Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
File: bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft (raw, json)
Hash identifier: 058lu1+rWEpK3yxq+NBrBQpmB4jfmzHwluT7N2Ery7Y=
Subject key identifier: 74:01:D0:FA:7D:59:E2:D0:81:74:BF:31:ED:B2:77:1C:BC:36:35:DA
Authority key identifier: 6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
Certificate issuer: /CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Certificate serial: 019D9CD1F89E8B4D285EEF7D5E80E98A51F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
Manifest number: 06E2
Signing time: Fri 17 Apr 2026 19:01:39 +0000
Manifest this update: Fri 17 Apr 2026 19:01:39 +0000
Manifest next update: Sat 18 Apr 2026 19:01:39 +0000
Files and hashes: 1: bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl (hash: CnuN5s1ExjmCnb/fQDjrA/h04+1J25SYACRiWxmMFOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:f8:9e:8b:4d:28:5e:ef:7d:5e:80:e9:8a:51:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Validity
Not Before: Apr 17 19:01:39 2026 GMT
Not After : Apr 18 19:01:39 2026 GMT
Subject: CN=7401d0fa7d59e2d08174bf31edb2771cbc3635da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:d6:7e:1d:f7:a8:9f:ee:5d:d9:a6:55:39:
0d:f8:70:56:77:ec:a7:9f:fb:4a:cf:62:01:b6:cf:
17:5c:fb:e2:cc:2e:0e:6d:5a:21:ab:5c:ca:d1:83:
81:50:b7:f0:47:4e:db:e5:db:77:a3:36:12:c4:fa:
6f:f8:a6:6f:88:ff:1f:17:4f:b2:df:68:fd:93:fc:
3d:ec:23:eb:bb:f8:4f:f3:07:7b:dd:98:6f:2e:b4:
a6:f1:29:25:0b:07:34:30:22:6a:a2:cf:87:fb:3a:
a3:58:c7:d2:e4:99:ee:68:69:06:6d:42:a7:4d:64:
9a:33:5b:9e:92:c3:19:3f:cd:83:0c:df:d8:47:df:
19:a6:97:43:1b:41:9b:45:71:2e:f2:6e:99:5c:0e:
63:53:ad:a2:5e:d6:bd:a7:58:c8:fa:a0:95:9b:60:
55:f9:57:51:20:78:07:78:30:3f:68:d4:0c:f3:3e:
12:f8:dd:93:54:0f:a2:6b:2d:0f:fa:4c:27:a0:f9:
57:18:64:ce:ff:ae:11:c8:52:b2:50:f8:44:13:02:
72:67:e7:df:fe:ea:93:40:f6:cb:37:df:c2:f9:5d:
4b:ee:f7:db:1a:5c:b9:44:0d:ed:48:32:1f:59:02:
15:a5:60:fe:1e:69:37:1b:4c:2b:10:69:50:f8:9d:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:D0:FA:7D:59:E2:D0:81:74:BF:31:ED:B2:77:1C:BC:36:35:DA
X509v3 Authority Key Identifier:
keyid:6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:07:27:87:0d:d0:24:f6:36:6b:be:9f:d5:95:65:fc:3a:ba:
53:25:02:ad:c7:d9:fe:40:c9:b3:85:8f:e4:e0:7e:bd:3d:e6:
b3:e3:5b:fd:a1:27:76:25:e1:1d:74:15:4c:65:ae:2f:29:5d:
c1:29:fe:a2:c2:cf:63:6a:18:65:39:78:3b:4b:25:2a:d9:3f:
a8:07:d1:26:46:51:d4:9e:44:60:65:86:34:44:3f:e4:30:1b:
2d:7f:b7:ea:f5:a2:2e:45:ca:25:e5:d3:3b:33:68:91:1a:d0:
8b:c8:85:68:27:a4:4e:74:7a:dd:16:b5:69:1f:4f:6d:4d:4b:
6f:53:11:83:0b:03:21:40:21:f8:a7:f0:28:d4:6f:34:aa:1b:
f9:4c:98:d4:cc:11:09:41:e3:59:1f:b3:85:d5:da:b1:f3:db:
30:8a:0d:20:be:8f:93:6c:2d:f7:36:5c:60:96:00:b3:e2:67:
96:80:61:66:f4:06:d1:25:55:00:ac:17:ef:e8:00:9f:81:f9:
9e:1c:cd:0e:b4:ac:18:3a:67:e6:74:8e:22:cc:b9:a8:84:43:
b2:2e:2d:5c:a2:12:b4:4c:6e:1d:37:da:80:be:50:cd:8d:d7:
95:d7:93:82:50:6e:98:4f:54:68:17:b7:26:75:03:48:cb:53:
b2:fb:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:25 2026 by rpki-client