Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: 7iJ0sIaRflCe/Bk9QCAQWz2dG+gziP4zm0lzUeQlRLU=
Subject key identifier: AC:9A:C8:33:FB:72:DF:60:4F:2B:4B:69:9D:85:94:A2:26:68:25:80
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 019FAB9A67306B005E80AA76E9744BBF3CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 0697
Signing time: Wed 29 Jul 2026 02:00:50 +0000
Manifest this update: Wed 29 Jul 2026 02:00:50 +0000
Manifest next update: Thu 30 Jul 2026 02:00:50 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: pisrvKlC16i1Baw+v9pvQj5AGt/8+Dop8rt6yY1s1/o=)
2: EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa (hash: efDuAmcnNpFOvzFx+pZEPqBZJO7OWPwyoMU32+Sy6mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:67:30:6b:00:5e:80:aa:76:e9:74:4b:bf:3c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Jul 29 02:00:50 2026 GMT
Not After : Jul 30 02:00:50 2026 GMT
Subject: CN=ac9ac833fb72df604f2b4b699d8594a226682580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:9b:9a:06:05:db:2c:92:b1:1b:7f:e5:73:
85:c2:27:5f:b1:92:45:ff:55:35:7e:a5:b9:46:9d:
cd:e3:b7:08:3a:01:b1:5e:7a:63:11:98:60:40:dd:
aa:4f:26:57:8d:64:33:4f:c9:19:d2:9b:e6:dd:95:
2a:8a:ce:18:c7:eb:21:f6:ca:92:fe:49:02:05:b4:
57:2e:86:c9:40:31:62:83:b7:bb:ef:d3:27:27:34:
50:2e:b1:0e:bc:95:fc:de:f4:7e:6a:de:39:15:79:
46:e7:35:d9:4b:ca:6c:7a:1a:5a:e6:38:d1:86:0a:
34:bf:37:2b:c6:4d:01:90:73:58:c4:0c:ff:09:da:
bf:71:ad:a6:36:10:be:cb:67:58:86:04:03:4f:57:
d1:4c:f7:47:03:f5:5a:e2:4a:4e:84:4f:de:ad:3c:
3f:eb:c2:e1:db:bb:23:4f:5f:65:d9:d4:43:f7:11:
f9:34:f1:af:b9:53:ff:2f:3c:84:d7:39:3c:04:37:
6c:a8:54:7f:61:ff:8c:73:b0:38:8b:56:8e:f5:e9:
cb:dd:29:d3:4e:ba:16:d1:18:59:bd:77:a8:9b:df:
6e:38:1c:79:f2:dd:27:b9:3f:25:e2:30:2d:f1:c0:
55:20:a5:1a:ef:83:2d:57:6b:f5:d9:b1:e9:b9:07:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:C8:33:FB:72:DF:60:4F:2B:4B:69:9D:85:94:A2:26:68:25:80
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fb:03:0d:65:d3:88:12:02:f0:cf:be:4e:2c:0a:06:ee:42:
77:63:7c:d5:59:3e:18:51:f2:25:a8:23:32:8b:c7:e0:d0:df:
4f:7b:33:ea:fb:b3:1a:5a:3b:2a:85:2c:8b:d5:cf:46:33:92:
f6:99:27:a6:b3:52:ef:a9:39:25:98:3a:4d:ea:fd:aa:c3:a6:
dd:79:ee:a8:7d:97:1c:e6:5a:b6:0a:36:a9:23:f0:ba:ef:43:
08:2c:0a:13:04:62:a1:84:b3:9d:31:48:f8:04:e2:ae:cf:c6:
5e:a1:88:31:16:f1:3f:d2:84:4c:f0:bd:48:39:8c:39:50:4e:
64:6d:2d:73:de:71:32:0a:0c:e9:59:1d:0d:50:0c:9f:71:b4:
0b:fb:bd:aa:28:be:7c:c7:e2:70:9b:71:8c:09:16:4d:27:e0:
ea:92:e6:27:f8:0f:be:e1:67:ea:a6:25:1d:47:fd:44:b0:ad:
01:b3:cd:d9:b0:2f:a0:7d:0b:33:01:7f:f5:6b:60:a3:c5:4a:
21:81:93:ab:5a:e2:ec:be:b8:4d:2c:0d:78:67:f6:21:a8:df:
d4:02:e0:1c:bf:d5:6e:6a:83:7b:2e:63:bf:fc:04:63:20:68:
10:bb:85:93:18:65:68:67:4f:3b:60:33:7e:7b:86:73:5c:f2:
a4:bc:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:54 2026 by rpki-client