Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
File: bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft (raw, json)
Hash identifier: cYhkpqBEB5tWZp4wceoLxilqL2dAyhP6Hsd0ojMgw14=
Subject key identifier: 47:2C:CA:1A:23:33:69:7F:91:64:34:3C:0A:61:07:FC:33:7C:F1:49
Authority key identifier: 6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
Certificate issuer: /CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Certificate serial: 019CAD59CA148F7670C51C1F1EC56C256504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
Manifest number: 0666
Signing time: Mon 02 Mar 2026 07:01:08 +0000
Manifest this update: Mon 02 Mar 2026 07:01:08 +0000
Manifest next update: Tue 03 Mar 2026 07:01:08 +0000
Files and hashes: 1: bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl (hash: VSRTcOHXuTuJxYgQCpwnh0nC0BZVVgDiK8imwcWflKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ca:14:8f:76:70:c5:1c:1f:1e:c5:6c:25:65:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Validity
Not Before: Mar 2 07:01:08 2026 GMT
Not After : Mar 3 07:01:08 2026 GMT
Subject: CN=472cca1a2333697f9164343c0a6107fc337cf149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:f1:b7:80:9c:df:1e:1b:83:47:da:d2:4e:
84:95:ac:55:f5:20:3c:2f:08:1b:9a:be:3e:44:6f:
8b:d5:08:8d:de:a2:24:dd:b9:e8:2f:33:2a:2c:8d:
a4:6f:b6:1d:16:05:77:3f:e7:4a:6d:6c:49:27:f2:
e9:b9:ee:8a:55:86:4f:56:18:b6:f2:94:a6:9f:ad:
af:47:70:31:b9:8b:b1:b8:8e:f9:99:cb:dc:21:c7:
47:8c:c4:93:ca:3f:13:3a:61:c3:74:5b:97:96:b8:
41:76:d1:40:14:b2:32:f2:ba:05:c8:41:0c:ce:ea:
f4:6f:2c:02:fd:10:6c:56:df:63:1b:f0:f7:88:e4:
c2:12:30:4b:af:0e:7a:5e:d3:63:ed:c2:ce:7f:42:
b5:8b:86:7a:3c:c0:0a:ee:5c:e1:9c:d2:d3:82:78:
3d:79:17:9a:a2:8c:be:88:b1:28:2b:a6:49:83:fd:
db:71:66:e8:95:bc:5f:7f:5e:02:52:3f:5f:dc:19:
a7:b7:6f:d5:99:5f:27:dd:ce:91:82:89:1a:ad:44:
4e:74:af:76:98:b6:1a:3a:d4:c0:01:85:11:9b:44:
71:51:5f:c2:40:46:a8:23:57:96:0c:04:33:30:9d:
8c:d5:15:bc:17:fe:ae:a9:e4:c3:fe:da:c4:29:b8:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:CA:1A:23:33:69:7F:91:64:34:3C:0A:61:07:FC:33:7C:F1:49
X509v3 Authority Key Identifier:
keyid:6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:50:20:62:e4:9e:85:3c:92:1e:24:ae:3e:8e:21:0a:62:17:
3b:40:56:a6:a5:b3:9f:68:0e:d7:da:da:a0:8f:d4:4d:c5:e8:
46:4f:b4:06:26:cf:2e:7c:36:13:67:33:ee:63:2d:2d:f6:38:
14:53:7b:5c:9f:fe:a3:76:bb:cf:39:1b:1a:e2:cf:a8:69:27:
74:7a:64:f8:64:de:e2:9b:ae:9d:71:3d:a3:03:80:a7:78:47:
bb:23:0d:53:68:3d:73:3f:db:52:8b:9f:79:d2:ba:ab:af:80:
f5:98:65:ae:30:63:7b:b3:9a:2b:ff:e5:66:b0:6a:c2:18:4a:
d4:e7:b4:b7:e7:dc:68:76:82:61:50:bb:2a:94:a6:be:80:32:
ca:d0:1a:75:4a:70:f9:fd:8c:44:af:55:76:6a:e1:5f:df:f6:
c6:b6:01:62:17:8d:41:79:48:b2:c1:c1:ac:1e:0e:a0:75:33:
5b:92:0c:40:27:7f:d2:dc:2d:b1:a2:91:8d:4f:19:ea:ee:bd:
f1:9f:41:45:b6:b7:bd:b8:94:db:bf:62:02:48:42:bc:72:78:
e1:b3:7f:ac:3e:0b:88:25:60:67:42:11:35:b1:c1:5f:a0:38:
79:ac:4d:fb:6d:19:8c:2d:5e:69:95:e6:58:9d:d8:b5:a1:98:
2f:b6:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:02 2026 by rpki-client