Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: BZ+fKw32S8D72d8cXqtlzLoonwBVsCFx4wPVkjp0Cgc=
Subject key identifier: 19:D2:FF:B2:ED:43:35:39:BC:59:6A:D6:9B:7D:A1:4E:52:5F:6F:E1
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 01A0C7466FEF94829308BDC6E750C7CC85AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 04:01:17 +0000
Manifest this update: Tue 22 Sep 2026 04:01:17 +0000
Manifest next update: Wed 23 Sep 2026 04:01:17 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: o7pysZv8WxvSxuvMOyh2oK+CxXuiRwluuRTqvFtiYRo=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:6f:ef:94:82:93:08:bd:c6:e7:50:c7:cc:85:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Sep 22 04:01:17 2026 GMT
Not After : Sep 23 04:01:17 2026 GMT
Subject: CN=19d2ffb2ed433539bc596ad69b7da14e525f6fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:5c:51:9c:44:99:b1:ed:b2:5d:11:7e:35:
88:15:77:6c:1a:a1:80:22:23:7e:f3:c5:1b:6d:53:
6e:a8:49:30:26:26:60:ae:78:f1:1b:fb:32:91:a3:
7e:b6:a4:6a:5a:29:47:93:ad:e7:ad:ff:84:21:4b:
2a:97:d0:5b:1e:a2:7e:d7:76:3f:1b:67:d2:92:35:
b4:dd:5b:aa:2e:0c:69:36:65:ba:d8:de:9b:52:65:
17:93:af:3c:d5:07:e5:cb:a8:e4:c3:f2:f1:59:8a:
f8:fa:03:e1:5a:7a:34:24:df:6e:5b:3f:d3:cb:45:
32:7b:0e:9e:db:17:c4:62:c0:a7:dc:86:6e:f0:d0:
d6:6c:a6:21:0d:f1:ec:a7:2d:99:92:23:0a:40:b3:
f7:f5:dd:7c:d6:43:c5:8b:cc:9c:25:df:9a:5b:fc:
4f:12:a3:61:61:16:86:8b:0b:df:fd:fd:ee:55:7e:
22:c9:a1:15:37:e0:d4:7b:f0:f2:7a:7f:40:3f:c0:
40:b4:f4:e5:30:d0:43:b9:9e:09:bc:f5:d9:94:11:
5b:6f:c4:a4:21:7f:a2:e6:4d:1e:88:5d:22:8c:28:
22:f2:c2:36:0b:cc:db:d5:0b:dc:49:c5:b6:f8:6b:
ce:c7:ff:f6:b7:fe:db:83:ca:d2:b1:67:75:35:9f:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D2:FF:B2:ED:43:35:39:BC:59:6A:D6:9B:7D:A1:4E:52:5F:6F:E1
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:23:61:dc:bb:d0:d9:32:55:1d:87:6a:7c:6d:c1:1a:89:98:
cf:5e:fa:c2:49:af:ce:06:86:50:28:d4:c2:6c:38:10:5f:f4:
85:bc:09:f6:c4:85:ad:cb:40:7e:f8:40:79:a8:92:d1:4a:18:
27:53:55:fd:33:84:1e:8e:79:4b:72:ec:ec:0b:97:d1:fd:12:
ea:b1:37:aa:2c:05:94:ae:ef:de:33:14:39:5e:3a:e8:75:51:
f9:eb:b3:ce:ea:b1:cf:84:c8:ec:24:6f:93:77:2d:33:43:f3:
f1:68:bf:57:92:7f:98:eb:48:70:5b:a0:f2:d3:0e:a6:93:39:
65:af:62:3c:9e:ca:e8:36:7b:5c:14:07:11:9c:de:01:84:c3:
41:e8:bc:bd:9c:cb:a9:51:d8:cd:b1:29:51:36:01:2c:a7:02:
79:3d:b7:d5:15:8c:06:b8:35:0f:8e:e7:be:ce:f3:ea:16:c2:
82:9c:9e:1a:f2:b5:fd:d8:b0:a9:41:1a:64:4f:a5:a2:8a:bf:
3d:08:99:7d:e7:62:db:c4:2c:41:c4:e5:3c:b1:d3:10:50:9e:
34:bb:49:cd:34:7d:66:6a:93:4d:6b:fd:0d:02:d4:f3:04:a3:
22:8b:52:d1:35:ed:fc:a0:38:38:64:76:e0:d2:73:e9:af:6b:
19:9a:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:08:08 2026 by rpki-client