da:89:5d:4f:42:5c:8a:57:84:68:09:ad:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:B4:EA:5D:B3:26:0A:19:68:5D:40:51:6E:10:0D:48:A8:C9:6E
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:73:1d:e6:d3:87:cb:eb:00:ef:d4:8b:73:fc:57:f6:45:
0e:d2:55:fa:18:55:c1:bb:70:18:e7:05:79:b8:cc:a3:ce:6b:
79:08:2f:21:6a:bd:2a:02:49:8e:72:b7:7b:5a:71:fc:4e:3b:
cb:91:ab:57:d0:87:80:6c:fe:d1:13:98:ad:4c:12:03:69:8b:
87:8e:3c:ff:65:68:ee:e9:e7:44:4f:05:02:ba:28:cd:f7:2b:
d2:d3:5d:4c:ce:3f:28:47:61:a4:be:59:66:e8:9d:5f:a1:12:
5e:55:f5:3a:71:8b:a4:9e:72:51:48:04:36:f0:88:f4:1e:a8:
a6:b9:b9:5d:57:d6:20:7c:9a:e7:c5:09:3e:28:26:13:04:61:
b0:a2:45:3d:ca:1e:6a:39:dc:e3:cf:46:56:8c:31:c1:da:19:
6a:5e:d9:6b:a8:03:a6:2e:25:21:42:0c:25:2f:4a:ac:89:02:
3d:4b:b9:d8:bb:3b:73:6b:b7:82:56:f7:33:83:6a:cc:a1:ca:
aa:b8:8c:5b:4f:df:2b:c6:24:b9:7d:9d:60:4a:d8:03:54:7d:
ce:ce:b6:e6:5b:ef:91:6e:05:4a:35:0f:96:14:35:63:bc:bd:
29:54:2a:88:ae:82:8f:a1:95:cd:93:9f:29:00:89:73:66:cb:
91:06:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:57 2026 by rpki-client