Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: 4M8/AsfeA3XF87f5KIG4yayidFetfx70FcE28od1x+Y=
Subject key identifier: 62:43:E0:1E:E2:A2:44:A4:FC:6B:ED:C2:C7:F3:5A:87:4A:3B:76:3A
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019EBFC8644C81BDE278C36645C4F497DB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 07:00:41 +0000
Manifest this update: Sat 13 Jun 2026 07:00:41 +0000
Manifest next update: Sun 14 Jun 2026 07:00:41 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: pqsx0vbcOhCUpD9Rd6gBniLc9op0wapZoduhj2BKdK8=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:64:4c:81:bd:e2:78:c3:66:45:c4:f4:97:db:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jun 13 07:00:41 2026 GMT
Not After : Jun 14 07:00:41 2026 GMT
Subject: CN=6243e01ee2a244a4fc6bedc2c7f35a874a3b763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:f8:f9:b3:83:a3:e0:02:f3:7c:6c:81:fd:
ae:c0:78:ad:5a:19:8d:9c:22:c4:1e:6c:f8:f5:f8:
9d:7a:f6:5d:b1:8f:b9:95:3b:08:8c:be:fd:af:2e:
0f:17:6f:e0:f8:78:0d:e3:51:02:3e:4d:45:e3:fe:
a4:a7:3d:3f:46:1f:96:82:d3:0f:6e:f9:64:5d:7d:
f8:d0:68:a4:02:0d:6f:99:36:b1:7f:f0:07:cd:93:
a8:be:60:8a:21:f5:ee:6e:11:bc:22:74:45:dd:21:
66:30:c3:67:51:ae:e4:9b:8d:6a:e6:8c:47:83:03:
77:70:93:3c:8f:5a:0c:e6:68:39:5b:e2:db:07:a1:
67:24:76:80:85:08:3e:c2:48:f6:f0:ff:c4:20:1e:
dd:f5:d8:94:8e:b0:f2:59:55:96:2d:6a:84:0b:ec:
c0:be:08:30:a1:71:6a:a3:f4:22:48:56:5a:d5:32:
ed:bd:0f:df:19:d5:5e:a0:b0:4d:df:16:2f:64:f7:
56:7b:df:94:9b:98:aa:59:a4:6c:80:79:f1:a1:a1:
21:b1:31:6f:6e:dc:91:3b:0a:45:6a:06:e9:64:d3:
55:fd:ee:c8:56:f2:05:f3:d0:7c:aa:c3:98:8b:98:
28:5f:f3:23:f1:f6:30:ca:5b:6c:94:c6:35:ab:25:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:43:E0:1E:E2:A2:44:A4:FC:6B:ED:C2:C7:F3:5A:87:4A:3B:76:3A
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:f7:28:aa:f9:60:81:aa:81:8c:10:5f:71:09:6a:58:61:
8c:b6:c2:3d:d2:a3:e5:c9:cd:52:b2:36:56:31:0a:b8:c2:8c:
97:72:49:8e:ef:f2:2d:fc:e8:b3:0e:97:f7:43:ae:13:a0:ef:
c9:f3:05:6c:2a:91:c3:2c:4c:88:87:ff:84:4b:70:39:d6:1c:
4b:93:29:66:e7:05:4a:58:7c:5a:88:be:e4:3f:f4:fa:d6:79:
29:41:ab:6e:63:ec:54:bb:9a:da:e5:4c:d1:8a:41:28:b2:20:
3c:2e:fd:a8:c2:38:f4:db:cc:95:a9:30:02:31:9e:9f:23:90:
e8:11:50:78:9b:61:4b:ad:76:86:54:ec:be:0a:e0:ca:52:77:
74:4a:89:69:55:1c:5b:db:22:91:d2:f9:8a:91:37:67:c7:b8:
3f:a6:c6:78:8a:34:3c:af:b1:0f:c0:21:8d:ab:bc:00:16:5a:
4f:bf:de:f0:a7:34:42:d4:e2:04:e0:56:dd:a9:77:eb:9e:ea:
ec:57:36:bf:3b:b6:2b:93:48:5e:6c:45:d5:ee:a5:15:d9:09:
37:3f:5f:40:88:6a:ac:d5:4f:c8:64:f0:80:16:1b:2f:03:9d:
45:1e:82:dc:de:db:61:86:42:90:32:b4:10:7c:d2:37:e2:17:
ac:f4:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:19 2026 by rpki-client