Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: OkOhzaMckNcbDFfqL49po4PKEq/ZZN5q9DZHmd/GSfU=
Subject key identifier: A4:7C:A0:D5:38:B3:73:C9:C1:C2:54:99:96:C9:41:F8:7E:79:D2:58
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019CAAC691743E51031A74A4DC26A3971DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:05 +0000
Manifest this update: Sun 01 Mar 2026 19:01:05 +0000
Manifest next update: Mon 02 Mar 2026 19:01:05 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: 0aawGxPGIKxOU7Ix+pa4+dHXr5ywCYpETkKsJ46cos0=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:91:74:3e:51:03:1a:74:a4:dc:26:a3:97:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Mar 1 19:01:05 2026 GMT
Not After : Mar 2 19:01:05 2026 GMT
Subject: CN=a47ca0d538b373c9c1c2549996c941f87e79d258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:c6:d5:3f:6e:b7:48:6a:d7:57:3f:47:2c:
e0:b1:57:a6:28:7d:b6:a9:0c:dc:41:0a:e7:e1:53:
bc:64:05:0c:39:65:d6:6f:4a:15:58:be:22:aa:88:
e2:e9:73:62:a3:73:8e:9b:8f:ea:d1:5f:c7:dd:56:
fd:e9:ca:a8:71:9e:0d:db:24:85:61:2a:24:1c:76:
58:76:a6:b3:45:99:2b:fd:ae:b9:4e:59:dd:3a:d7:
a3:52:9a:27:9c:bf:78:33:1c:2c:b3:df:bc:06:24:
48:40:ce:33:4d:f8:ad:0f:b5:4c:75:2d:a1:5b:9a:
02:20:67:45:a8:d1:c7:d4:27:a7:7e:c8:b6:a3:3a:
4e:ca:fe:58:01:a2:8f:84:f5:c3:ba:88:01:a9:78:
48:21:10:81:c1:c7:c3:2c:91:61:99:13:33:50:49:
bb:ad:12:e2:7c:90:cb:72:b1:c7:ee:b3:c8:2f:c1:
87:8d:05:5f:16:36:60:bf:19:9f:ba:08:23:f8:ca:
9f:5a:5e:e6:ef:1f:37:e1:aa:30:25:1d:8c:6b:73:
b0:79:cf:ff:10:60:63:1a:d8:6f:ac:f6:d0:87:01:
fb:75:37:aa:dd:53:cc:8e:f9:d5:6b:ad:0c:7b:fa:
ca:86:a4:1f:05:7e:d0:d4:f9:c7:02:0a:8f:11:30:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:A0:D5:38:B3:73:C9:C1:C2:54:99:96:C9:41:F8:7E:79:D2:58
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2a:17:c1:cf:c7:08:ac:0a:5a:4e:3d:81:32:70:d9:9a:53:
76:c7:99:5e:86:da:f9:c9:52:18:a9:f2:d9:07:6b:90:19:02:
5b:1b:03:25:c4:3b:fb:a1:1b:73:07:4b:2a:96:d4:15:5e:cb:
9f:0c:f4:ae:3c:16:30:34:8b:4e:ba:7c:a7:9a:ff:66:6b:33:
c1:4b:88:0d:7c:26:97:c2:23:02:fb:1d:f6:56:52:f3:12:80:
b7:f8:3c:b8:8b:05:23:c2:70:d7:60:a3:a3:9e:60:dd:90:c8:
1a:e9:aa:84:56:56:f3:b8:43:6c:e2:ad:ec:fd:63:3e:2d:3a:
e6:1b:fd:5f:a4:d2:aa:6f:c7:e4:0e:63:ed:80:d2:cf:03:80:
fa:b3:18:92:eb:7a:c3:12:43:d9:ee:7b:62:14:32:a5:8b:59:
f3:c1:15:d7:0e:ef:a5:88:a5:29:96:62:36:db:08:46:81:9d:
39:03:da:5f:3d:a6:eb:c4:32:c0:3a:8f:23:d3:57:88:36:45:
49:40:9e:3d:cb:bc:51:ac:f7:d7:a8:6c:4d:b0:99:d1:78:75:
0f:57:23:e9:9e:44:f3:f7:57:cc:8f:4c:25:56:f7:c8:af:44:
0f:e4:06:bd:e8:b7:63:19:69:66:ee:78:f1:ff:c8:bb:0e:cb:
00:9a:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:35 2026 by rpki-client