Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: xzEq2qf+INLMyDJwUCyv6eP8z8nWQVoAqunbstGRB+g=
Subject key identifier: B7:76:C7:05:99:E7:A9:22:20:F4:2A:5F:69:D1:8A:0D:2D:A2:73:2F
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019FA975B9E664DA71636C84B63043D5DF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 16:01:32 +0000
Manifest this update: Tue 28 Jul 2026 16:01:32 +0000
Manifest next update: Wed 29 Jul 2026 16:01:32 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: 7ks/xl6KovuGTKo5PGUxzh4EtVwkj0RZuPzOQy1ZvXo=)
2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:b9:e6:64:da:71:63:6c:84:b6:30:43:d5:df:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jul 28 16:01:32 2026 GMT
Not After : Jul 29 16:01:32 2026 GMT
Subject: CN=b776c70599e7a92220f42a5f69d18a0d2da2732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:5c:2a:bc:8f:28:5b:e4:02:6e:49:4c:02:
a2:d7:69:1f:a8:37:b1:45:b7:dc:a4:08:79:1f:9b:
9b:41:b7:a2:84:13:d2:9d:ae:bd:f6:24:bb:0c:ac:
13:91:f0:e3:4e:e5:8b:43:f6:70:78:ab:36:eb:79:
2b:d3:fa:87:99:e1:eb:75:ea:08:64:22:88:56:1b:
0e:c3:75:b9:7e:b3:84:3d:4a:43:8d:eb:06:19:10:
dd:0b:b9:41:23:7a:35:f2:26:a0:85:3e:11:c2:2b:
56:60:f3:da:7a:2c:bd:ce:4f:61:d2:00:0f:cb:7b:
57:f7:4c:63:58:6e:4a:ba:20:f0:9d:1e:63:98:98:
91:0f:a2:25:36:4d:f0:55:6e:bd:88:70:d3:97:f8:
9a:d5:b4:96:4c:f2:81:8e:41:ff:b7:7d:fb:3a:5a:
98:d1:ad:59:3c:74:fd:66:f5:2f:d5:10:61:c1:77:
a6:aa:06:ac:81:35:57:f0:77:6a:72:cb:86:43:12:
63:9c:2e:21:90:13:42:5f:30:b4:85:9b:ee:1d:68:
5f:7e:20:b3:91:f6:d7:9c:c3:0d:ec:4d:e1:0e:fa:
aa:83:64:9e:60:05:63:01:4d:c8:c1:b6:66:0c:9c:
4e:ab:84:b4:3f:b5:dc:c1:00:e3:f1:f5:1a:45:d0:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:C7:05:99:E7:A9:22:20:F4:2A:5F:69:D1:8A:0D:2D:A2:73:2F
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d1:04:a2:f0:6d:be:88:e1:ce:15:ca:57:de:53:6f:7c:00:
08:9e:f5:06:0b:26:54:ef:43:a4:37:e4:2a:49:df:b4:05:b9:
e6:3a:45:ac:06:44:72:dc:fa:c7:4b:7c:78:c0:39:7e:59:1a:
61:c3:87:01:c2:b2:ff:f4:15:59:9a:c4:80:06:12:50:8a:59:
fe:66:be:44:d2:e2:8d:d6:70:d6:66:6d:2a:26:22:c3:91:bc:
94:26:34:f2:ff:b8:38:d0:f1:e9:5d:db:d3:af:22:26:c4:7d:
0c:78:f3:eb:50:cc:b1:8c:b7:2d:08:56:40:9e:dc:4a:2a:a3:
02:73:7c:49:0a:01:2d:d5:eb:5c:ef:32:d2:fe:3e:33:ca:eb:
ad:3d:ac:9f:94:6c:b9:f7:df:d9:bc:2d:84:8e:8f:5f:12:6e:
4b:6b:cf:31:13:76:fc:71:bf:63:b9:9c:af:a0:fb:7d:7d:3c:
1a:61:c6:38:99:67:45:29:02:ec:fe:b5:5a:52:58:9c:c8:f7:
ac:68:98:a2:b3:ee:21:ce:62:97:0a:5d:db:b7:99:4e:c5:25:
b3:d8:b7:4b:11:28:7e:00:62:77:f9:8c:e3:6e:d3:ff:b4:da:
c5:2a:87:21:c1:9e:d4:5f:5a:2c:1d:4f:f6:65:45:0f:6e:ea:
b5:b2:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:42 2026 by rpki-client