Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: uJonem369+T1aglh1/l9cJGgIMzDyvcEy7lB70TkK5k=
Subject key identifier: 3F:AE:83:0E:3B:04:DD:BA:8A:83:1E:38:89:9C:21:96:F8:A2:70:DD
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 019CAAFD505D004054A58B4904E0EA8CAAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 0509
Signing time: Sun 01 Mar 2026 20:00:53 +0000
Manifest this update: Sun 01 Mar 2026 20:00:53 +0000
Manifest next update: Mon 02 Mar 2026 20:00:53 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: wKktNbpyqwrmX/kQMutAPlrTJvtVdPykl4kNmdZ+gYU=)
2: EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa (hash: efDuAmcnNpFOvzFx+pZEPqBZJO7OWPwyoMU32+Sy6mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:50:5d:00:40:54:a5:8b:49:04:e0:ea:8c:aa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Mar 1 20:00:53 2026 GMT
Not After : Mar 2 20:00:53 2026 GMT
Subject: CN=3fae830e3b04ddba8a831e38899c2196f8a270dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:7a:60:26:b2:3b:db:09:dd:55:5d:82:2f:
66:0b:78:ea:ac:58:b2:ec:b0:8c:6e:f6:b8:80:4e:
de:2b:00:25:f5:be:1f:30:19:0e:09:fd:79:79:2d:
42:6a:bc:79:c0:7e:d6:0e:17:2b:31:f2:05:34:1e:
87:69:55:83:71:ca:3b:b9:30:40:d1:35:0f:f4:b8:
7f:6e:54:2f:ad:d1:59:26:04:6f:35:3b:ee:2f:c1:
6d:e7:82:f1:92:d6:bb:47:86:55:ae:a2:8f:10:05:
68:1b:ac:63:7d:bf:73:49:24:73:85:e7:5a:91:f0:
a4:74:c0:34:60:c4:d9:da:61:c5:a3:f8:65:d0:dc:
4b:44:52:4f:4d:73:71:a9:d8:5a:54:c6:69:f3:9d:
f1:35:9b:94:b5:05:44:74:65:b8:d0:db:39:0f:c4:
16:ba:b7:de:e8:9b:39:cc:fb:cc:1d:03:61:ce:a8:
5c:71:61:c9:26:10:c1:76:58:0b:cf:a6:be:5f:22:
77:62:98:d4:98:f5:b7:58:e8:7a:a4:1d:e8:44:9e:
cd:01:21:5b:03:fb:5e:81:b1:6a:56:1e:8d:3e:82:
48:13:c0:c1:7b:be:4d:22:9f:ba:16:54:40:35:1d:
16:c9:e0:ff:29:7a:68:07:d9:a0:0e:e8:c6:99:b6:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:83:0E:3B:04:DD:BA:8A:83:1E:38:89:9C:21:96:F8:A2:70:DD
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0b:6a:a4:7d:f7:2e:dd:90:d3:13:a4:fc:c1:a1:77:27:d8:
f5:4a:c3:6f:e8:fd:0e:31:c4:34:46:f2:18:d6:32:2d:c6:b5:
b0:f4:d0:c4:e4:98:8a:ce:1b:47:b4:7d:a0:55:1d:19:70:6b:
2b:b8:88:2b:7e:83:9d:10:ab:25:63:1e:07:21:9c:23:c8:24:
67:6c:d8:ca:6a:d7:0d:99:13:05:3c:9b:04:dd:3f:d6:25:b9:
16:a4:22:a2:47:ca:6d:8a:a2:37:43:57:bd:25:74:f0:6b:d0:
b7:e8:8b:d5:45:26:f1:4d:c0:75:87:fd:3c:d0:5d:e3:42:f6:
2d:46:58:63:b9:7e:f8:08:29:35:f9:8a:7e:16:d2:08:81:f7:
76:8d:40:3e:be:24:28:b1:66:79:aa:ce:f9:c9:8d:a0:10:a8:
3c:f7:6b:93:c6:13:0e:8e:86:21:ec:27:66:c9:3e:06:d1:00:
c7:ea:4c:ec:1e:68:55:6b:08:a4:4e:50:29:1f:18:f1:e9:65:
f1:28:ce:4c:24:ee:e5:fa:73:71:17:1c:ee:30:5e:1a:2f:f0:
62:95:ad:71:d9:22:91:6a:68:ba:fd:09:b7:da:d1:aa:52:06:
98:78:c7:72:27:dd:3e:e5:ef:a4:d1:8d:b7:12:12:07:11:00:
2a:5a:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:54 2026 by rpki-client