Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: US+sBeV7w57+j7eDUi2aTiyAcpjRl/demSQTSpwA2BY=
Subject key identifier: CC:8D:52:7E:20:57:40:21:10:BB:30:DE:85:97:08:02:21:6A:54:22
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 01A0C3A05A994AED52762201A93B0F0EB49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 0728
Signing time: Mon 21 Sep 2026 11:01:01 +0000
Manifest this update: Mon 21 Sep 2026 11:01:01 +0000
Manifest next update: Tue 22 Sep 2026 11:01:01 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: INrqETunz3KRegU9l6TJrCVZkHEpax1L+qhIZ6Kzqr8=)
2: EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa (hash: efDuAmcnNpFOvzFx+pZEPqBZJO7OWPwyoMU32+Sy6mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:5a:99:4a:ed:52:76:22:01:a9:3b:0f:0e:b4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Sep 21 11:01:01 2026 GMT
Not After : Sep 22 11:01:01 2026 GMT
Subject: CN=cc8d527e2057402110bb30de85970802216a5422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:78:02:81:fa:83:50:ef:07:b6:58:b2:9d:d9:
e9:71:86:ff:76:e5:b9:16:30:4d:6e:c0:4f:0d:74:
a8:be:a1:33:f8:09:83:0d:a0:c3:18:2d:01:59:5b:
8a:1d:95:7f:b1:6b:b4:fa:f7:b2:93:80:06:c2:aa:
36:46:d1:f8:cd:14:51:f4:dc:d4:d5:0b:11:48:73:
1e:9f:58:f5:3a:cc:40:a6:1b:2d:6e:8e:fe:f8:da:
69:60:f8:28:d3:3f:4c:12:95:85:bf:b3:08:74:2c:
9d:eb:ae:fa:de:fa:6e:0d:f7:c5:c4:64:e9:7d:f6:
1a:c0:35:ea:b3:87:e8:2f:39:25:9e:f7:08:65:d2:
ab:ee:20:5b:f3:2b:fa:aa:b7:d4:ae:aa:55:4c:7a:
21:a6:a7:55:8a:99:ac:40:88:5c:ad:5c:46:6d:49:
3d:df:c9:18:ed:34:ff:72:9c:9d:8d:7d:87:1e:44:
42:68:50:1a:0e:c1:14:cd:22:40:63:93:ed:ac:64:
e7:fb:02:d1:b0:94:d5:a4:c6:02:6f:ca:e1:0f:33:
b2:91:4e:cf:4c:67:c5:f9:df:31:48:1d:36:c5:a0:
11:5d:ed:03:a0:d1:b7:31:7f:4b:90:d2:8d:a3:33:
42:9b:1d:61:12:7a:58:63:f6:2d:72:31:c8:f4:23:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:52:7E:20:57:40:21:10:BB:30:DE:85:97:08:02:21:6A:54:22
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:45:98:91:7b:b1:0c:a0:49:88:cf:a1:e0:ff:4c:c7:00:
bb:40:cf:75:38:1b:4b:b9:1c:fa:06:74:1e:34:5f:03:f3:ba:
d6:c7:39:45:2f:c2:5d:fc:0d:2e:97:64:7e:66:a1:e0:c2:78:
eb:9b:d3:5b:c6:7e:57:3b:06:ba:1c:70:8e:9b:df:3a:7d:c6:
ca:5a:20:ce:14:14:dc:1b:7b:52:85:92:f0:53:4e:00:b9:b4:
81:7e:5a:00:bb:27:8c:e7:5e:27:c0:27:7f:41:be:80:00:f8:
63:52:bb:6b:0e:6f:b3:53:a4:f1:d9:fb:b4:79:f6:ba:2c:6c:
4f:8d:d5:6a:cf:83:22:d2:a1:11:62:41:a8:91:7a:90:a2:a0:
2e:d0:47:cb:5d:e0:68:c4:5a:8c:68:2e:13:e7:2b:a8:04:c4:
cf:01:33:c3:24:27:b2:33:a6:b0:c1:c4:da:d9:31:07:69:14:
30:b8:09:ac:22:e5:15:64:e8:09:68:a8:e0:ea:06:66:f5:bb:
f0:66:4f:57:ba:80:d7:8a:b9:b0:f5:6d:e5:b3:e1:a5:b8:47:
3d:05:df:51:ac:52:d6:af:ac:41:6a:33:15:cc:39:f0:d3:60:
6f:03:27:dc:a3:45:77:f1:89:98:44:88:7e:65:a2:72:ca:9e:
f4:a6:90:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:51 2026 by rpki-client